Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
File:                     l8hXp1yabimLCaBh2PfOEHv50zM.mft (raw, json)
Hash identifier:          zqiYi6s3qSQFfZ/aYgUA/3tLF8CptuPIhNulVoTD1vE=
Subject key identifier:   E5:B7:6B:9B:A6:DC:1A:17:4A:AB:9F:A4:E3:B9:31:8B:8A:F7:1A:54
Authority key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
Certificate issuer:       /CN=A918E4B7/serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
Manifest number:          99
Signing time:             Wed 22 Jul 2026 23:53:25 +0000
Manifest this update:     Wed 22 Jul 2026 23:53:25 +0000
Manifest next update:     Wed 29 Jul 2026 23:53:25 +0000
Files and hashes:         1: l8hXp1yabimLCaBh2PfOEHv50zM.crl (hash: +I+qYyd82d0emUl+vHx7saALRLuVnu6T0hCfos66FSw=)
                          2: B8E35E8AD8C811F08AAE626967D3641D.roa (hash: wByl5sWHW/uk2KewJI/ZeESKskm3ECQG9nciHeh8yK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl
                          rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
        Validity
            Not Before: Jul 22 23:53:25 2026 GMT
            Not After : Jul 29 23:53:25 2026 GMT
        Subject: CN=6a6157f5-d98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:65:d6:f0:81:d7:a6:0c:63:65:7e:b4:f0:
                    8e:66:42:37:10:c2:0b:15:8a:11:7e:f6:bd:71:ed:
                    f5:2c:36:1f:08:ac:ad:78:25:b9:8a:d7:4a:f9:fb:
                    19:ad:58:5d:a4:d4:dd:96:14:08:f5:d3:ee:02:82:
                    e1:83:dc:1d:b2:f6:ca:ed:2a:6d:71:1a:42:c3:2d:
                    c1:d6:6d:32:64:ca:a6:e1:e6:3b:0a:3b:ad:3f:1e:
                    2c:77:7a:ba:5c:b8:ab:a2:c7:6a:5d:fb:77:29:79:
                    af:f8:c2:56:99:12:df:64:7f:36:32:b2:26:a6:97:
                    04:e7:27:69:82:2d:a3:2c:98:ff:c7:36:79:c6:c9:
                    d5:7d:1e:7f:8d:5d:ca:00:b7:af:55:70:04:82:e8:
                    8f:29:0f:c2:8e:93:a6:c9:cc:2f:83:9c:d1:63:bc:
                    9c:31:12:4c:0e:3b:10:e0:e8:92:5d:09:ea:af:4d:
                    84:6b:02:fc:14:72:6c:64:46:ee:4c:cc:39:25:5e:
                    2f:40:ca:fa:53:0f:af:0a:87:65:ad:06:2c:8b:32:
                    36:b5:f7:7e:07:d7:06:7d:a0:31:1a:a1:7f:82:16:
                    71:66:25:98:dc:ee:41:fb:8a:89:8b:72:7e:28:9a:
                    2e:de:a5:2c:21:c6:ee:d7:53:80:f8:71:47:b4:00:
                    12:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B7:6B:9B:A6:DC:1A:17:4A:AB:9F:A4:E3:B9:31:8B:8A:F7:1A:54
            X509v3 Authority Key Identifier:
                keyid:97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:78:09:41:3e:3b:e9:ca:cd:de:7a:e9:63:82:9c:6c:c8:d3:
         6d:37:02:0b:85:24:bf:40:db:13:d4:55:7b:4b:64:a5:0b:18:
         75:b0:22:65:22:b5:5d:f8:2b:8d:58:15:05:80:e7:8e:81:e7:
         11:16:6a:a0:95:88:54:1f:d6:a1:ca:7a:13:a8:bb:eb:9e:de:
         a5:4a:28:88:ee:1e:90:6c:5e:df:43:d4:41:e8:48:47:32:cb:
         c1:4c:8d:d6:b7:7a:ea:8f:fa:f0:9f:78:60:39:fa:7e:ed:02:
         2c:78:cf:a6:f7:48:f3:5d:f1:f4:10:3d:0d:78:cc:8c:5c:73:
         d6:17:78:c0:f9:45:3c:f1:86:ec:c6:aa:83:e4:05:08:f7:2a:
         75:c0:5a:da:32:ba:c9:b0:af:24:2b:85:da:e2:9a:58:37:e2:
         8b:bb:b8:07:37:b3:98:2b:c3:92:a1:27:4d:aa:1e:7a:fa:4d:
         c8:38:04:67:3d:b3:22:65:7e:51:c2:a6:4b:44:c9:53:c1:49:
         d6:cc:e1:3f:22:60:cd:9a:11:93:81:30:58:99:6b:a4:97:8d:
         47:e7:cb:58:77:34:eb:2b:ed:6d:b1:58:99:0d:60:c1:2c:aa:
         b5:51:75:60:05:1c:d7:68:f4:03:97:51:86:85:20:35:50:f4:
         d0:49:0b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:51 2026 by rpki-client