Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
File:                     lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft (raw, json)
Hash identifier:          94n4Euk+MwRGIy/wk01M2JgNuPj1y4ciPTmx6yd9Lnw=
Subject key identifier:   23:FD:AD:BE:D4:AB:DC:95:90:21:C3:08:08:43:77:80:29:8A:D3:AB
Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
Certificate issuer:       /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Certificate serial:       02C7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
Manifest number:          02AD
Signing time:             Tue 21 Jul 2026 02:39:20 +0000
Manifest this update:     Tue 21 Jul 2026 02:39:20 +0000
Manifest next update:     Tue 28 Jul 2026 02:39:20 +0000
Files and hashes:         1: lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl (hash: 8Yo+9pGQGL3qHUxgaC3eVnv4limFh3W350RMMaDYOYg=)
                          2: 9ADB02A27F4E11EDB22F3582C4F9AE02.roa (hash: FgUnddlUujv2vo5PO2Kmcoqb9bIXnPrlSeL5f4C9RPk=)
                          3: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (hash: GciIQFKZEDGE9hgGALOITWN6X2hcQgqUIJI2iebUPt0=)
                          4: 5420A28C7F5211ED8A16EF81C4F9AE02.roa (hash: r3++Lv3YwYTeBuQ9YwxUmnM2K/MpPtlRtHpvGBG3Tew=)
                          5: 912586FA7F4F11ED96FDE369C4F9AE02.roa (hash: oDxhk7yyyS7XjpV32D/aM5gsCVmFn8goDNp/4neIOwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl
                          rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 02:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711 (0x2c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
        Validity
            Not Before: Jul 21 02:39:20 2026 GMT
            Not After : Jul 28 02:39:20 2026 GMT
        Subject: CN=6a5edbd8-1d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:01:e2:6b:79:17:f8:28:e9:d1:f2:df:81:
                    c1:65:4b:4c:24:fb:35:f8:3a:d2:42:ef:bf:e8:5e:
                    0b:ab:cb:24:8d:0c:0a:1e:17:b3:e0:32:29:2f:67:
                    05:02:60:87:73:82:c6:3d:9e:fb:ae:54:2e:53:c5:
                    3d:e6:ee:59:95:fb:6d:e9:ee:c3:bb:dd:b2:8c:d3:
                    c9:28:37:5f:db:e3:7b:da:ab:89:fd:a9:fe:4c:d4:
                    af:dc:1c:e9:ae:84:84:84:1f:99:d4:76:6a:85:40:
                    24:89:85:41:13:69:c3:d5:0d:db:cf:c3:58:10:08:
                    52:8e:bb:2e:e2:d9:3c:02:19:1f:5c:ec:41:77:bc:
                    cf:8a:bd:38:f8:db:d1:63:e2:58:2d:1a:97:82:fe:
                    b3:5b:52:4b:86:be:59:c0:c6:2c:bb:a0:51:f4:db:
                    6b:ac:47:9b:4e:fe:de:ec:f5:ec:2d:eb:f4:85:2a:
                    f6:23:6a:a8:25:04:70:36:91:9b:19:bc:67:07:a1:
                    f4:8a:33:e8:d1:fa:54:45:83:62:bf:70:0d:31:4e:
                    45:20:7e:85:36:ea:64:70:9c:88:e5:a6:4e:60:52:
                    0e:c7:f4:69:04:49:ac:c8:d6:82:66:7f:c0:a0:81:
                    86:f5:8f:25:19:c3:47:fc:53:04:a6:f4:3a:f8:2d:
                    5a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FD:AD:BE:D4:AB:DC:95:90:21:C3:08:08:43:77:80:29:8A:D3:AB
            X509v3 Authority Key Identifier:
                keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:01:e9:0b:3f:f7:9d:39:9b:c7:4f:50:7b:09:de:0e:2d:98:
         ee:c8:77:9e:96:0d:de:bb:2b:4c:02:88:c7:96:4c:28:a4:63:
         3b:1f:a7:a5:ca:62:f2:58:89:b1:e9:67:2d:55:81:10:d6:18:
         ab:ba:ea:fc:e6:43:8d:3d:ea:5b:0d:7a:97:99:0e:52:47:9b:
         43:a7:66:70:3c:cf:db:5e:f5:7b:94:04:1b:67:16:5b:1b:52:
         63:55:b0:d8:03:d4:41:83:5f:0a:0e:1c:99:d1:32:6e:c0:3a:
         67:74:a4:53:53:83:60:27:fd:81:3b:0e:0e:17:35:1b:59:b3:
         50:2f:7b:af:14:5c:9e:24:84:06:80:73:71:91:eb:3e:09:66:
         6b:e2:f6:2a:e8:f7:fc:4d:ef:04:10:22:19:7e:e9:6b:28:9a:
         ea:1d:be:fe:10:ba:36:b9:72:db:0e:08:aa:f7:06:ea:07:7c:
         81:d5:ac:4b:63:ed:ec:ba:c9:74:f6:64:6b:bc:75:02:45:cc:
         b3:2d:1a:7b:2d:8a:cf:66:3f:60:a3:98:3e:89:42:f4:66:1b:
         97:61:bc:b1:0c:25:26:ba:58:d6:45:29:5b:b5:35:0e:c6:f5:
         d7:15:8f:54:b7:5d:eb:f6:ab:41:d2:4c:5c:dc:59:57:49:c2:
         6a:4b:df:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNFM0YxMTAvBgNVBAUTKDk0M0QzRTEwQjhCQkUxMzhCNDc3MzQ1NTRCNjkwNTMx
MTBENDVCRTMwHhcNMjYwNzIxMDIzOTIwWhcNMjYwNzI4MDIzOTIwWjAYMRYwFAYD
VQQDEw02YTVlZGJkOC0xZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoIUB4mt5F/go6dHy34HBZUtMJPs1+DrSQu+/6F4Lq8skjQwKHhez4DIpL2cF
AmCHc4LGPZ77rlQuU8U95u5Zlftt6e7Du92yjNPJKDdf2+N72quJ/an+TNSv3Bzp
roSEhB+Z1HZqhUAkiYVBE2nD1Q3bz8NYEAhSjrsu4tk8AhkfXOxBd7zPir04+NvR
Y+JYLRqXgv6zW1JLhr5ZwMYsu6BR9NtrrEebTv7e7PXsLev0hSr2I2qoJQRwNpGb
GbxnB6H0ijPo0fpURYNiv3ANMU5FIH6FNupkcJyI5aZOYFIOx/RpBEmsyNaCZn/A
oIGG9Y8lGcNH/FMEpvQ6+C1alQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCP9rb7U
q9yVkCHDCAhDd4ApitOrMB8GA1UdIwQYMBaAFJQ9PhC4u+E4tHc0VUtpBTEQ1Fvj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi8zMDVFQjg3NjdD
REIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRUaTBkelJWUzJrRk1SRFVX
LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xEMC1FTGk3NFRpMGR6UlZTMmtGTVJEVVctTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0UzRi8zMDVFQjg3NjdDREIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRU
aTBkelJWUzJrRk1SRFVXLU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATwHpCz/3nTmbx09QewneDi2Y7sh3npYN3rsrTAKIx5ZMKKRjOx+npcpi8liJ
selnLVWBENYYq7rq/OZDjT3qWw16l5kOUkebQ6dmcDzP2171e5QEG2cWWxtSY1Ww
2APUQYNfCg4cmdEybsA6Z3SkU1ODYCf9gTsODhc1G1mzUC97rxRcniSEBoBzcZHr
Pglma+L2Kuj3/E3vBBAiGX7payia6h2+/hC6Nrly2w4IqvcG6gd8gdWsS2Pt7LrJ
dPZka7x1AkXMsy0aey2Kz2Y/YKOYPolC9GYbl2G8sQwlJrpY1kUpW7U1Dsb11xWP
VLdd6/arQdJMXNxZV0nCakvfTQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:36:18 2026 by rpki-client