Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File:                     lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier:          4a+9IgFGmH8VY6eYn7l49doSn55R9823fgnHH2rmRVY=
Subject key identifier:   E6:7C:FC:E9:22:2C:F3:85:C5:6D:5C:79:0F:F8:A9:C0:4A:56:81:6C
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer:       /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial:       0243
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number:          0835
Signing time:             Sun 26 Jul 2026 23:44:15 +0000
Manifest this update:     Sun 26 Jul 2026 23:44:14 +0000
Manifest next update:     Sun 02 Aug 2026 23:44:14 +0000
Files and hashes:         1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: 8kHlXx0RZ1N+XTXlsGZOE96TMuWluMwdUZsh6RmzOQs=)
                          2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: n7OEkS+f68NF4N/p9/uhdtvyYSY3OrDptN85GWEeXDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
                          rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
        Validity
            Not Before: Jul 26 23:44:14 2026 GMT
            Not After : Aug  2 23:44:14 2026 GMT
        Subject: CN=6a669bcf-ab45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a4:3e:0a:a6:46:17:be:b3:fe:0b:41:f5:a9:
                    b3:06:66:33:8b:87:9b:04:de:98:09:2e:1b:a1:4f:
                    80:b6:e4:32:66:8e:73:47:60:45:11:84:20:42:a0:
                    28:ea:95:7a:2c:05:18:e4:94:a9:2b:19:cf:34:b9:
                    ad:9f:54:9f:52:e8:29:9e:b2:43:60:4b:fb:17:7b:
                    95:2e:07:06:bc:12:96:7a:d3:02:92:ed:53:82:0a:
                    c4:fb:29:94:26:e5:11:eb:ba:ef:1a:d4:17:6b:d4:
                    6c:47:47:58:2e:3b:88:59:b4:ad:1e:81:4d:86:f8:
                    43:02:a3:7a:87:00:7f:df:70:50:ec:8e:68:3a:c2:
                    24:26:c1:df:cf:85:92:16:32:b0:5a:f4:82:18:ef:
                    47:2a:ce:64:ec:92:39:dd:34:8c:13:bf:6e:de:06:
                    33:0c:9a:38:5b:29:e3:aa:48:e4:2e:91:19:3e:c1:
                    a4:9b:ff:e1:f0:d6:90:6c:9a:05:20:29:fb:14:b4:
                    7e:69:2c:d6:63:b4:8b:c3:05:04:8e:bb:20:ce:e4:
                    3a:c2:0c:48:0e:14:de:57:dc:38:d5:e1:6d:ab:c3:
                    19:a4:75:63:61:04:93:2c:28:00:7b:66:c8:ec:54:
                    e5:1f:57:6a:6e:0e:be:cb:76:0d:3c:bc:c5:c3:c4:
                    e3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7C:FC:E9:22:2C:F3:85:C5:6D:5C:79:0F:F8:A9:C0:4A:56:81:6C
            X509v3 Authority Key Identifier:
                keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:43:2d:4d:a3:c9:75:c4:8d:8f:6a:46:0a:2c:f6:b6:a8:1b:
         5b:3b:18:57:8a:1e:73:f2:b8:fa:9c:c7:0b:4a:bb:68:e6:d6:
         ce:a6:36:04:07:4e:a2:68:d3:73:83:84:a3:c5:19:e5:bb:75:
         ac:fa:c5:59:e1:a4:9f:25:1f:33:72:3a:b5:70:24:81:6c:b8:
         0c:2d:b5:82:eb:b4:e8:2d:71:31:f2:4b:3b:dc:d7:c3:8a:17:
         6b:ee:7f:34:4e:77:c9:b8:e6:29:79:12:70:e3:4c:c1:d1:12:
         07:b9:0c:61:30:c5:8a:29:51:13:e5:1c:8b:df:13:a9:98:04:
         fd:01:dd:e8:63:75:0e:38:2a:9d:5f:dd:58:f4:b5:24:a2:21:
         61:69:82:db:e6:d3:ec:98:f7:3c:14:c7:39:6f:6e:f1:61:4b:
         44:d6:e7:b1:7c:e3:05:7b:12:11:99:21:f0:cc:18:84:6f:a8:
         79:a5:9b:a9:0a:04:1e:a8:60:34:19:6c:3b:3e:17:b8:a2:31:
         f0:82:9f:fb:28:40:49:e6:27:80:01:44:cd:de:a1:b8:da:bd:
         69:a2:65:fb:39:98:e5:00:fb:59:ba:90:e1:bf:77:46:47:74:
         51:e7:4b:d1:16:ca:18:a9:21:04:f2:d7:6e:b7:77:be:16:68:
         92:52:ef:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 02:53:10 2026 by rpki-client