Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
File:                     L0yMSsxFXG1aSQxAkLOjUqivHLU.mft (raw, json)
Hash identifier:          SbVxoa/McjG82dgA1G6Yu9akkwqXQs5i3zvOFU/GRvg=
Subject key identifier:   5B:7B:77:79:82:6D:49:DD:31:5D:CA:41:E0:ED:AB:D5:94:66:A7:52
Authority key identifier: 2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
Certificate issuer:       /CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
Certificate serial:       0513
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
Manifest number:          0505
Signing time:             Wed 19 Aug 2026 00:03:03 +0000
Manifest this update:     Wed 19 Aug 2026 00:03:02 +0000
Manifest next update:     Wed 26 Aug 2026 00:03:02 +0000
Files and hashes:         1: L0yMSsxFXG1aSQxAkLOjUqivHLU.crl (hash: JYwlgOsQjMuk/3bL59nZQqqz3RiqWXEaNRGgyEHjZSc=)
                          2: BD6C86326AEC11ECB61ECF30C4F9AE02.roa (hash: Cnel+OeT3oP8Ba57DN2AfJdE9d8ywFeBBz6sL8SdLcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl
                          rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1299 (0x513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130128, serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
        Validity
            Not Before: Aug 19 00:03:02 2026 GMT
            Not After : Aug 26 00:03:02 2026 GMT
        Subject: CN=6a84f2b6-4d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:bd:22:ef:8e:63:3a:88:87:68:f6:aa:31:
                    ba:52:f2:99:d8:1b:d2:be:25:a5:92:98:17:81:52:
                    02:24:99:fa:20:d3:28:86:25:5c:15:f1:79:90:66:
                    2a:34:21:85:0b:41:f5:07:8e:b9:ac:80:0d:a0:ce:
                    8a:b4:8c:6f:3a:94:20:e0:0a:18:a3:1f:db:d5:86:
                    5a:3f:d7:27:a9:b0:31:79:a6:c7:3b:66:1d:0b:eb:
                    cc:cf:97:d1:33:46:a2:22:02:35:a1:38:27:b6:6e:
                    ec:4c:82:2e:70:ab:d4:85:c0:66:3d:07:00:83:32:
                    8d:75:bf:76:55:aa:ad:f6:b3:b0:c2:24:b4:1b:e3:
                    af:eb:5c:5d:4e:47:5e:92:ca:14:0a:df:1c:ac:1d:
                    40:8e:76:8b:08:13:0e:b1:5a:45:a9:ec:a3:c5:53:
                    d8:4c:b2:3b:29:dc:6c:d7:82:e6:22:66:d4:d8:61:
                    44:15:05:76:49:88:54:0c:8f:8c:35:d2:7b:30:77:
                    80:cb:f1:90:53:36:b6:86:15:6c:5d:b6:ea:51:f3:
                    dc:bf:0b:ea:bf:e2:4d:8b:fe:72:6a:e4:3b:1b:6d:
                    9f:d1:ca:6b:47:f2:7a:75:88:e5:66:c0:75:65:0c:
                    3e:ae:d6:14:ed:38:b9:74:43:36:a9:62:34:8f:9b:
                    3b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7B:77:79:82:6D:49:DD:31:5D:CA:41:E0:ED:AB:D5:94:66:A7:52
            X509v3 Authority Key Identifier:
                keyid:2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:53:c7:50:7c:8c:56:57:3f:b3:52:41:64:a0:2d:63:15:93:
         0a:25:32:98:e6:e5:16:49:80:a9:5b:18:58:db:36:50:a3:1f:
         70:40:64:f8:9b:8a:47:77:8a:1a:16:44:20:90:0e:73:be:24:
         9c:3b:74:6e:ec:99:26:9c:5b:fb:2e:10:9e:46:b1:65:12:5d:
         b8:ab:7f:69:68:fa:82:45:f4:61:84:fd:5c:f4:48:03:a2:49:
         2e:39:00:d4:17:e1:b5:59:5e:85:57:15:49:5e:59:d4:7b:57:
         5b:e4:a1:29:36:19:0b:ef:f6:82:51:10:5d:67:b6:7e:2f:fe:
         8a:31:0f:54:85:be:68:3e:7b:db:b7:72:7d:36:aa:bc:a7:63:
         cf:f9:e3:d8:59:8a:ef:d8:91:6a:c3:29:bf:c9:21:07:a8:8b:
         fd:c0:7a:c6:f5:27:df:42:49:32:a8:7a:81:d6:11:69:34:fa:
         7b:eb:b7:44:d5:94:80:dd:9c:8c:7c:d8:c3:75:4c:86:64:02:
         20:ec:51:74:27:dd:fd:cc:c6:70:d3:08:11:9a:d9:5a:5e:80:
         6e:4a:c7:c3:7f:02:5c:55:5d:b8:59:32:2c:4b:b7:df:8d:18:
         2f:60:c1:ae:19:90:9e:d2:39:36:80:1f:96:3a:10:20:f4:f1:
         5d:cd:12:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:15 2026 by rpki-client