Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft
File:                     lI_4don6lJEW9ffIAOsdcB5l43s.mft (raw, json)
Hash identifier:          IzSMJJUl/hKu6jXZDSAtSFii22IhFiJ6U+KRhLteqYc=
Subject key identifier:   60:3D:BF:3B:F4:DC:F9:95:48:07:27:37:70:94:58:A0:48:01:3C:1E
Authority key identifier: 94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B
Certificate issuer:       /CN=A9148EFA/serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B
Certificate serial:       0C5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft
Manifest number:          0C51
Signing time:             Tue 18 Aug 2026 18:59:00 +0000
Manifest this update:     Tue 18 Aug 2026 18:59:00 +0000
Manifest next update:     Tue 25 Aug 2026 18:59:00 +0000
Files and hashes:         1: lI_4don6lJEW9ffIAOsdcB5l43s.crl (hash: A9gZvbseGPu0Nr+9fN+ebPUIXkAmayrU1Y74nSY8T+4=)
                          2: 160F265C827311EDA56A8F30C4F9AE02.roa (hash: mJ7FNfAsY8ilIUPeznnb6nLSUZbSai5AntD3LtENWkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl
                          rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3163 (0xc5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148EFA, serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B
        Validity
            Not Before: Aug 18 18:59:00 2026 GMT
            Not After : Aug 25 18:59:00 2026 GMT
        Subject: CN=6a84ab74-9736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:13:cd:0e:8e:59:14:86:b3:cf:e1:e1:e1:
                    42:f1:41:9d:69:04:bd:f1:74:63:c4:5f:d1:73:25:
                    66:a3:3f:1d:94:56:85:ae:9a:72:e2:e5:3a:a5:96:
                    9b:7e:bf:ef:5c:3b:94:57:18:b4:28:d6:01:dd:cf:
                    5f:af:d5:48:f4:7e:99:d8:ca:fb:0b:9a:b4:d5:21:
                    2f:93:69:25:31:23:ce:11:2f:d5:69:af:be:be:a5:
                    c2:8b:88:12:1c:34:d3:d4:6d:75:a1:c9:94:c6:a3:
                    48:21:f8:49:c2:b5:a4:27:3d:24:24:0c:e4:f7:0e:
                    61:cb:f0:72:49:33:b1:89:d4:d5:43:18:69:14:92:
                    f2:7f:f8:ad:ca:81:96:f2:b0:6d:76:9f:46:b9:be:
                    be:09:83:18:ca:7c:bb:ba:41:93:5a:18:67:d7:90:
                    43:35:d5:bd:e8:0a:66:42:59:82:7a:22:2e:18:79:
                    93:cc:c6:1d:0a:cf:39:5d:ec:21:41:78:cb:4c:4f:
                    c9:67:25:86:b2:48:5a:f0:bd:87:a2:43:b3:c1:8f:
                    cc:90:58:7f:1d:69:14:08:4a:c0:91:28:cb:23:ef:
                    75:b1:94:16:ca:5d:85:6e:e6:25:30:6d:27:b2:35:
                    f5:b9:a6:56:ae:13:9d:8c:9b:38:26:7e:66:43:73:
                    e1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3D:BF:3B:F4:DC:F9:95:48:07:27:37:70:94:58:A0:48:01:3C:1E
            X509v3 Authority Key Identifier:
                keyid:94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:1b:ef:36:38:7c:7d:30:52:89:e0:09:89:0e:bf:5e:5f:9e:
         66:01:4e:7a:2a:d1:2d:88:aa:32:a4:d0:a3:36:49:9f:17:3c:
         9e:62:3b:b8:dd:8a:1d:4d:99:4d:f7:91:1f:01:e7:90:68:e5:
         94:35:64:76:6d:b6:8c:c7:a7:b5:7c:5b:78:e2:8c:ef:83:95:
         8a:ae:20:63:26:24:bd:ba:7b:8f:a0:d5:48:d2:1e:2b:0e:8d:
         fa:9b:10:e2:03:2b:8d:2a:be:b6:70:97:c0:1a:a7:8d:e8:3c:
         ff:06:0c:ff:92:ee:ea:5d:23:5d:a2:cf:79:6b:0a:13:07:cb:
         31:5b:cd:74:7d:f6:1e:7b:83:56:56:3f:ae:b8:d5:23:e2:81:
         c5:e9:4c:89:82:7d:da:ef:fe:44:3d:3c:09:9d:54:5e:5f:45:
         34:ac:76:c9:53:27:12:06:f7:a4:71:42:57:8d:33:f1:6b:6a:
         d2:65:25:7f:fc:29:04:b4:5d:de:48:4a:62:db:2d:b4:3b:3b:
         be:ff:52:b2:d5:f3:74:be:45:2c:c5:8a:fb:e6:fc:95:1f:78:
         7d:a0:70:58:0a:13:0a:a5:dd:0f:3a:0b:ff:bd:6b:04:2b:eb:
         94:89:12:29:28:5c:85:20:ee:9d:b6:e0:41:2b:ee:31:95:71:
         90:b0:8d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:20 2026 by rpki-client