Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
File:                     l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json)
Hash identifier:          Z7Z/X8gVPrrIdwSLoq1bHtlmixJq6VImvNzdKvjBVlw=
Subject key identifier:   D5:AE:EF:9E:0C:F7:D3:45:D1:CD:95:73:90:C1:6B:87:6A:C8:4D:BD
Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA
Certificate issuer:       /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA
Certificate serial:       0C1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
Manifest number:          0C03
Signing time:             Sat 04 Jul 2026 18:57:17 +0000
Manifest this update:     Sat 04 Jul 2026 18:57:17 +0000
Manifest next update:     Sat 11 Jul 2026 18:57:17 +0000
Files and hashes:         1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: 2qdbOjU0FBNt2+UwWBKxXcqpiWbclYq21D+B1O3+JkA=)
                          2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: 9OFSK2ChXxMiDwCW+T5F/rViLCQZW9lND/if0koTJTw=)
                          3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: hU7OMHsTj6hL7vgEEXYSl72Q/STHSktutJc1O2+u9S4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl
                          rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 18:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3098 (0xc1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA
        Validity
            Not Before: Jul  4 18:57:17 2026 GMT
            Not After : Jul 11 18:57:17 2026 GMT
        Subject: CN=6a49578d-4289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e8:d5:45:2b:55:ed:9f:34:c5:43:db:94:f9:
                    2f:04:57:ea:ca:f3:e0:0c:37:06:e3:3e:2c:af:ed:
                    c9:37:9a:a1:3d:c8:27:bd:ad:b2:82:de:2c:4d:55:
                    55:7d:9a:a2:22:fb:8f:96:39:ad:2f:17:4c:3c:9c:
                    a4:97:82:7d:0e:1f:c3:0a:e0:66:5d:7c:fb:a0:7d:
                    a3:38:f7:1b:ea:48:46:b7:56:30:74:9b:77:ea:02:
                    2b:d6:2d:25:4b:1f:8b:90:8c:9c:2a:1b:4b:7a:6e:
                    c3:25:7a:3c:67:3f:09:e4:ed:21:3d:3f:a0:bb:5e:
                    87:7e:42:f5:61:f8:1d:e3:91:29:9f:02:a9:af:15:
                    c5:44:fc:1b:d3:9e:87:07:a8:8e:a4:24:78:e1:f9:
                    b1:e0:63:df:11:36:b8:d1:03:2e:23:57:7f:4e:e8:
                    1e:40:60:29:d2:02:9f:10:ec:84:d0:8a:07:aa:23:
                    35:f3:32:80:08:25:89:38:8f:54:e8:bf:df:ab:f9:
                    b2:9a:a1:f4:91:98:66:fb:d0:b5:8a:f3:56:c0:83:
                    d7:9d:6e:f9:33:1c:71:2d:fb:53:1e:53:38:a1:7a:
                    5e:2e:e0:92:24:40:f5:9b:ad:c5:22:3c:4e:8a:bd:
                    6b:ee:8a:ee:b9:a1:b1:6e:da:a0:de:f5:59:4f:18:
                    ed:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AE:EF:9E:0C:F7:D3:45:D1:CD:95:73:90:C1:6B:87:6A:C8:4D:BD
            X509v3 Authority Key Identifier:
                keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:4d:44:38:a4:e0:e5:77:73:22:54:3a:3e:5f:65:fd:65:3c:
         73:4b:20:01:dc:18:5b:70:7e:bb:8c:35:77:00:8e:f8:18:af:
         21:36:43:28:24:ba:29:61:07:54:52:5b:d9:01:d0:4f:d2:37:
         0f:28:02:46:93:78:42:7b:42:a4:ee:f6:f3:73:a6:08:e5:a1:
         f9:8e:39:a5:67:15:af:f4:20:76:02:83:7e:9a:ae:90:c4:93:
         5a:97:23:8c:9c:35:e9:9b:a3:6b:9b:95:6d:9a:0d:41:00:07:
         91:31:77:30:32:3a:0d:0d:62:85:fd:55:2f:c0:16:58:37:ec:
         be:c5:28:97:67:40:60:f7:41:e3:ef:1a:5c:ec:49:54:8a:1f:
         b9:4a:30:2e:19:a8:4b:cd:ba:90:72:f8:f3:4e:61:48:da:81:
         25:4e:d4:ee:54:2c:67:67:cb:f4:ba:e4:51:48:04:b3:23:9e:
         a9:7d:c5:30:7a:aa:22:d3:f1:a2:19:b2:a1:5d:67:a8:fd:14:
         ed:75:0f:4f:52:c1:1b:f5:ba:48:45:4e:b1:b5:d3:8a:4d:56:
         4b:69:ef:ca:77:94:29:a7:ce:5a:d0:15:8d:85:18:39:cc:a4:
         f2:cf:eb:0a:48:60:ad:79:ca:02:3b:d2:49:27:fa:d8:b8:37:
         81:12:04:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3
RDEwMkVBQ0EwHhcNMjYwNzA0MTg1NzE3WhcNMjYwNzExMTg1NzE3WjAYMRYwFAYD
VQQDEw02YTQ5NTc4ZC00Mjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkOjVRStV7Z80xUPblPkvBFfqyvPgDDcG4z4sr+3JN5qhPcgnva2ygt4sTVVV
fZqiIvuPljmtLxdMPJykl4J9Dh/DCuBmXXz7oH2jOPcb6khGt1YwdJt36gIr1i0l
Sx+LkIycKhtLem7DJXo8Zz8J5O0hPT+gu16HfkL1Yfgd45EpnwKprxXFRPwb056H
B6iOpCR44fmx4GPfETa40QMuI1d/TugeQGAp0gKfEOyE0IoHqiM18zKACCWJOI9U
6L/fq/mymqH0kZhm+9C1ivNWwIPXnW75MxxxLftTHlM4oXpeLuCSJED1m63FIjxO
ir1r7oruuaGxbtqg3vVZTxjtPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNWu754M
99NF0c2Vc5DBa4dqyE29MB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC
NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0
QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKE1EOKTg5XdzIlQ6Pl9l/WU8c0sgAdwYW3B+u4w1dwCO+BivITZDKCS6KWEH
VFJb2QHQT9I3DygCRpN4QntCpO7283OmCOWh+Y45pWcVr/QgdgKDfpqukMSTWpcj
jJw16Zuja5uVbZoNQQAHkTF3MDI6DQ1ihf1VL8AWWDfsvsUol2dAYPdB4+8aXOxJ
VIofuUowLhmoS826kHL4805hSNqBJU7U7lQsZ2fL9LrkUUgEsyOeqX3FMHqqItPx
ohmyoV1nqP0U7XUPT1LBG/W6SEVOsbXTik1WS2nvyneUKafOWtAVjYUYOcyk8s/r
CkhgrXnKAjvSSSf62Lg3gRIEyw==
-----END CERTIFICATE-----
Generated at Sun Jul 5 08:39:37 2026 by rpki-client