Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
File:                     LzabRI0hcVlrosk82-JY6vMxdZQ.mft (raw, json)
Hash identifier:          9HlcMz+ILUOTlRu7UTejZ7pnQxASem/FTjiwMmwJitk=
Subject key identifier:   59:21:E6:C1:7A:4B:B1:3F:51:E0:27:E8:97:F0:6D:3B:45:1D:1C:63
Authority key identifier: 2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94
Certificate issuer:       /CN=A9161A5A/serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594
Certificate serial:       079E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
Manifest number:          078B
Signing time:             Mon 20 Jul 2026 22:12:05 +0000
Manifest this update:     Mon 20 Jul 2026 22:12:05 +0000
Manifest next update:     Mon 27 Jul 2026 22:12:05 +0000
Files and hashes:         1: LzabRI0hcVlrosk82-JY6vMxdZQ.crl (hash: cqWqvgt0x1utyAE73sqRlJae6n5nE+wzY9x+k7nQp/o=)
                          2: 79D611D265E711EBB6FD8A0DC4F9AE02.roa (hash: lSWEMS2uEe71aU2Bsm1/P/1Jz0cRE4RsE/WEknnL1vU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl
                          rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 22:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1950 (0x79e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A5A, serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594
        Validity
            Not Before: Jul 20 22:12:05 2026 GMT
            Not After : Jul 27 22:12:05 2026 GMT
        Subject: CN=6a5e9d35-f765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:89:bd:fd:58:e8:6c:87:95:c4:06:1a:e9:ed:
                    ce:c2:06:1b:8b:04:16:1d:36:9b:78:cd:76:d8:16:
                    8c:1a:5f:8e:68:9e:64:2d:10:46:7c:4e:45:e0:a8:
                    b2:49:f0:44:0b:8d:c5:97:1b:07:af:3b:c3:be:13:
                    70:e2:4d:49:e7:2b:91:16:14:89:9d:49:1a:07:2d:
                    cc:27:a1:f3:96:41:1f:49:9b:7b:70:a9:6b:79:8a:
                    3d:79:79:59:38:3b:e3:95:ea:48:24:12:73:6b:1e:
                    d1:f3:ad:5d:bb:9a:07:b9:f6:25:15:3d:9e:00:41:
                    97:7a:e1:af:e4:1f:a0:a4:66:8c:64:55:2b:35:15:
                    1f:2e:2a:96:30:66:fe:f6:23:0c:b7:2b:cb:29:4a:
                    5a:c2:de:f0:2e:ea:52:2e:af:cf:11:7e:cf:d3:2b:
                    c3:40:68:8a:48:86:f3:41:c0:b1:2a:51:63:88:f6:
                    9f:c3:54:91:5b:71:b2:4c:b4:62:62:ad:2f:2d:c1:
                    5a:b6:cb:05:f9:65:d3:18:e6:d4:54:fc:ca:1d:95:
                    0e:a9:79:56:87:65:93:a9:2f:a3:04:5e:f9:3b:3c:
                    e2:ca:ce:ad:49:97:6e:ca:1e:62:c9:a3:17:19:5e:
                    68:1a:d4:bb:43:c7:e6:54:76:81:ff:ec:7b:22:ec:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:21:E6:C1:7A:4B:B1:3F:51:E0:27:E8:97:F0:6D:3B:45:1D:1C:63
            X509v3 Authority Key Identifier:
                keyid:2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1b:43:02:c9:83:38:8c:9a:cd:75:7e:2f:a1:ab:59:46:b5:
         02:cd:27:3a:a5:c4:4d:70:74:67:1b:f2:8a:44:77:56:5e:01:
         d1:c4:12:41:1d:28:bc:ca:16:be:4c:a3:d6:99:88:7b:4d:2e:
         b0:95:aa:e4:15:44:d8:60:ca:76:e8:2e:d7:43:bd:54:b2:7b:
         28:5d:d3:2d:a9:ba:79:f4:8c:27:06:50:07:88:ff:06:10:ac:
         0e:e4:3b:33:06:87:f2:ec:df:19:88:2d:8e:4b:bd:fb:a4:8c:
         1e:2c:57:e8:72:be:51:1c:f6:0c:aa:fe:72:17:b4:bd:4a:da:
         64:f1:2f:61:6b:69:bf:4f:f1:01:c0:1d:e6:ce:2c:0f:07:67:
         58:aa:c6:47:db:c5:9b:4c:ca:9d:7d:c5:3c:04:27:f2:d9:54:
         67:84:dc:31:10:66:fd:e8:1e:e7:8f:dc:64:ef:ed:42:0b:84:
         3c:61:55:a0:9b:bf:3d:59:0b:bf:25:97:9f:de:0c:4e:87:76:
         a4:80:59:3f:17:bd:80:48:54:c8:7f:53:88:31:82:58:ae:e1:
         7f:41:0f:65:00:e0:b8:80:ec:97:04:92:44:0c:ea:47:8b:9d:
         19:3b:40:f5:f5:37:a1:44:55:a2:f8:7e:78:39:96:22:18:d1:
         9a:ea:f0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:05:37 2026 by rpki-client