Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
File:                     lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft (raw, json)
Hash identifier:          4+dHVOuSEZt/MEbXouE1k4OnlQws0YfF0JILr0mwuCk=
Subject key identifier:   EF:C9:4A:F2:A2:88:F1:EF:23:D4:67:03:AC:42:9A:5C:3A:CB:C1:F9
Authority key identifier: 94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38
Certificate issuer:       /CN=A917D7F2/serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838
Certificate serial:       357A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
Manifest number:          3572
Signing time:             Tue 04 Aug 2026 14:37:56 +0000
Manifest this update:     Tue 04 Aug 2026 14:37:56 +0000
Manifest next update:     Tue 11 Aug 2026 14:37:56 +0000
Files and hashes:         1: lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl (hash: lSNAyv+g4nnw/VeO5kPxJADhtyoTLcGklBKonK1ybFM=)
                          2: 35FC192C272C11ED9E64C718C4F9AE02.roa (hash: 5gb2IR3RmAQfetfMD3Cf2kp33anqtncaV+qXbOqkB4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl
                          rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 14:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13690 (0x357a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D7F2, serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838
        Validity
            Not Before: Aug  4 14:37:56 2026 GMT
            Not After : Aug 11 14:37:56 2026 GMT
        Subject: CN=6a71f944-a4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:33:c6:3b:29:07:71:45:95:8a:fc:81:7b:03:
                    45:a9:6e:42:57:06:dd:06:7d:a7:a9:63:ad:a8:ff:
                    c9:4f:c2:00:d9:7e:ab:e3:17:fd:33:f8:29:06:2b:
                    78:e0:08:00:d7:8c:b9:33:ce:f4:06:f7:73:b6:0f:
                    82:c6:b3:84:95:6d:a2:e4:64:de:c6:99:14:c8:66:
                    d9:64:99:a1:d7:33:3d:b2:c9:4f:3b:cb:77:81:55:
                    d8:76:c1:cf:7c:93:fb:b5:5d:82:f8:05:9f:e5:17:
                    52:32:96:2a:31:26:1f:fa:da:b5:66:07:56:35:54:
                    42:a5:f9:dd:4a:33:c7:41:7e:07:e2:19:c9:fa:12:
                    f8:c5:73:88:4c:46:bf:b0:a4:eb:43:19:11:70:d0:
                    0b:f2:74:c9:2d:c8:aa:a1:5f:c1:67:b8:c6:22:0e:
                    d5:ac:68:b0:57:8f:a8:00:61:3f:a4:0a:29:fc:93:
                    72:81:da:32:ae:f1:81:62:b2:18:d8:af:6d:29:9e:
                    cc:57:02:75:86:49:cb:07:66:a6:45:09:92:37:ab:
                    69:1c:0c:d2:6c:83:be:a6:3f:98:9c:a4:f9:f6:71:
                    c4:80:53:31:3f:d3:47:6a:51:55:b1:20:4b:38:ae:
                    71:b9:b0:d5:ec:24:8d:50:df:6a:d0:65:aa:c6:e0:
                    fa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C9:4A:F2:A2:88:F1:EF:23:D4:67:03:AC:42:9A:5C:3A:CB:C1:F9
            X509v3 Authority Key Identifier:
                keyid:94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c2:d7:0b:b5:62:97:ee:9d:d0:c0:e3:7c:f7:26:b2:42:5c:
         d8:1f:a2:18:97:bf:53:f5:a4:20:49:d1:8f:05:be:5a:94:0e:
         e1:58:7d:b6:f6:d4:3e:1c:5d:73:04:de:1c:99:c1:46:06:df:
         8b:f4:fb:36:b5:31:a5:e0:08:6d:57:53:a9:e2:44:69:f3:5d:
         d4:5c:96:47:1c:6d:36:04:73:b1:99:69:d5:3c:cc:70:ab:6f:
         fa:ac:5f:7e:ce:5e:80:e0:af:79:a9:ca:54:ae:cf:d3:25:26:
         f1:bb:95:0c:2c:67:13:b1:45:7f:2f:c9:a0:47:d1:7f:b7:4e:
         b3:e0:7a:11:25:6e:79:4c:b0:dc:6b:d1:4b:09:67:b4:4b:fc:
         9d:2e:52:8b:ea:6f:c0:8e:51:11:fe:dc:27:9a:69:d5:51:9c:
         e3:83:ac:3a:ae:2c:63:f9:82:db:77:5c:37:19:8e:70:a8:0d:
         49:4c:ec:84:81:36:d7:49:a5:73:7d:ec:eb:80:1c:12:02:b8:
         d3:ee:5c:00:5b:e5:b8:27:97:3e:06:e4:75:44:96:a5:d3:b9:
         89:d8:7c:9f:c3:1a:a6:2b:b8:a3:e4:ea:db:c1:b1:73:09:77:
         3b:2d:ea:97:78:9c:27:48:12:02:8f:f1:37:7a:14:f5:64:95:
         bc:d2:f4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 22:47:34 2026 by rpki-client