Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft
File:                     lslPY1zHgehZd0oRr3Nii2CmVs8.mft (raw, json)
Hash identifier:          7BngSEfJefNynMYTbEnGBqs1S0nr14AQxk7ii6o7iPY=
Subject key identifier:   31:1A:F5:B0:E6:AD:90:93:AA:A5:9C:4F:62:27:40:18:8F:74:03:99
Authority key identifier: 96:C9:4F:63:5C:C7:81:E8:59:77:4A:11:AF:73:62:8B:60:A6:56:CF
Certificate issuer:       /CN=A9181803/serialNumber=96C94F635CC781E859774A11AF73628B60A656CF
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft
Manifest number:          59
Signing time:             Tue 21 Jul 2026 10:04:29 +0000
Manifest this update:     Tue 21 Jul 2026 10:04:28 +0000
Manifest next update:     Tue 28 Jul 2026 10:04:28 +0000
Files and hashes:         1: lslPY1zHgehZd0oRr3Nii2CmVs8.crl (hash: 4lSYGL3JMUEjcnUc1qMBASQ43fODBSyMZULOjx22gwk=)
                          2: 38D7A57E02B311F1B5A042A33E3D8C67.roa (hash: i+cONdh4kL/zy5o+bEmmDqg3gYQAN5WXBgxD3TrRI7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.crl
                          rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 10:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181803, serialNumber=96C94F635CC781E859774A11AF73628B60A656CF
        Validity
            Not Before: Jul 21 10:04:28 2026 GMT
            Not After : Jul 28 10:04:28 2026 GMT
        Subject: CN=6a5f442d-1c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e7:8d:d0:d6:86:54:b2:10:36:2a:34:05:84:
                    f4:a6:81:ff:9c:f5:9c:24:b8:23:d6:29:0f:eb:7b:
                    ee:83:16:2a:14:ed:cd:88:af:a6:3b:5c:f0:5c:b1:
                    5b:15:a6:6b:8e:44:e1:69:c2:8e:4d:9b:ec:f9:75:
                    01:3c:60:03:ca:89:aa:64:fe:22:61:87:15:83:87:
                    fa:4f:e3:b7:77:e1:27:c0:d8:c8:63:68:13:d9:02:
                    94:b3:15:d8:d8:67:6f:13:3d:91:7e:64:97:33:e3:
                    0c:b3:df:d7:7e:2e:bd:f7:65:7e:6a:c6:05:d6:06:
                    77:02:de:ac:cd:46:0e:a1:8f:b2:1a:f9:88:14:4b:
                    76:a3:87:96:a3:59:8f:54:9f:a5:03:a5:9e:46:9c:
                    3c:e1:8b:04:12:f4:f6:76:50:4b:85:66:31:9d:43:
                    8e:9d:6a:29:4b:e7:d3:19:30:33:11:69:64:05:10:
                    cc:a0:50:b1:ec:be:b7:c0:18:89:e5:52:93:89:ca:
                    6d:27:11:83:d2:f8:78:0f:b4:99:e6:9e:e9:15:6c:
                    41:ee:95:d9:11:79:6d:df:de:89:a1:c6:e7:58:02:
                    c9:2f:8c:92:f0:d9:fa:aa:41:24:89:85:c3:50:cc:
                    f5:16:8f:fc:0f:2c:1a:e0:d0:d8:9c:e3:17:91:2a:
                    f0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1A:F5:B0:E6:AD:90:93:AA:A5:9C:4F:62:27:40:18:8F:74:03:99
            X509v3 Authority Key Identifier:
                keyid:96:C9:4F:63:5C:C7:81:E8:59:77:4A:11:AF:73:62:8B:60:A6:56:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:00:6e:a7:47:1e:a6:10:9f:fe:2d:00:f5:0c:7d:f6:57:2f:
         5d:9c:08:69:4d:5e:a4:ca:1f:79:06:64:4f:02:17:2e:36:f8:
         dc:fe:85:1c:93:85:69:fd:94:79:29:b3:ab:e0:af:77:17:54:
         ed:ec:c3:1d:f2:8b:5f:4e:c6:da:83:27:9c:6b:38:39:88:b6:
         64:bf:63:ff:77:e5:4e:ae:ea:be:3d:e0:43:3d:8b:ae:82:cd:
         21:7f:0d:9f:a6:79:2b:69:4f:19:0c:cf:95:0e:1a:95:b2:09:
         68:1f:63:19:3a:e5:6e:7e:f1:ab:27:85:23:ca:c6:66:72:59:
         e9:43:24:f8:b6:31:23:ad:30:05:e4:ee:98:3d:23:90:2a:8a:
         c4:86:55:e3:21:d3:79:2c:d9:bb:aa:7a:9a:0c:96:7c:4a:0d:
         f7:03:e1:b5:53:3c:dd:8d:67:12:86:8c:dd:93:16:c6:41:36:
         a9:c9:a2:86:01:ab:be:93:ac:f8:d6:90:dd:4f:2c:62:68:e3:
         4f:d5:50:11:ff:6b:12:32:08:f8:e5:46:b6:e6:e2:18:42:c8:
         f6:55:9e:76:7d:0d:3d:ba:46:84:02:00:c6:59:cd:68:35:3e:
         4d:96:32:e5:14:4d:6d:e6:87:64:7f:c9:90:72:7c:5e:83:ba:
         df:f7:fe:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:59:30 2026 by rpki-client