Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.mft
File:                     LpFcOykbTBhp166WMYTR_Ql4e24.mft (raw, json)
Hash identifier:          GrRxd4ZisoULANvZdbhyZMgKpzMqgWbFY7+0czZoypU=
Subject key identifier:   C0:BD:EB:89:2D:FD:8B:83:EE:6A:0C:41:5F:02:0C:D3:F9:04:52:D8
Authority key identifier: 2E:91:5C:3B:29:1B:4C:18:69:D7:AE:96:31:84:D1:FD:09:78:7B:6E
Certificate issuer:       /CN=A9183B58/serialNumber=2E915C3B291B4C1869D7AE963184D1FD09787B6E
Certificate serial:       03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpFcOykbTBhp166WMYTR_Ql4e24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.mft
Manifest number:          02
Signing time:             Sun 05 Jul 2026 01:00:29 +0000
Manifest this update:     Sun 05 Jul 2026 01:00:28 +0000
Manifest next update:     Sun 12 Jul 2026 01:00:28 +0000
Files and hashes:         1: LpFcOykbTBhp166WMYTR_Ql4e24.crl (hash: tqOv+jTDXiWdVhXdt+FY1P4yjj0Yju3LCQZRtoXxRA8=)
                          2: E75BE0F0780C11F19D39A95459A30FBC.roa (hash: mfPn/tiTCBYiMY19wKcdtVlq4pxeYPFcwC935dAmnus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.crl
                          rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpFcOykbTBhp166WMYTR_Ql4e24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B58, serialNumber=2E915C3B291B4C1869D7AE963184D1FD09787B6E
        Validity
            Not Before: Jul  5 01:00:28 2026 GMT
            Not After : Jul 12 01:00:28 2026 GMT
        Subject: CN=6a49acac-9738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:10:6d:b7:04:71:75:10:b9:78:69:4a:64:6d:
                    ed:1f:f8:d8:77:6b:0e:ba:d1:91:22:ff:2a:61:16:
                    cc:4b:ac:c3:a7:0b:ff:7a:ee:a0:45:0b:9c:88:11:
                    76:a2:25:2e:b4:86:95:9f:c4:1e:30:4c:c2:b8:6f:
                    70:4c:29:16:e9:f4:b9:0e:43:28:67:14:2a:49:f0:
                    d3:05:c7:6a:fa:eb:c4:8e:e6:8f:cc:4e:fb:f3:15:
                    3b:d1:e4:4f:bb:f4:1f:69:97:a3:1a:8c:73:76:ec:
                    4f:98:51:52:a6:ca:e5:72:36:ff:f6:dc:f7:ad:8d:
                    bd:23:a9:f7:5d:d8:d5:c5:7b:4d:ec:e2:d1:10:23:
                    4a:71:d3:d5:1b:e3:ba:b8:87:ee:39:be:32:8a:b3:
                    f1:b2:78:8a:58:56:5a:d0:35:61:4e:ff:94:ec:ef:
                    16:a3:bb:f9:e4:fe:0e:fa:ae:1c:d6:2a:3e:d8:20:
                    d3:1a:20:64:b2:e1:ed:11:36:46:2e:a1:71:3f:93:
                    07:99:f1:f7:f0:7f:64:76:c8:1a:b1:62:af:66:d9:
                    73:95:f7:98:02:37:5c:b4:db:65:c9:b7:3b:01:d1:
                    7e:7d:8a:a2:20:51:76:36:a3:10:ff:30:f5:57:18:
                    91:53:4a:36:18:60:4e:08:54:01:3e:17:0c:3a:3a:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BD:EB:89:2D:FD:8B:83:EE:6A:0C:41:5F:02:0C:D3:F9:04:52:D8
            X509v3 Authority Key Identifier:
                keyid:2E:91:5C:3B:29:1B:4C:18:69:D7:AE:96:31:84:D1:FD:09:78:7B:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpFcOykbTBhp166WMYTR_Ql4e24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:91:4f:9c:7e:cb:34:9f:e5:91:74:2f:a8:98:ad:2e:b7:cc:
         e1:b7:33:d9:4b:ce:c5:89:68:7e:c9:6c:e0:b7:ba:4c:23:0e:
         62:d2:e9:d9:90:27:ff:ff:b0:99:87:a8:e0:03:7c:0c:a7:0a:
         5f:5e:5c:f0:fc:f7:77:23:54:0f:6b:65:59:e6:71:72:78:1c:
         6a:f2:51:77:eb:13:a1:79:8c:34:66:5a:c3:07:35:3a:34:84:
         84:53:ae:12:00:f4:cb:c2:a1:74:66:d5:a2:dd:cb:16:49:07:
         c1:58:4e:3d:ac:f3:37:d6:c9:6e:f6:48:c4:3a:f4:3c:3a:18:
         30:42:e6:f7:6d:ec:ed:6c:ae:11:5d:cf:00:72:d0:62:58:a2:
         00:a6:52:f4:4b:75:5d:a8:10:eb:24:70:39:fe:39:a1:fe:5f:
         1b:3d:18:e7:73:33:ff:94:3b:f6:07:2b:b4:64:fb:0b:27:2c:
         2a:7e:3b:14:4b:e7:f8:da:ab:ef:4a:e2:69:9b:3a:30:d3:a5:
         a2:71:d0:69:f2:20:48:87:16:aa:12:07:d3:b4:ef:40:30:e8:
         b1:f8:3b:64:5b:aa:5e:40:d2:ae:be:cc:82:5e:af:b8:27:ed:
         78:a3:ee:ac:3b:a8:b5:e1:9d:05:91:54:c7:98:f9:d7:e6:48:
         60:95:45:3e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
M0I1ODExMC8GA1UEBRMoMkU5MTVDM0IyOTFCNEMxODY5RDdBRTk2MzE4NEQxRkQw
OTc4N0I2RTAeFw0yNjA3MDUwMTAwMjhaFw0yNjA3MTIwMTAwMjhaMBgxFjAUBgNV
BAMTDTZhNDlhY2FjLTk3MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDwEG23BHF1ELl4aUpkbe0f+Nh3aw660ZEi/yphFsxLrMOnC/967qBFC5yIEXai
JS60hpWfxB4wTMK4b3BMKRbp9LkOQyhnFCpJ8NMFx2r668SO5o/MTvvzFTvR5E+7
9B9pl6MajHN27E+YUVKmyuVyNv/23Petjb0jqfdd2NXFe03s4tEQI0px09Ub47q4
h+45vjKKs/GyeIpYVlrQNWFO/5Ts7xaju/nk/g76rhzWKj7YINMaIGSy4e0RNkYu
oXE/kweZ8ffwf2R2yBqxYq9m2XOV95gCN1y022XJtzsB0X59iqIgUXY2oxD/MPVX
GJFTSjYYYE4IVAE+Fww6OjwNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwL3riS39
i4PuagxBXwIM0/kEUtgwHwYDVR0jBBgwFoAULpFcOykbTBhp166WMYTR/Ql4e24w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzQjU4L0MxQThGNUY4Nzgw
OTExRjFBMUM4QzI3RDU4QTMwRkJDL0xwRmNPeWtiVEJocDE2NldNWVRSX1FsNGUy
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTHBGY095a2JUQmhwMTY2V01ZVFJfUWw0ZTI0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz
QjU4L0MxQThGNUY4NzgwOTExRjFBMUM4QzI3RDU4QTMwRkJDL0xwRmNPeWtiVEJo
cDE2NldNWVRSX1FsNGUyNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB0kU+cfss0n+WRdC+omK0ut8zhtzPZS87FiWh+yWzgt7pMIw5i0unZkCf//7CZ
h6jgA3wMpwpfXlzw/Pd3I1QPa2VZ5nFyeBxq8lF36xOheYw0ZlrDBzU6NISEU64S
APTLwqF0ZtWi3csWSQfBWE49rPM31slu9kjEOvQ8OhgwQub3beztbK4RXc8ActBi
WKIAplL0S3VdqBDrJHA5/jmh/l8bPRjnczP/lDv2Byu0ZPsLJywqfjsUS+f42qvv
SuJpmzow06WicdBp8iBIhxaqEgfTtO9AMOix+DtkW6peQNKuvsyCXq+4J+14o+6s
O6i14Z0FkVTHmPnX5khglUU+
-----END CERTIFICATE-----
Generated at Sun Jul 5 07:50:18 2026 by rpki-client