Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.mft
File:                     L_lZl1deZzKwh5DXV_bBoMXyu_o.mft (raw, json)
Hash identifier:          ZBwA+u8ZJlB2aEq7QdRGSXUPRY+b07F7/k79vbyPdtE=
Subject key identifier:   C7:38:9C:05:08:C5:D3:EF:23:25:3E:22:02:E5:BF:B7:82:BA:64:0F
Authority key identifier: 2F:F9:59:97:57:5E:67:32:B0:87:90:D7:57:F6:C1:A0:C5:F2:BB:FA
Certificate issuer:       /CN=A9187579/serialNumber=2FF95997575E6732B08790D757F6C1A0C5F2BBFA
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L_lZl1deZzKwh5DXV_bBoMXyu_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.mft
Manifest number:          2D
Signing time:             Fri 17 Jul 2026 10:05:45 +0000
Manifest this update:     Fri 17 Jul 2026 10:05:45 +0000
Manifest next update:     Fri 24 Jul 2026 10:05:45 +0000
Files and hashes:         1: L_lZl1deZzKwh5DXV_bBoMXyu_o.crl (hash: XT/PxWvmfCVB4m/XBRJLa5MdrYICgBzYIQEeR5Mi0a0=)
                          2: B84A6F2E4FF411F18E63268DB6833773.roa (hash: BI2faFTClY4g1rHtoS/vehoRqM4DrLlRB/gGKATWsKM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.crl
                          rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L_lZl1deZzKwh5DXV_bBoMXyu_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187579, serialNumber=2FF95997575E6732B08790D757F6C1A0C5F2BBFA
        Validity
            Not Before: Jul 17 10:05:45 2026 GMT
            Not After : Jul 24 10:05:45 2026 GMT
        Subject: CN=6a59fe79-d9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dc:b6:59:0d:31:6f:a6:af:70:fe:a1:c0:54:
                    82:89:8b:e3:12:c5:51:fd:ca:97:43:7a:39:29:94:
                    49:9a:50:1c:03:f1:2a:1e:a5:81:7c:c9:3d:5f:4a:
                    31:e8:af:46:2b:63:6d:5e:a1:fe:8c:dd:e6:98:67:
                    1a:0e:c8:5a:2d:0d:98:3a:dc:96:37:54:e9:f8:6a:
                    4d:48:0f:6b:a8:68:95:32:c4:5d:02:34:2b:bf:a0:
                    0a:40:82:5d:50:a4:51:17:7f:75:fe:5c:2f:37:95:
                    ae:81:19:92:75:08:75:d3:52:9b:b4:ea:66:2d:65:
                    66:5e:67:06:ac:a1:e3:75:31:51:17:1d:07:f4:8b:
                    5d:0c:e9:fd:6a:db:30:a1:57:f2:da:2f:ec:f8:69:
                    2b:39:c4:84:32:8b:14:d5:39:1d:db:b7:dc:de:25:
                    b1:bd:70:93:e9:19:9a:d5:06:c0:f9:2c:fa:15:43:
                    73:af:0b:a8:2b:d7:c2:9e:cc:b8:72:1e:02:7d:3d:
                    06:9f:29:7f:02:c4:ae:59:4a:1f:78:e4:cf:6e:86:
                    02:5c:c2:17:5e:a4:8e:00:13:9b:b1:14:0a:20:c4:
                    c0:45:b3:10:38:b6:89:bd:81:bc:44:71:ec:7d:6f:
                    9a:ab:05:db:a3:90:c3:db:b3:e3:4d:27:d7:28:04:
                    13:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:38:9C:05:08:C5:D3:EF:23:25:3E:22:02:E5:BF:B7:82:BA:64:0F
            X509v3 Authority Key Identifier:
                keyid:2F:F9:59:97:57:5E:67:32:B0:87:90:D7:57:F6:C1:A0:C5:F2:BB:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L_lZl1deZzKwh5DXV_bBoMXyu_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:eb:3a:ed:39:29:d4:ad:ff:7c:fb:f5:a7:d5:6f:11:9d:85:
         4f:5a:7f:35:f2:ac:fe:2b:01:43:94:cb:08:43:69:83:8d:c6:
         21:7f:91:ee:ad:9d:c3:c8:74:c4:89:50:ff:1a:93:30:eb:5c:
         02:85:12:89:00:71:9e:07:ff:3e:58:2f:2f:ec:63:85:40:bc:
         9f:d7:83:9b:68:ac:78:54:ac:eb:bb:ba:71:b2:6d:09:39:81:
         0b:f6:5a:07:26:86:7f:9d:6f:10:84:01:31:35:46:b6:10:cd:
         76:f5:16:f4:96:db:45:14:a4:0d:e0:13:0c:ad:cc:a8:cb:4b:
         5e:75:9d:4a:be:0e:42:20:bd:b7:07:d5:cb:1f:ec:75:93:55:
         29:59:10:8e:08:e3:c8:24:12:98:c2:da:e2:5d:66:26:55:f9:
         e8:f6:51:09:3a:a3:fa:4e:64:c5:61:65:7d:cb:22:21:d5:f9:
         e9:d2:12:00:c3:6d:fc:04:9b:0f:d2:88:ee:8f:b9:73:fb:8f:
         42:bd:ad:f8:a9:74:ab:69:c9:20:4e:5d:e8:6a:b8:a6:89:81:
         09:0e:a4:c8:f8:c6:4d:3d:23:fd:16:21:ec:67:fd:80:03:2d:
         a7:2b:bc:a2:fb:ef:47:a6:eb:9f:32:d5:22:9b:b2:02:d0:84:
         a8:8c:23:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:29:57 2026 by rpki-client