Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
File:                     0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json)
Hash identifier:          1nT6hdUHuuxTJIKiynE1FmXbj21EzkHPfTnModfC7SA=
Subject key identifier:   C6:9A:96:9E:0D:51:C5:A7:9D:E2:F2:F0:36:90:11:5C:11:F4:E2:DE
Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
Certificate issuer:       /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Certificate serial:       0D57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
Manifest number:          0D39
Signing time:             Tue 18 Aug 2026 18:29:09 +0000
Manifest this update:     Tue 18 Aug 2026 18:29:08 +0000
Manifest next update:     Tue 25 Aug 2026 18:29:08 +0000
Files and hashes:         1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: mOrgVZVdLXGKlXpUS+syFxhlGh2yaeIAVUtAmWCPqe8=)
                          2: FB170730324211EFA9B5F949C4F9AE02.roa (hash: HVckhDYyXfabBBTw5QKnMftqCm/CyMEWw6vhsSVFD98=)
                          3: B430443A324211EFB14FB614C4F9AE02.roa (hash: AzFqYClBcneb2uXCI+dnrAdcY2giqvGMeQmemVnunHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
                          rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3415 (0xd57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
        Validity
            Not Before: Aug 18 18:29:08 2026 GMT
            Not After : Aug 25 18:29:08 2026 GMT
        Subject: CN=6a84a475-bc2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:13:1f:9b:1a:91:c4:06:d6:25:69:f8:ee:
                    ed:53:2f:53:15:00:bc:00:27:c6:9e:73:1f:44:e8:
                    38:74:dc:84:6e:53:3b:4d:d3:29:96:52:ec:c0:30:
                    c6:fd:26:ac:fa:0a:4a:3f:f4:fb:76:df:7b:85:1a:
                    6a:63:99:98:ad:40:11:a6:dd:fb:cc:49:dc:92:23:
                    e7:60:7b:42:b8:b6:2c:aa:75:7c:c4:9b:e0:3b:c7:
                    e4:c1:0a:d4:fe:bd:78:5a:ad:c4:42:17:a6:0d:b4:
                    2d:77:41:9d:d9:6d:05:17:6c:71:90:6a:28:54:cd:
                    cb:e5:d4:33:90:3f:12:15:c2:ea:02:36:53:92:74:
                    5c:13:e8:bd:1c:c1:a8:0b:d8:28:1d:ca:7c:d2:aa:
                    97:63:ad:55:38:37:92:6a:b5:8a:58:a7:71:8a:cf:
                    41:5c:14:06:5c:76:61:45:ce:e4:46:6a:5f:0f:a3:
                    b2:0c:b2:54:83:32:83:cc:83:a3:53:d8:21:56:67:
                    a1:3d:35:a7:24:22:3f:63:35:a0:ea:1f:77:de:2c:
                    e3:7a:b2:86:b8:d1:5b:3c:94:f2:e0:f4:73:ad:c3:
                    e2:2f:12:fb:81:fa:17:3e:89:0a:6c:57:bb:46:2a:
                    71:e1:aa:8f:2c:4a:44:bd:71:60:78:b9:00:6e:23:
                    75:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9A:96:9E:0D:51:C5:A7:9D:E2:F2:F0:36:90:11:5C:11:F4:E2:DE
            X509v3 Authority Key Identifier:
                keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0f:5e:a0:04:77:72:9c:f7:94:6f:74:e9:97:da:3f:73:66:
         b0:bd:6f:1d:92:f5:8c:84:d2:54:eb:74:3a:88:15:7e:fb:bf:
         93:c5:97:d8:62:27:b3:9e:04:32:18:ed:cb:4a:f5:e2:ce:9d:
         90:34:b3:7c:4a:26:d5:a7:8b:b8:76:1d:a8:f1:74:4e:eb:a0:
         cf:d6:3a:73:b2:83:ac:03:24:b5:4c:42:72:da:72:e3:89:16:
         86:46:6a:82:90:0b:f8:47:8c:fd:5c:eb:f3:2b:01:ce:3a:ee:
         66:73:84:2d:7d:47:84:95:a4:e4:9d:e9:b6:47:ec:8a:e0:92:
         6c:80:16:a0:6e:b8:ca:60:5c:f5:03:67:0e:a1:a9:77:83:9a:
         62:84:7a:1d:dd:19:e8:45:2a:d3:85:b5:29:07:7c:97:67:97:
         53:9f:3a:9d:b2:6e:97:b2:55:5d:eb:f7:e0:92:f0:89:78:cb:
         56:54:fb:a9:06:8b:02:74:01:e2:cd:5e:f8:69:e6:36:f1:19:
         aa:a6:5f:5f:4e:03:78:f7:1d:50:f8:29:bc:17:80:71:87:25:
         4e:a6:06:1f:3e:4f:66:d0:5b:01:0c:3c:b6:58:f8:0b:fd:04:
         b5:dc:34:6e:91:df:ce:04:63:eb:63:99:2b:a1:ff:f6:24:0c:
         1a:41:09:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:14 2026 by rpki-client