Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
File:                     LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json)
Hash identifier:          MrsT8nztXNANNPUJN2XFCJVJTknDWnYV+Ou75Qb8IbQ=
Subject key identifier:   DA:64:C6:51:03:5F:74:B5:33:C1:9F:15:28:F9:FA:65:EF:14:21:36
Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
Certificate issuer:       /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
Manifest number:          FF
Signing time:             Sat 25 Jul 2026 07:51:29 +0000
Manifest this update:     Sat 25 Jul 2026 07:51:29 +0000
Manifest next update:     Sat 01 Aug 2026 07:51:29 +0000
Files and hashes:         1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: CbKY/oglyuCAZZ0XhdxU2Iq+YPMSJsrF2Fd6WNHMWrY=)
                          2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: KwucprH89zI40KlMGp9yYI7Eo1rslTO1XAG7Mp4YGYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
                          rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Aug 2026 07:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
        Validity
            Not Before: Jul 25 07:51:29 2026 GMT
            Not After : Aug  1 07:51:29 2026 GMT
        Subject: CN=6a646b01-fcaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:63:ad:8e:71:91:e1:6f:bb:96:0f:e2:c5:
                    4c:d2:20:bb:a6:63:7b:34:3f:0f:f1:22:f7:bf:a0:
                    b9:9b:f8:4a:39:ec:f5:ed:12:3c:99:7a:b8:ec:ea:
                    02:a4:07:c6:13:04:bd:be:98:34:a2:84:7f:be:1a:
                    1f:1b:83:73:43:d9:d3:1a:a4:fb:88:09:f0:67:eb:
                    c5:8f:c8:e1:c2:3e:5c:86:22:22:f3:4e:6f:2b:79:
                    8c:12:df:9c:58:98:a3:08:63:ea:72:35:84:34:49:
                    22:99:ef:76:dc:64:8e:95:89:c9:86:72:f8:6c:a9:
                    4a:f3:33:7c:79:c7:95:d3:33:fb:3d:fe:0b:45:29:
                    15:13:cf:7f:b7:8d:3a:47:6d:b4:59:3b:f4:ff:f7:
                    75:01:fa:c0:0d:3f:37:81:2d:f5:ca:52:2a:72:f6:
                    71:d7:77:92:85:4a:45:dd:ca:cc:30:c0:85:46:5f:
                    87:d6:8f:7f:08:ac:b9:82:d3:64:b3:70:ae:2a:38:
                    dc:56:e7:bb:f5:72:17:31:4b:b5:ad:d6:2f:f1:c7:
                    df:c1:39:a1:df:da:41:cb:55:8d:7f:ee:90:88:f1:
                    9c:ae:7b:6b:97:31:1f:5f:57:81:f4:28:b4:9d:34:
                    7d:df:47:71:eb:57:28:27:ef:27:0c:4e:1b:05:fa:
                    9a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:64:C6:51:03:5F:74:B5:33:C1:9F:15:28:F9:FA:65:EF:14:21:36
            X509v3 Authority Key Identifier:
                keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:78:07:0e:75:3e:57:06:3c:54:d9:09:b2:b2:1a:19:6d:bd:
         89:75:36:f9:f8:4b:93:d4:21:11:ce:6c:e2:dc:56:47:14:da:
         55:54:4e:dc:5f:2f:1d:f1:08:6e:82:ce:c2:96:72:6d:00:bf:
         ea:d0:d6:71:dc:c2:a2:66:9e:8e:5e:df:b4:fc:67:9a:c6:d2:
         76:c6:7d:c9:ed:0f:cc:6c:f4:a4:25:bb:4b:64:16:c2:e4:d2:
         af:9e:44:38:ce:6c:f0:52:c7:9e:d0:e2:81:2a:77:8b:5d:65:
         4b:97:dd:7a:f4:1d:f7:98:f7:75:06:19:1a:bc:1f:0d:0c:10:
         44:ac:8c:db:7e:3e:b1:5c:83:b9:25:42:22:3d:20:b4:b9:7e:
         9d:17:97:4b:0b:3e:0e:a6:48:e9:87:9d:83:15:aa:f4:56:fa:
         79:00:59:ea:e3:54:d8:68:3f:a8:33:08:2e:ec:fc:fb:af:05:
         59:bd:6d:5b:36:cd:b4:fc:45:86:37:e6:62:42:17:86:45:8b:
         15:83:44:fc:30:0b:e2:95:01:3f:00:0d:1c:f2:22:37:e0:02:
         f9:f9:c6:a5:0e:ca:3c:bf:3c:ea:56:96:89:73:79:07:b9:64:
         28:39:b6:8f:df:1a:bb:6f:f1:5e:f2:72:11:3b:57:2a:2b:2d:
         b1:03:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:49:25 2026 by rpki-client