Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft
File:                     lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft (raw, json)
Hash identifier:          6dm2OACOOInoajLfxawGh0JFjV1TReYwQXu7f6ZRMH4=
Subject key identifier:   4A:A4:B5:CE:82:01:AF:E0:C9:6B:D0:FA:83:07:F1:9F:96:0C:44:72
Authority key identifier: 94:44:30:98:B8:80:1F:DA:B3:F5:0A:A1:AD:67:DF:9D:4A:D8:FA:E4
Certificate issuer:       /CN=A91A26B4/serialNumber=94443098B8801FDAB3F50AA1AD67DF9D4AD8FAE4
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft
Manifest number:          1E
Signing time:             Fri 17 Jul 2026 10:15:57 +0000
Manifest this update:     Fri 17 Jul 2026 10:15:57 +0000
Manifest next update:     Fri 24 Jul 2026 10:15:57 +0000
Files and hashes:         1: lEQwmLiAH9qz9QqhrWffnUrY-uQ.crl (hash: MlWpBxZCktRwvPFL3KrmkOLPx4wTJL6bZq8hX1eqnvo=)
                          2: 8DB4437A5B0C11F1A290872FAE833773.roa (hash: 2h3y8zlQJ+5L/RD1VFOM8gQPQw1g78QSU956pQJuSJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A26B4, serialNumber=94443098B8801FDAB3F50AA1AD67DF9D4AD8FAE4
        Validity
            Not Before: Jul 17 10:15:57 2026 GMT
            Not After : Jul 24 10:15:57 2026 GMT
        Subject: CN=6a5a00dd-a9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:bf:43:05:7f:5a:5c:b4:42:47:75:ae:d7:
                    75:32:f5:42:2a:4d:7a:1b:39:16:73:63:e9:bf:7a:
                    c5:d6:b7:b6:ac:2a:60:f6:71:77:84:a2:66:d4:2e:
                    d6:63:c3:4e:09:7d:3d:e6:7e:76:50:1d:2c:d5:4e:
                    f5:c9:54:28:eb:c0:9d:61:13:e5:e8:e6:e0:e5:86:
                    f3:f1:f1:c4:14:3a:19:87:f8:dc:bc:b4:bd:c9:c4:
                    39:33:4b:1e:62:4a:37:36:fa:b4:75:12:3c:81:db:
                    7e:87:2a:50:e0:1a:41:f5:3f:f2:b8:5e:58:e9:d6:
                    db:57:da:1a:b0:f0:17:b3:9e:ef:d6:2b:8a:ae:95:
                    f5:78:12:81:8d:03:50:9e:81:04:1a:11:fd:c6:7b:
                    2f:fa:96:0f:00:21:c5:bd:d9:35:68:69:e6:d1:c7:
                    62:7d:bf:c1:6c:22:7a:4d:b4:d2:eb:2f:8f:7f:54:
                    e2:87:77:d8:7a:a2:ea:2f:2a:ce:0d:63:b2:a4:02:
                    b2:2c:b4:78:37:dd:fc:af:c6:02:8a:0c:90:c9:97:
                    dc:8c:20:9a:fa:ef:c6:fd:a6:d4:35:32:1a:81:7e:
                    a2:a1:0d:8a:99:96:d6:6f:e1:37:b8:6d:62:e2:e6:
                    1e:5d:56:04:8a:bc:25:7c:4f:4c:c0:29:13:33:75:
                    01:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A4:B5:CE:82:01:AF:E0:C9:6B:D0:FA:83:07:F1:9F:96:0C:44:72
            X509v3 Authority Key Identifier:
                keyid:94:44:30:98:B8:80:1F:DA:B3:F5:0A:A1:AD:67:DF:9D:4A:D8:FA:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:a1:80:c0:77:4f:89:b0:f6:e5:16:91:6d:78:cc:e0:01:ff:
         44:ee:b6:cd:2d:5b:57:3b:87:e2:47:b7:50:17:3a:fa:03:58:
         32:77:66:57:02:d7:18:60:d7:39:96:5e:d7:3b:de:a9:7d:93:
         80:df:c5:81:f4:4d:6e:09:69:7f:92:b2:58:c7:7c:e3:25:04:
         7a:cb:5d:7b:69:82:54:d7:10:d7:7b:4e:ad:4a:e2:6a:f7:17:
         25:25:94:fc:86:e1:15:71:eb:8f:db:36:73:94:de:c0:72:1f:
         a3:4e:1b:63:af:18:8f:21:ba:3b:42:f2:23:aa:4a:77:86:45:
         2a:1e:f6:0a:31:b6:27:59:1e:87:eb:97:c6:ad:b2:72:e6:d2:
         23:63:13:d1:c2:9b:b2:a8:82:3e:56:08:86:bd:cd:7d:15:5b:
         61:be:d8:0d:d5:fe:24:70:9f:5e:fa:9c:19:f6:80:0a:e1:67:
         2a:cc:ea:5d:81:89:1e:a8:01:af:94:dc:97:54:cd:14:d9:14:
         2d:25:33:80:84:32:93:fe:1c:63:b2:97:b2:86:4c:d3:38:39:
         0d:ab:ec:4c:c4:90:ce:34:93:20:64:f8:12:59:2e:1e:1e:03:
         32:e2:6f:bb:39:9b:2b:43:42:53:04:b3:86:85:38:50:b7:95:
         f8:e8:6e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:17:29 2026 by rpki-client