Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
File:                     l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json)
Hash identifier:          cqJOx6eHgMYaOnQ0S8dP6Gzm+RjKHjzcIUsTZxZJyaE=
Subject key identifier:   AF:1C:CB:7E:A5:FA:C6:8F:CC:27:EC:5A:D0:9A:D5:2C:01:38:79:9E
Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44
Certificate issuer:       /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44
Certificate serial:       0D22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
Manifest number:          0D19
Signing time:             Thu 16 Jul 2026 18:19:36 +0000
Manifest this update:     Thu 16 Jul 2026 18:19:36 +0000
Manifest next update:     Thu 23 Jul 2026 18:19:36 +0000
Files and hashes:         1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: dIHbQmfPMfn80aaNSW/Nu5Mrpl+PQuByQjHZjHv/xZU=)
                          2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: eigBk5/FH4wHkZy6SPbCYbh6uzU3aFuUATntLzWiF2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 18:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3362 (0xd22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44
        Validity
            Not Before: Jul 16 18:19:36 2026 GMT
            Not After : Jul 23 18:19:36 2026 GMT
        Subject: CN=6a5920b8-b9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:dc:d3:52:64:ae:49:19:ae:87:54:40:39:
                    41:b6:40:bc:f9:d2:03:04:6e:57:59:8d:57:b0:a9:
                    3a:b5:19:62:94:8c:a4:58:30:97:c8:ed:55:fc:ea:
                    4e:02:9f:93:60:2b:0d:3a:4b:4d:c8:ec:2a:e1:a5:
                    4d:03:a3:85:3e:f5:ae:e0:05:7a:df:bf:a0:7b:d1:
                    2e:2c:e5:d9:d6:37:8e:fb:e5:81:d0:85:13:07:fe:
                    a0:ec:23:47:ae:d7:89:6f:06:9c:2f:20:3c:0e:04:
                    20:0d:8a:a6:83:b5:13:91:90:1c:96:f7:58:d3:ed:
                    40:c2:71:74:61:60:ed:3f:90:a5:b8:63:a3:13:2a:
                    ca:f3:1b:dc:32:5d:6f:6c:08:a1:96:54:df:2b:ee:
                    4d:eb:0d:24:1b:86:67:3a:65:16:62:f5:b2:d3:2e:
                    19:41:1a:d2:63:69:62:56:71:4d:e9:08:f2:32:16:
                    98:a5:ae:33:b7:00:0e:48:b9:2b:a2:52:87:1d:85:
                    a6:d7:bb:f9:1b:fa:5d:bd:63:bf:2c:70:06:29:f6:
                    6d:99:cc:dc:99:b9:ff:bc:dd:48:21:b4:6e:02:d4:
                    9e:e2:0c:22:28:f2:55:c7:ff:5a:83:d5:e4:c8:57:
                    b3:1d:a5:bd:36:6b:74:3b:87:1e:4e:6d:62:36:f4:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1C:CB:7E:A5:FA:C6:8F:CC:27:EC:5A:D0:9A:D5:2C:01:38:79:9E
            X509v3 Authority Key Identifier:
                keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ef:ea:4e:6c:a2:66:11:6c:7d:c0:95:c5:d8:c2:20:d0:be:
         1a:f7:87:e9:44:9b:3f:9c:74:8a:5f:3c:2e:31:90:86:52:40:
         b8:d5:4e:bf:d7:fe:5c:2c:2f:63:36:b9:d0:f5:c4:a2:f2:6d:
         e0:f7:e7:5f:7e:94:79:81:46:ce:78:90:1f:f9:1f:d5:2b:21:
         ec:f7:af:f8:e4:59:da:81:e9:95:48:02:e1:1b:2d:c3:86:af:
         7b:d8:61:63:84:e6:ea:81:f6:16:a4:02:52:0f:f2:44:36:68:
         44:ee:1b:1f:40:12:46:b9:52:df:c3:7c:f8:eb:ba:96:d5:1d:
         59:e5:24:ac:1f:ed:e1:b9:0c:08:f4:65:e7:03:08:73:c8:35:
         ab:ec:fc:d0:87:5b:1a:1f:61:3d:74:3c:f8:17:6d:f6:ce:12:
         bc:2d:8d:de:f0:02:07:ae:b6:f6:8a:ee:80:87:fa:5f:47:9a:
         e6:5f:be:a4:ed:aa:06:14:dd:38:92:c0:d2:fb:2f:c8:f7:6a:
         30:e1:5e:ef:1a:ed:42:ef:da:48:66:ad:c5:01:0f:ee:28:aa:
         2c:be:fe:a6:19:ee:b6:c1:2f:8a:b5:16:e7:01:ce:60:ef:5e:
         d4:a1:59:88:9c:93:9f:f6:0d:24:99:44:c9:3d:5f:83:8a:b9:
         a2:f4:f8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:18:24 2026 by rpki-client