Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
File:                     lBEWOnNX79ihLWm2yUdlT0Xebio.mft (raw, json)
Hash identifier:          sDdySElwx/Ph1FMokDuFusDmexE5pvbUq7ARJjNFDf0=
Subject key identifier:   AD:C0:AA:5B:17:D9:58:24:8D:6A:28:AE:4C:3A:E5:75:85:41:22:63
Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
Certificate issuer:       /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
Manifest number:          82
Signing time:             Mon 27 Jul 2026 09:53:42 +0000
Manifest this update:     Mon 27 Jul 2026 09:53:42 +0000
Manifest next update:     Mon 03 Aug 2026 09:53:42 +0000
Files and hashes:         1: lBEWOnNX79ihLWm2yUdlT0Xebio.crl (hash: GHXbd19s5v2pSLWiKTMfoqxR5ZcMnx5C6yULyeJSFMk=)
                          2: 1E74642AEEC611F0B6553517716F56BC.roa (hash: hIhATxrqSrR5A4qFNRmOtul5smZBw7ayiN7X2oLfAaI=)
                          3: 1EF20696EEC611F0B6553517716F56BC.roa (hash: C2HYiXqh9FrGOeUUq4VM0nBBKKmKPJMXcJIwTDA1cJw=)
                          4: 1F740B32EEC611F0B6553517716F56BC.roa (hash: gopwfSKGN1mCCHSx58qmeTC4uj/Dhy9G5y6duhNO4mg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
        Validity
            Not Before: Jul 27 09:53:42 2026 GMT
            Not After : Aug  3 09:53:42 2026 GMT
        Subject: CN=6a672aa6-19d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:81:39:d9:4a:21:e3:73:3f:5f:9b:d0:1a:
                    45:ef:03:d5:d6:0e:7f:ae:90:f1:e6:cd:7f:53:7b:
                    f4:f6:11:a1:33:c6:71:de:b7:c4:74:02:02:55:c4:
                    bb:a4:8f:a7:8c:6e:67:a8:e8:0e:72:de:11:dd:fb:
                    f6:a7:a0:99:f5:f5:7e:3d:1c:08:63:1e:85:e3:da:
                    e8:b9:46:9b:90:57:d1:96:9d:5c:2e:de:99:e4:30:
                    67:b2:c0:3f:a7:ec:53:09:85:21:b3:36:64:22:87:
                    0f:a6:f4:95:8b:63:cf:e9:77:ed:83:e4:ca:6c:0e:
                    13:2a:6a:96:09:8b:d5:8f:b9:2a:6e:69:d9:1f:dd:
                    c9:41:67:a2:b9:84:ac:96:b0:54:95:e2:45:f0:6f:
                    a8:ed:14:02:ba:42:0d:f3:fa:e5:80:f6:c4:8d:26:
                    52:5a:5b:cc:7c:d7:3f:2f:3a:c8:8f:7b:a3:7c:ca:
                    08:35:92:6d:25:e4:d1:1f:0a:40:13:7a:20:53:5a:
                    0c:fc:34:88:07:2f:2b:27:38:8a:9d:c2:cb:dc:3f:
                    d0:67:75:e0:25:2f:00:60:77:fd:90:e2:f6:f5:1f:
                    91:bc:24:20:9a:56:4a:1d:40:19:34:d5:de:a7:7d:
                    b3:7e:bb:aa:d4:90:c5:dd:26:62:8c:65:0a:2d:b7:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C0:AA:5B:17:D9:58:24:8D:6A:28:AE:4C:3A:E5:75:85:41:22:63
            X509v3 Authority Key Identifier:
                keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cf:e0:1f:36:00:52:73:48:19:72:0f:4b:93:95:75:f2:e5:
         06:d0:b7:f7:e0:37:19:c1:dd:c9:3c:a8:73:cf:16:dc:5d:dc:
         e1:36:c0:57:6b:78:b5:b6:84:cb:1c:5b:fc:ee:45:27:aa:ee:
         f7:d5:2b:4b:1f:9e:37:f5:34:d9:da:b6:a6:0d:95:b7:cc:6c:
         09:28:93:a3:53:69:3b:42:c1:30:cf:9e:60:38:1a:59:34:e1:
         90:7f:33:8f:af:25:30:7b:69:38:70:1e:7d:f8:fc:fc:56:e0:
         73:be:fe:ff:75:da:c5:81:1b:d8:f3:9a:8d:0b:f9:6d:d2:fd:
         85:e8:49:71:37:e8:7f:bd:fe:1f:2c:9d:f5:07:2c:8f:cb:bc:
         c2:51:75:a5:8e:26:76:17:61:5a:38:24:85:87:a1:6c:d3:b8:
         e2:a3:19:3c:86:a0:a0:ec:98:49:20:6e:23:fe:36:bf:a9:a9:
         39:6f:2e:9a:47:4a:c2:57:ee:c0:0b:8a:6a:4f:a5:f1:a1:52:
         b7:67:6e:91:d5:fe:76:3b:56:f3:84:6d:0a:6f:8a:80:ad:62:
         ba:29:0a:43:ff:0b:17:c1:a0:0e:13:87:86:53:d5:d7:8f:97:
         eb:86:c5:df:08:4f:d3:50:d6:03:e2:13:ed:10:b5:28:88:33:
         93:0b:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:10:45 2026 by rpki-client