Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft
File:                     LejyFtzSvsbTj-vwHgbYqZAnDr8.mft (raw, json)
Hash identifier:          AInOSTCwRhq3AtmM63CzB30RvTOWeMtK48OL8q/EIVI=
Subject key identifier:   76:A2:18:DD:3A:54:DB:C3:34:71:9B:8C:19:47:FD:B8:5A:85:8C:85
Authority key identifier: 2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF
Certificate issuer:       /CN=A911AD81/serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft
Manifest number:          0159
Signing time:             Mon 27 Jul 2026 07:05:11 +0000
Manifest this update:     Mon 27 Jul 2026 07:05:11 +0000
Manifest next update:     Mon 03 Aug 2026 07:05:11 +0000
Files and hashes:         1: LejyFtzSvsbTj-vwHgbYqZAnDr8.crl (hash: 0LLwcOyvnYCkZn/8g6vImOlkAovRCgyJalNGIsiiVEA=)
                          2: 0E0C2FDA8A9211EF928F7977C4F9AE02.roa (hash: hQD17pdWkHKfFuel65BmeooGPbZsbzoy4kMOI6hWhF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl
                          rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AD81, serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF
        Validity
            Not Before: Jul 27 07:05:11 2026 GMT
            Not After : Aug  3 07:05:11 2026 GMT
        Subject: CN=6a670327-170a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:43:34:dc:a6:06:78:bf:cf:ad:aa:aa:02:
                    8b:8f:a5:93:79:85:9c:d5:1d:e5:b9:f6:89:26:2f:
                    ad:95:83:eb:bb:79:28:8e:26:8f:7b:3b:73:f9:ec:
                    06:33:ac:c8:20:3e:df:ac:b8:5f:c3:1c:a7:f1:2c:
                    67:55:7e:77:ee:63:8f:d8:f5:84:3c:3e:22:54:bc:
                    bd:85:f7:4c:e0:bd:82:e9:a2:f8:5a:fd:0e:ac:15:
                    c8:11:31:d9:2b:42:d9:b1:a5:66:0f:46:06:0b:99:
                    16:41:15:f0:15:e5:2e:85:25:52:40:bd:74:dd:27:
                    e2:93:a8:90:08:fa:b3:10:08:d9:9a:f7:ee:40:e0:
                    6a:72:8e:90:98:da:5f:14:43:c7:46:d1:6b:fb:1e:
                    89:8e:62:a2:ec:d8:0b:3c:ce:1d:12:8a:bb:a9:61:
                    a0:83:7d:d1:7c:9d:78:d8:9f:28:77:11:65:77:bb:
                    72:2c:ed:ee:11:4d:de:31:b0:e4:20:fb:13:c4:68:
                    a5:d0:4b:3d:7b:2c:9b:3b:f9:27:df:84:34:11:01:
                    aa:99:86:77:30:2e:08:b7:e8:70:77:11:6f:05:3b:
                    a5:5a:03:cb:75:e6:84:c4:53:ab:01:e2:89:81:95:
                    86:20:7d:1c:20:5d:c1:0e:7f:d0:84:0d:3f:04:cf:
                    af:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A2:18:DD:3A:54:DB:C3:34:71:9B:8C:19:47:FD:B8:5A:85:8C:85
            X509v3 Authority Key Identifier:
                keyid:2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:47:b1:ac:ed:47:bf:d8:38:35:ad:cb:9a:93:33:fb:7c:d5:
         04:14:42:8a:c6:3f:6b:ae:c8:59:fb:e5:9d:27:e2:ea:ee:2c:
         d1:9c:92:0f:20:e7:35:86:2c:00:09:79:53:1c:58:80:4d:0e:
         dc:cb:90:2c:ce:ae:85:b1:e5:54:08:b8:b7:08:f1:c8:a5:bb:
         c8:34:16:49:b1:5e:cf:1b:b8:33:d7:65:aa:f5:8e:77:97:b3:
         89:40:6c:f5:41:6c:60:5b:a3:cf:e4:3c:3c:ae:c4:db:ff:0d:
         a5:d3:7e:45:02:72:86:76:92:06:15:72:ca:39:50:7a:f1:84:
         03:05:38:8f:e5:ba:fe:60:94:b4:70:00:ed:42:f6:94:7b:bd:
         47:cc:5e:5d:25:9e:95:1d:ed:44:6d:7f:e4:6b:1e:75:e2:13:
         4a:f2:1b:ce:61:88:f4:0f:b7:a4:ec:d0:36:11:51:08:57:d6:
         da:2a:ce:bd:b5:13:41:58:70:3a:91:6c:3f:6a:ac:e9:e6:55:
         dc:06:6e:84:1e:a0:c1:fc:5c:7f:4e:03:d9:c6:90:53:6f:9a:
         33:0e:c9:e1:1c:27:e8:6d:1f:d3:04:0a:17:43:0f:15:c1:d9:
         2a:a0:15:b6:c2:91:f6:3f:f2:fe:d4:96:66:11:ce:20:ce:2a:
         e5:47:56:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:30:57 2026 by rpki-client