Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
File:                     1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json)
Hash identifier:          QQAswOx8/m04ZYFocHPpk25TgDPhA5kh33BUbX+sTgQ=
Subject key identifier:   B9:23:34:AC:BC:D5:44:3E:17:84:8E:C3:B7:9B:2B:23:79:91:1D:3F
Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52
Certificate issuer:       /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
Certificate serial:       0226
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
Manifest number:          0221
Signing time:             Mon 27 Jul 2026 04:18:18 +0000
Manifest this update:     Mon 27 Jul 2026 04:18:17 +0000
Manifest next update:     Mon 03 Aug 2026 04:18:17 +0000
Files and hashes:         1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: FO0ACHJGnDrzkMn0Ki+zQEhc0CtygGPojge08Y98bEM=)
                          2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: GghlvZSMgFSIPZl/c13nz5F4JJXOhoiY0qEmjni18nQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl
                          rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
        Validity
            Not Before: Jul 27 04:18:17 2026 GMT
            Not After : Aug  3 04:18:17 2026 GMT
        Subject: CN=6a66dc09-abbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:57:8f:a1:4b:e3:00:bf:22:f9:10:24:5b:
                    24:67:a9:61:a4:9a:0b:c2:8a:65:73:eb:eb:5b:e8:
                    2e:0f:a4:cd:96:b7:9a:9d:ab:56:3c:8f:dc:52:af:
                    22:95:82:aa:74:23:0d:db:bb:26:76:be:46:14:f6:
                    70:e4:ef:46:09:d0:88:ea:8d:a1:ce:b9:e2:15:9c:
                    75:89:14:78:7d:ec:68:67:57:eb:77:6b:cb:a0:17:
                    b3:ed:43:98:fb:c8:3c:0b:94:3f:fb:a2:3c:f6:00:
                    d4:d3:55:5f:bf:55:40:e9:fe:8b:ec:01:13:8e:4d:
                    83:49:87:b9:4b:03:b3:9e:ae:5a:38:51:d5:bd:5c:
                    f4:0a:91:a4:64:5a:94:31:8d:48:28:40:d2:46:21:
                    51:5c:b6:37:de:c8:0d:2b:65:b4:26:ba:ef:77:0b:
                    43:d0:db:37:76:78:b7:52:a7:91:91:a1:19:fd:6a:
                    88:5c:2b:3f:af:70:c7:f8:7d:73:72:80:d7:86:ac:
                    32:b4:f4:7e:66:5f:49:be:95:18:d1:7b:90:21:82:
                    b4:5d:f7:fc:3f:32:74:b6:4e:29:9e:14:49:3f:3c:
                    3c:5f:1d:d9:f9:df:01:59:c4:10:4a:7c:48:cb:d7:
                    8f:82:75:70:7f:86:72:0f:a6:0b:69:dc:1d:e2:77:
                    56:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:23:34:AC:BC:D5:44:3E:17:84:8E:C3:B7:9B:2B:23:79:91:1D:3F
            X509v3 Authority Key Identifier:
                keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0a:8e:1b:00:ab:73:8d:a3:bc:4d:fc:67:7f:00:83:b1:75:
         ae:47:7e:69:35:23:d4:a7:46:d0:82:67:a0:e2:12:7f:ed:72:
         bf:81:79:77:9a:fd:74:6d:64:a2:15:ea:97:7f:e0:ab:d2:d4:
         11:5a:a8:8e:d2:56:1b:e3:3e:b3:27:34:47:ff:48:1f:f9:62:
         35:60:f7:f4:9c:a0:82:1b:eb:d1:48:1b:e4:43:cc:d6:04:1b:
         61:d0:58:eb:19:9f:cf:69:1c:3f:89:f1:8a:eb:6e:0a:58:71:
         ee:25:2e:b1:2b:7e:d1:fa:9e:ed:43:4f:2c:a9:b0:b1:8d:f4:
         e6:6e:3c:a9:e4:97:c3:16:eb:c7:07:78:32:60:11:28:91:0a:
         92:10:36:09:38:e0:50:87:1a:9a:c1:05:c3:0e:c8:6e:92:04:
         0e:c9:96:78:2f:08:6f:d6:3b:95:81:cb:4c:46:ee:75:6e:2f:
         8e:e9:2d:1d:f0:9a:3c:67:74:c2:93:01:1b:81:f1:a8:ce:39:
         46:fa:02:ae:04:ba:f8:45:d2:3e:bb:5b:9b:a1:1f:23:cb:1b:
         22:9f:95:57:35:5e:56:df:17:b1:6e:1a:e5:c6:9e:51:f7:90:
         2c:00:9f:58:bd:a5:5e:fb:9e:d3:a9:d0:9d:e3:23:0d:e3:e6:
         f2:31:ab:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:30 2026 by rpki-client