Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
File:                     lFCLKqsDKqM_mgAoJYI_mrhccBI.mft (raw, json)
Hash identifier:          xjaocjXrlz1iGu0RjeCGESUfB3QBOItmU6nPzXeYcCs=
Subject key identifier:   09:1F:E8:C5:F8:1E:A7:AD:D8:60:17:06:F5:2C:1A:FF:AB:75:07:37
Authority key identifier: 94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12
Certificate issuer:       /CN=A9125532/serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
Manifest number:          F4
Signing time:             Mon 27 Jul 2026 08:26:56 +0000
Manifest this update:     Mon 27 Jul 2026 08:26:55 +0000
Manifest next update:     Mon 03 Aug 2026 08:26:55 +0000
Files and hashes:         1: lFCLKqsDKqM_mgAoJYI_mrhccBI.crl (hash: VgyTz2BErqus2GNKoO45AY0wxBcDKPeet2enHqExoNU=)
                          2: CB08B0C019C811F0958CB24EC4F9AE02.roa (hash: cdFmXpsalY1+z5oVudHnce3yQ0iPra8q2kzd8g6PXiM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl
                          rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125532, serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012
        Validity
            Not Before: Jul 27 08:26:55 2026 GMT
            Not After : Aug  3 08:26:55 2026 GMT
        Subject: CN=6a671650-fa8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:06:a3:fe:40:e5:6f:60:78:f8:57:55:b4:fe:
                    76:69:e0:f6:b6:8a:f1:5a:e2:9d:9b:ce:6d:fc:d8:
                    38:08:f2:f7:33:85:d5:87:4e:ab:ad:a5:cb:3e:8d:
                    60:80:3e:9a:79:0d:65:53:c0:59:30:76:7a:c8:87:
                    a2:1d:30:04:08:75:18:e9:74:e6:0e:d5:49:36:b7:
                    05:31:fd:63:74:db:10:37:f2:d0:a7:21:36:a4:25:
                    33:40:a9:3a:a6:ac:18:b6:58:1b:b1:4d:51:a1:c0:
                    2e:82:32:66:87:27:db:f2:83:ad:5f:e3:67:9c:5d:
                    f2:77:ea:f8:66:0c:16:e5:ee:5f:c4:5d:37:6f:9b:
                    e4:ab:38:40:8d:43:63:15:c8:bf:99:b8:c8:00:8e:
                    d4:b7:f4:ff:74:25:41:21:7b:06:88:ba:9e:07:79:
                    25:50:c1:54:91:08:01:f2:ea:e1:f1:cc:29:ca:35:
                    f5:a2:a1:56:8d:09:c4:5a:5b:02:5f:de:fb:e7:db:
                    40:60:43:e0:7f:76:34:f4:32:b8:76:a3:68:72:54:
                    1b:4d:a7:78:f0:24:6c:9e:fe:c9:ad:03:3d:da:7f:
                    ce:e5:3f:30:3e:65:fd:82:21:b3:34:50:75:9c:c1:
                    d1:77:4f:22:90:2d:7f:cf:75:79:13:55:f7:32:1d:
                    fe:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1F:E8:C5:F8:1E:A7:AD:D8:60:17:06:F5:2C:1A:FF:AB:75:07:37
            X509v3 Authority Key Identifier:
                keyid:94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9e:96:3e:2f:24:2c:9d:f1:7d:3e:f6:3b:a2:c2:a4:40:24:
         51:f8:7b:92:e7:ac:36:7d:f3:15:cf:2b:f3:d7:19:3e:69:a1:
         c8:53:61:19:ac:2d:e7:92:2d:8f:a8:2c:da:bc:26:6a:1d:c4:
         be:39:9d:f2:1e:71:18:3b:96:b5:e4:4b:16:8a:95:f4:57:ad:
         cc:7c:f9:6c:81:ba:ed:22:a9:69:ba:7d:87:1c:7d:d2:88:3f:
         e6:f7:c3:3f:1a:f8:c3:58:f7:76:c0:c1:dc:8d:96:84:a1:0b:
         2a:e8:e4:da:66:2e:0e:37:e7:11:d1:38:22:e2:f8:2d:e8:fb:
         af:33:eb:46:5c:12:8a:d9:8f:b5:01:7e:1b:9e:c7:2c:20:cc:
         f8:a0:6f:0d:9e:db:79:8b:a5:81:81:76:91:68:62:bb:3f:ac:
         29:b4:86:b4:ed:5b:5c:58:ad:95:53:1e:da:29:8e:87:85:0c:
         e2:0b:0a:23:65:e5:6d:0b:8d:ab:9f:f4:d5:cf:32:23:ff:62:
         ae:d9:cf:22:76:fe:65:09:0c:21:57:e7:16:c0:f4:cb:cc:52:
         1a:75:45:19:d7:34:5d:24:37:25:e5:71:ab:8a:4a:61:03:a2:
         7d:8a:11:ae:c5:1e:0a:90:61:99:82:2c:f5:18:0d:d2:dd:9f:
         a7:c2:85:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:12:33 2026 by rpki-client