Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
File:                     2lexkcVbszGevZGC3A1Oau8-Ddg.mft (raw, json)
Hash identifier:          5Zj6WOAaxdgXQcoJsN3FyyDS+lYT5GhX0Ta+dLzqL5Y=
Subject key identifier:   97:2A:BF:AD:2F:72:B1:5E:E6:13:18:E5:3E:77:E2:05:B5:3A:FB:5E
Authority key identifier: DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8
Certificate issuer:       /CN=A912A31E/serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8
Certificate serial:       026C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
Manifest number:          0262
Signing time:             Mon 27 Jul 2026 03:37:25 +0000
Manifest this update:     Mon 27 Jul 2026 03:37:24 +0000
Manifest next update:     Mon 03 Aug 2026 03:37:24 +0000
Files and hashes:         1: 2lexkcVbszGevZGC3A1Oau8-Ddg.crl (hash: 1tew2V/MGxf+K3ewqQ69PQ8LJOUW4dDA8Y6jP8BPBFA=)
                          2: 7DA38A8E727011F08682A20EC4F9AE02.roa (hash: X373raxuE2iLwtaK4YO98Y1yBAk9TK8MxVlU8+CTPKI=)
                          3: 5181F33CE8C011EDADA54A23C4F9AE02.roa (hash: 3weaQ4o+eQXlXxL8Agh4qybWMOK+rrtdU5IbG/vM6oo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.crl
                          rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A31E, serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8
        Validity
            Not Before: Jul 27 03:37:24 2026 GMT
            Not After : Aug  3 03:37:24 2026 GMT
        Subject: CN=6a66d275-e3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a3:b9:0d:e3:82:7e:21:8e:6f:04:cb:a7:92:
                    73:55:18:21:67:bc:30:c7:31:50:80:a9:f6:ec:96:
                    33:01:4b:34:b6:ab:70:f9:67:6d:3a:bb:13:c5:5e:
                    ea:a1:c4:6a:d7:66:75:41:06:ce:d7:be:49:96:48:
                    b7:aa:ed:0f:90:41:6f:ae:57:68:8b:44:5b:e1:ae:
                    29:a7:2d:94:d5:50:22:9a:fa:3d:12:2f:6d:75:6c:
                    0f:5f:08:0a:a2:c5:a0:66:ee:7d:e1:c4:0c:da:44:
                    af:2d:00:b6:c9:36:c5:d9:fc:ed:83:d6:43:0a:01:
                    85:af:11:e8:b1:00:01:b3:6c:b7:24:ea:2c:53:9a:
                    07:a8:e5:85:83:a0:bd:be:92:2c:84:93:4d:22:24:
                    5d:1e:ce:cb:41:00:36:59:ca:a5:b3:c7:6a:6f:35:
                    c0:6a:4e:46:68:7b:fa:a9:fe:6e:5b:0e:bd:6a:cf:
                    4e:ff:e2:68:ea:7f:21:0c:a0:81:ab:54:2d:e1:d2:
                    95:29:28:9a:e7:d6:80:e5:9d:1c:f5:63:58:c0:c9:
                    ed:e1:a3:b5:3a:87:81:ad:1a:7b:0b:d8:06:14:2f:
                    95:0c:3c:b5:08:ae:f8:b6:4a:88:00:06:88:21:77:
                    90:d6:af:10:44:fe:e2:df:2d:9a:f0:06:2e:c7:5f:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2A:BF:AD:2F:72:B1:5E:E6:13:18:E5:3E:77:E2:05:B5:3A:FB:5E
            X509v3 Authority Key Identifier:
                keyid:DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:39:e2:2f:99:00:95:ba:d7:5e:d8:dd:f2:c6:24:24:b6:2b:
         a7:83:6e:32:fa:e8:28:5e:9c:e6:56:36:14:f5:53:e1:8f:b4:
         d0:21:fa:5c:92:ab:b9:f8:84:65:58:c7:ef:2a:3e:ca:f4:f1:
         19:42:13:1b:35:d9:42:17:ec:d9:24:67:64:c3:c9:bd:49:85:
         b4:6e:28:10:8c:b5:63:89:ff:ce:a8:10:3c:1c:96:10:5c:1f:
         bd:ff:2f:07:2f:a1:f6:97:06:83:41:f4:4d:9a:cf:fc:25:37:
         a1:92:86:77:cc:50:15:6a:67:c7:ab:65:60:22:43:18:0c:e7:
         6c:51:23:59:0a:a6:27:0f:72:a2:53:37:9f:b1:fa:eb:a3:07:
         71:c4:32:d8:62:54:85:78:be:cb:c9:12:ce:da:b1:90:a0:e5:
         08:e6:3a:8a:af:88:b0:db:f9:f7:95:d1:6a:bd:23:d8:2a:b2:
         f5:5c:9e:8d:b3:8f:ba:41:d5:05:01:f7:0e:99:69:9a:f4:90:
         24:1f:f6:53:b5:35:b1:00:b7:84:31:75:56:5e:f3:33:2e:f7:
         0a:3e:16:ed:30:c4:08:e1:b8:b7:01:0b:a8:23:79:16:e1:06:
         d0:64:6e:a6:6d:79:2d:bc:f1:c0:ec:4d:fc:3a:5f:c0:db:f9:
         9d:be:ca:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkEzMUUxMTAvBgNVBAUTKERBNTdCMTkxQzU1QkIzMzE5RUJEOTE4MkRDMEQ0RTZB
RUYzRTBERDgwHhcNMjYwNzI3MDMzNzI0WhcNMjYwODAzMDMzNzI0WjAYMRYwFAYD
VQQDEw02YTY2ZDI3NS1lM2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmaO5DeOCfiGObwTLp5JzVRghZ7wwxzFQgKn27JYzAUs0tqtw+WdtOrsTxV7q
ocRq12Z1QQbO175Jlki3qu0PkEFvrldoi0Rb4a4ppy2U1VAimvo9Ei9tdWwPXwgK
osWgZu594cQM2kSvLQC2yTbF2fztg9ZDCgGFrxHosQABs2y3JOosU5oHqOWFg6C9
vpIshJNNIiRdHs7LQQA2Wcqls8dqbzXAak5GaHv6qf5uWw69as9O/+Jo6n8hDKCB
q1Qt4dKVKSia59aA5Z0c9WNYwMnt4aO1OoeBrRp7C9gGFC+VDDy1CK74tkqIAAaI
IXeQ1q8QRP7i3y2a8AYux1/T4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJcqv60v
crFe5hMY5T534gW1OvteMB8GA1UdIwQYMBaAFNpXsZHFW7Mxnr2RgtwNTmrvPg3Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTMxRS9DOEE0QzRFNEU4
QkIxMUVEQThEQjhBMUZDNEY5QUUwMi8ybGV4a2NWYnN6R2V2WkdDM0ExT2F1OC1E
ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJsZXhrY1Zic3pHZXZaR0MzQTFPYXU4LURkZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTMxRS9DOEE0QzRFNEU4QkIxMUVEQThEQjhBMUZDNEY5QUUwMi8ybGV4a2NWYnN6
R2V2WkdDM0ExT2F1OC1EZGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjjniL5kAlbrXXtjd8sYkJLYrp4NuMvroKF6c5lY2FPVT4Y+00CH6XJKrufiE
ZVjH7yo+yvTxGUITGzXZQhfs2SRnZMPJvUmFtG4oEIy1Y4n/zqgQPByWEFwfvf8v
By+h9pcGg0H0TZrP/CU3oZKGd8xQFWpnx6tlYCJDGAznbFEjWQqmJw9yolM3n7H6
66MHccQy2GJUhXi+y8kSztqxkKDlCOY6iq+IsNv595XRar0j2Cqy9VyejbOPukHV
BQH3DplpmvSQJB/2U7U1sQC3hDF1Vl7zMy73Cj4W7TDECOG4twELqCN5FuEG0GRu
pm15LbzxwOxN/DpfwNv5nb7KwQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:46:39 2026 by rpki-client