Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
File:                     LEUCOU_ZzE2HemU5c1CklTBhNsE.mft (raw, json)
Hash identifier:          KThlYgEWwELbq279DRNtyWOLIeD93bMQM70esr3AZEc=
Subject key identifier:   2D:32:7A:24:BF:A1:02:A2:3D:D1:9D:39:56:FD:11:41:6D:A2:18:51
Authority key identifier: 2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1
Certificate issuer:       /CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1
Certificate serial:       069B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
Manifest number:          0691
Signing time:             Sun 26 Jul 2026 23:18:49 +0000
Manifest this update:     Sun 26 Jul 2026 23:18:48 +0000
Manifest next update:     Sun 02 Aug 2026 23:18:48 +0000
Files and hashes:         1: LEUCOU_ZzE2HemU5c1CklTBhNsE.crl (hash: sD9H1isc63nIaHVLAoQe8rpy/BfDQd5gQzszsJIEJWE=)
                          2: B69382D2CCC911EBB3A3513CC4F9AE02.roa (hash: /7av7VmQbV+L0jTSYNfMg1H06rntjmVObrTCW6Y2sTg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl
                          rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1691 (0x69b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D8C3, serialNumber=2C4502394FD9CC4D877A65397350A495306136C1
        Validity
            Not Before: Jul 26 23:18:48 2026 GMT
            Not After : Aug  2 23:18:48 2026 GMT
        Subject: CN=6a6695d8-75cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:cf:03:6c:8d:6e:e9:01:d4:47:d7:cf:e4:
                    fd:92:18:c2:1e:09:0e:58:6d:9b:1b:bf:10:5c:b5:
                    17:ae:7c:d2:4c:23:4f:0d:13:60:21:82:2e:ed:20:
                    20:5d:2d:97:2a:39:6a:a8:26:2f:6b:04:c5:65:e0:
                    67:fc:c1:56:0d:0f:58:d5:9a:2e:89:d4:41:a9:b8:
                    4b:bb:a1:e5:28:26:64:ee:32:c0:50:83:69:1f:49:
                    a8:7c:ad:7f:2c:0f:59:5e:49:5e:fb:9b:b8:d2:08:
                    a3:94:ba:86:c7:5c:17:ca:bf:00:09:5f:41:26:c1:
                    3b:1b:41:50:55:65:6a:7a:a3:7a:0c:83:6f:ab:61:
                    b4:78:09:63:7b:94:1f:e6:e3:d6:a3:58:ae:31:63:
                    21:18:eb:83:b8:31:32:fb:40:6b:fe:b3:89:43:78:
                    eb:8c:b9:f6:d3:de:91:6d:14:18:6a:df:3d:c6:84:
                    1f:fa:3f:96:c4:cb:83:7a:38:0a:c7:ce:24:22:66:
                    74:6d:d5:b3:d3:3c:b2:61:9c:dc:df:c5:b3:f6:b5:
                    83:08:8b:ad:65:a5:1f:51:14:42:e2:b3:54:b3:f6:
                    dd:ca:0d:7a:71:51:b0:23:e1:11:c3:38:51:04:ca:
                    ff:c3:95:3b:1f:d0:8a:73:84:b4:e6:c6:06:2f:91:
                    68:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:32:7A:24:BF:A1:02:A2:3D:D1:9D:39:56:FD:11:41:6D:A2:18:51
            X509v3 Authority Key Identifier:
                keyid:2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:9c:72:88:67:f7:40:c0:87:44:c9:ff:1c:93:77:bc:b3:0d:
         85:c1:44:96:b0:ee:a4:9f:09:fe:ea:ca:09:53:44:85:f1:cd:
         73:c3:3a:0c:d9:fe:d8:bb:48:7f:a0:27:0e:89:1f:6a:4f:6f:
         f7:24:a6:1e:b8:25:a6:2f:2e:b6:20:e3:08:f8:4f:c3:6b:c0:
         24:1d:c0:a5:c4:b9:1d:30:61:67:7e:25:f5:af:a8:cb:c6:6e:
         d7:44:35:cf:c7:5f:63:9e:39:83:d9:80:bf:7d:d7:20:2c:14:
         5a:16:fe:bc:f1:68:2d:b4:6a:cc:2a:b5:01:6f:af:c1:62:9e:
         77:bf:a1:a5:e9:e7:63:3c:1b:c3:67:07:83:e9:0a:93:1b:41:
         c8:db:c9:75:12:99:b4:4b:2f:07:f8:5f:58:1b:af:8a:91:c2:
         9d:0f:b5:8b:46:0c:db:47:27:43:96:5a:d7:ff:af:88:69:7b:
         d7:15:6e:1d:c8:52:60:27:d1:49:83:e1:42:85:35:68:e5:0e:
         2e:d2:78:a7:1b:2e:26:ea:b0:23:dc:e1:86:4b:d0:1d:aa:69:
         e1:fa:25:6a:8d:ad:fe:5b:1e:24:67:73:be:ea:56:fd:e8:73:
         06:5a:36:74:b6:a4:3b:f4:02:76:c3:eb:9b:e0:e8:49:46:d9:
         57:b2:7a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:58:25 2026 by rpki-client