Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
File:                     loNUUNMhwefEjKDF3NK6bB0tSPE.mft (raw, json)
Hash identifier:          yEkzx/4JzhkAwbMV+dvkijlScATzKMbFFw6YsgnB49g=
Subject key identifier:   FA:9E:83:C2:92:FC:F1:F3:10:C7:1D:17:68:EB:01:F2:1E:70:4C:BF
Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1
Certificate issuer:       /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
Manifest number:          016F
Signing time:             Mon 27 Jul 2026 06:35:23 +0000
Manifest this update:     Mon 27 Jul 2026 06:35:22 +0000
Manifest next update:     Mon 03 Aug 2026 06:35:22 +0000
Files and hashes:         1: loNUUNMhwefEjKDF3NK6bB0tSPE.crl (hash: 2pR/q3JqEh1jRv+uqHF3uknLpHPjGi6OdKCi/OmozaI=)
                          2: 047C04705AC911EF9DF4275AC4F9AE02.roa (hash: rX5GXOpzN7zlqlxxBRKlBapjNOnn5ERzfr6wi0h0HHo=)
                          3: 050079585AC911EF9DF4275AC4F9AE02.roa (hash: cOFr30T5Sd5bA+9nAjs/xIKvrhVxSk/iBKwzS2ubtBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl
                          rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DF25, serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
        Validity
            Not Before: Jul 27 06:35:22 2026 GMT
            Not After : Aug  3 06:35:22 2026 GMT
        Subject: CN=6a66fc2b-63fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c9:10:3f:d2:97:1e:27:ce:fd:85:38:18:4b:
                    38:fd:7d:59:9a:c9:ca:af:e0:e5:05:81:8a:de:b9:
                    59:d2:ee:95:5c:8a:84:fe:1e:b8:2f:63:d0:bf:99:
                    14:81:58:75:7d:6d:d9:2f:5a:9b:77:24:4b:e2:fb:
                    27:35:1d:7d:97:cf:7f:d0:58:ff:25:4b:41:35:32:
                    65:58:66:85:0e:ae:09:d9:85:b3:02:79:90:db:4a:
                    3e:7e:2c:82:58:14:20:4d:aa:43:c2:ab:a7:c2:e0:
                    34:8d:42:5c:82:43:b1:ce:60:c6:6d:7b:17:a0:3f:
                    a1:a5:32:df:39:df:b2:fd:a3:c3:44:da:e5:86:df:
                    80:89:7a:52:a2:59:ba:a6:56:ff:d7:6a:23:56:99:
                    d3:ad:4c:6f:d5:02:74:7e:9d:4a:c1:7d:53:99:79:
                    fe:46:d3:88:14:fd:38:28:44:69:8d:54:d1:9c:e6:
                    0c:98:fc:a4:e0:38:d7:81:a3:ed:3a:73:83:8a:c6:
                    14:f3:92:7c:24:02:11:1d:e6:89:e2:60:b6:63:b0:
                    0b:2b:f0:1e:35:43:c9:3f:a2:a3:bc:9f:f3:95:a2:
                    5b:31:8b:26:8f:48:f5:4a:f1:59:f4:3f:15:4b:aa:
                    39:8a:33:fb:9f:40:97:c0:bc:26:41:69:9b:32:4e:
                    15:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9E:83:C2:92:FC:F1:F3:10:C7:1D:17:68:EB:01:F2:1E:70:4C:BF
            X509v3 Authority Key Identifier:
                keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4c:90:f2:4a:7e:23:b9:7e:fd:a1:13:55:46:c3:82:af:2b:
         fd:74:ed:54:df:39:f9:0b:11:00:ec:b0:cf:0a:5a:2b:c8:6e:
         82:49:f5:5d:8c:2c:ea:06:f8:c6:61:1e:9d:11:4b:c0:c5:54:
         aa:f2:64:cc:02:4f:e5:0a:44:c8:9d:a9:10:28:e9:7c:d5:9d:
         a3:18:43:73:56:d1:b1:54:99:96:da:80:a6:92:02:4c:82:2e:
         d0:40:4a:63:75:5c:7f:2b:f8:95:4a:b1:a8:74:40:54:d1:32:
         9a:25:a4:d6:30:f2:09:ce:dd:02:dc:64:ff:fb:54:ff:c3:e7:
         9f:10:4a:2d:59:50:04:08:27:78:74:97:36:3f:f6:b4:a6:eb:
         0b:38:36:96:f9:2c:8f:67:97:46:5e:da:5b:7d:fe:8d:f3:6d:
         61:d5:8a:54:01:48:37:22:20:fa:64:ed:82:ba:37:b4:be:8b:
         86:2a:80:cc:16:2c:f6:eb:7b:a3:3b:67:29:be:78:3b:ee:a3:
         a5:de:46:71:8f:c4:5e:b2:34:86:f7:8d:a5:95:07:17:1e:c3:
         9e:5d:43:b1:a5:f5:c0:9e:87:d8:39:5a:52:6f:30:53:bb:55:
         28:b2:e3:d8:94:54:4f:20:bb:f2:65:93:ce:ce:61:fc:68:bd:
         da:ed:3d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:00 2026 by rpki-client