Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
File:                     5LMs8qYR9wLf0JE-PqULT9YexXU.mft (raw, json)
Hash identifier:          qynlhSsrQJftZ6zMvK8a5MvrLPQe2YqgmdlJyjNNPaQ=
Subject key identifier:   36:2D:C2:25:FF:AC:53:5E:D2:D8:5B:AB:08:D5:2C:8C:92:AD:3C:58
Authority key identifier: E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75
Certificate issuer:       /CN=A914450B/serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575
Certificate serial:       0860
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
Manifest number:          0857
Signing time:             Tue 28 Jul 2026 21:20:03 +0000
Manifest this update:     Tue 28 Jul 2026 21:20:03 +0000
Manifest next update:     Tue 04 Aug 2026 21:20:03 +0000
Files and hashes:         1: 5LMs8qYR9wLf0JE-PqULT9YexXU.crl (hash: BQVzR7DD4bVwuMt25/bCdAYFnJVSj3eZgz6h2qDyYfc=)
                          2: 5B9B8A1213F311EBA7343351C4F9AE02.roa (hash: XjgKRLBaZq02D/Cp43Aj+NT1Qh0TEvZMzuVtJSm3G00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl
                          rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2144 (0x860)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914450B, serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575
        Validity
            Not Before: Jul 28 21:20:03 2026 GMT
            Not After : Aug  4 21:20:03 2026 GMT
        Subject: CN=6a691d03-9d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a3:30:1a:68:a4:12:7a:7e:2e:bf:73:73:92:
                    88:4f:61:cf:53:12:72:21:59:34:9f:6d:09:d4:8e:
                    e0:f6:81:72:4a:94:f7:44:8d:b9:42:c1:22:4a:3e:
                    ae:b0:f9:4d:3b:28:71:a4:d3:74:29:7b:70:73:31:
                    fe:36:8d:84:2b:4a:b9:cd:f7:f8:23:39:55:35:9c:
                    83:db:d7:9e:24:c7:4a:3b:d2:d8:36:3f:d8:c8:86:
                    84:1f:37:87:93:a2:bf:78:3c:8b:c8:ab:9e:0e:fb:
                    f2:48:df:91:46:93:46:de:5d:66:c9:eb:ff:c5:73:
                    91:e0:07:4d:f7:b6:46:ac:06:c0:2e:52:5e:9d:95:
                    1f:be:84:0e:8a:6f:69:93:4d:59:6c:7f:cf:a8:f5:
                    9b:08:9b:b6:fb:67:ed:59:32:7f:f5:1c:62:6b:9e:
                    80:11:89:9b:4a:7d:ba:36:58:d9:ca:93:71:39:d1:
                    06:bf:1d:8e:e2:1e:ca:47:12:f3:99:50:d2:0f:5d:
                    95:78:6c:5c:7c:ca:48:f3:9d:94:c7:f1:b8:fd:79:
                    75:9b:cc:78:23:c6:39:16:7c:51:0c:d9:4d:4f:aa:
                    f6:97:84:77:d7:3a:f9:40:58:73:13:f9:93:46:9a:
                    06:27:2e:61:e1:c9:2f:71:35:4f:3a:83:0e:bd:bc:
                    bd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2D:C2:25:FF:AC:53:5E:D2:D8:5B:AB:08:D5:2C:8C:92:AD:3C:58
            X509v3 Authority Key Identifier:
                keyid:E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b9:aa:dd:e7:6f:45:50:ec:2d:5e:46:85:17:47:99:d3:e7:
         ea:4f:77:a2:98:90:83:01:3d:57:a8:ac:3b:0a:41:60:84:e5:
         c8:51:d8:ab:9b:9f:19:58:49:16:59:55:91:49:d7:91:4f:ee:
         d3:4e:9c:be:79:be:20:3b:84:b4:96:3b:8f:02:6b:b1:a3:e8:
         d5:5b:e3:cb:ec:dc:c6:da:89:a8:4a:c6:fa:68:0b:12:1a:57:
         17:c8:db:e4:8b:87:86:bf:0f:6c:3b:fa:e2:35:33:cc:66:ef:
         bc:29:32:2a:ec:85:00:bb:65:d5:e4:89:78:c1:b9:05:b0:42:
         04:4e:fa:71:29:49:95:ab:56:51:4f:48:48:9b:29:9a:2e:15:
         d3:2d:37:94:ce:50:d4:e9:b3:be:d7:05:1a:3f:f7:c7:05:f9:
         f5:ce:c0:ff:7d:62:b8:77:3a:f5:6a:7c:13:ba:64:5d:c5:f5:
         13:87:63:7d:32:f0:9c:5f:05:af:84:8c:1f:e3:05:d4:a4:7d:
         f2:10:ec:58:09:a5:65:95:ad:bc:b3:c2:52:2f:ee:c4:a9:e9:
         2f:22:3b:40:3f:cd:e3:0e:0f:e3:7b:36:99:b2:4c:cf:ed:e5:
         81:c3:8d:20:d7:6d:9b:3a:94:36:cd:c5:9a:01:fb:22:23:b0:
         b0:9c:d9:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ1MEIxMTAvBgNVBAUTKEU0QjMyQ0YyQTYxMUY3MDJERkQwOTEzRTNFQTUwQjRG
RDYxRUM1NzUwHhcNMjYwNzI4MjEyMDAzWhcNMjYwODA0MjEyMDAzWjAYMRYwFAYD
VQQDEw02YTY5MWQwMy05ZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzqMwGmikEnp+Lr9zc5KIT2HPUxJyIVk0n20J1I7g9oFySpT3RI25QsEiSj6u
sPlNOyhxpNN0KXtwczH+No2EK0q5zff4IzlVNZyD29eeJMdKO9LYNj/YyIaEHzeH
k6K/eDyLyKueDvvySN+RRpNG3l1myev/xXOR4AdN97ZGrAbALlJenZUfvoQOim9p
k01ZbH/PqPWbCJu2+2ftWTJ/9Rxia56AEYmbSn26NljZypNxOdEGvx2O4h7KRxLz
mVDSD12VeGxcfMpI852Ux/G4/Xl1m8x4I8Y5FnxRDNlNT6r2l4R31zr5QFhzE/mT
RpoGJy5h4ckvcTVPOoMOvby9rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDYtwiX/
rFNe0thbqwjVLIySrTxYMB8GA1UdIwQYMBaAFOSzLPKmEfcC39CRPj6lC0/WHsV1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDUwQi9GN0I5RTMwQTEz
RjExMUVCQjgxMjM5NTBDNEY5QUUwMi81TE1zOHFZUjl3TGYwSkUtUHFVTFQ5WWV4
WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVMTXM4cVlSOXdMZjBKRS1QcVVMVDlZZXhYVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDUwQi9GN0I5RTMwQTEzRjExMUVCQjgxMjM5NTBDNEY5QUUwMi81TE1zOHFZUjl3
TGYwSkUtUHFVTFQ5WWV4WFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJrmq3edvRVDsLV5GhRdHmdPn6k93opiQgwE9V6isOwpBYITlyFHYq5ufGVhJ
FllVkUnXkU/u006cvnm+IDuEtJY7jwJrsaPo1Vvjy+zcxtqJqErG+mgLEhpXF8jb
5IuHhr8PbDv64jUzzGbvvCkyKuyFALtl1eSJeMG5BbBCBE76cSlJlatWUU9ISJsp
mi4V0y03lM5Q1OmzvtcFGj/3xwX59c7A/31iuHc69Wp8E7pkXcX1E4djfTLwnF8F
r4SMH+MF1KR98hDsWAmlZZWtvLPCUi/uxKnpLyI7QD/N4w4P43s2mbJMz+3lgcON
INdtmzqUNs3FmgH7IiOwsJzZKw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:51:45 2026 by rpki-client