Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft
File:                     lI_4don6lJEW9ffIAOsdcB5l43s.mft (raw, json)
Hash identifier:          xgMNHNHX3Ik1iWT5FiE9cpMTTd93bcYe3aQXj6OlIHM=
Subject key identifier:   B4:09:70:7A:89:58:D4:ED:3B:11:30:DA:7D:A0:B8:75:8E:A5:01:E0
Authority key identifier: 94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B
Certificate issuer:       /CN=A9148EFA/serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B
Certificate serial:       0C50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft
Manifest number:          0C46
Signing time:             Tue 28 Jul 2026 18:56:46 +0000
Manifest this update:     Tue 28 Jul 2026 18:56:46 +0000
Manifest next update:     Tue 04 Aug 2026 18:56:46 +0000
Files and hashes:         1: lI_4don6lJEW9ffIAOsdcB5l43s.crl (hash: pO2VsAzBGZ0aa67TqDDbZsObuEDH3//NmP8Ue0hZ/pk=)
                          2: 160F265C827311EDA56A8F30C4F9AE02.roa (hash: mJ7FNfAsY8ilIUPeznnb6nLSUZbSai5AntD3LtENWkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl
                          rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3152 (0xc50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148EFA, serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B
        Validity
            Not Before: Jul 28 18:56:46 2026 GMT
            Not After : Aug  4 18:56:46 2026 GMT
        Subject: CN=6a68fb6e-8ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:5b:55:d9:fc:25:cd:59:da:c4:f2:29:5e:
                    25:31:e7:e1:f0:dd:13:70:0d:c4:3a:6a:78:a3:a0:
                    4e:01:f9:82:79:14:ab:57:ed:9d:c8:fb:9c:fa:5c:
                    8f:69:03:a4:d0:50:9d:84:7f:14:7e:15:6e:dc:24:
                    67:4f:b8:fc:0f:59:3d:57:11:c6:51:6d:58:3f:3c:
                    7c:e0:a7:5c:9d:2d:a1:f7:ee:9f:a4:84:e7:2e:9b:
                    97:2d:04:b7:ac:54:3c:3a:37:83:7f:fb:03:94:fe:
                    6a:53:fe:41:e5:c3:37:b4:56:69:13:9b:e7:cb:6b:
                    d3:44:01:4e:3a:b5:da:8f:70:6d:5e:45:9c:53:c0:
                    52:3c:23:59:a7:2f:a2:0b:29:0c:be:7a:3e:cc:a1:
                    b0:3f:8f:37:8f:0c:16:ea:a0:95:ce:7b:8f:c6:5d:
                    53:7d:01:87:e0:c7:f9:d8:94:b3:b2:36:32:b1:f1:
                    86:f6:ae:d5:d3:41:74:4d:8f:8d:8f:ea:2f:d7:1d:
                    e5:08:fa:a7:e5:d6:ea:b7:46:17:39:c8:ce:f7:05:
                    94:b0:84:ca:bc:ba:6a:a5:6b:8b:d6:4d:32:cc:ca:
                    2a:ba:ec:24:da:28:b4:bc:41:5a:d8:fb:39:a8:c1:
                    4f:88:9d:d9:08:8a:d6:cc:87:95:ef:4a:d7:41:3c:
                    c0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:09:70:7A:89:58:D4:ED:3B:11:30:DA:7D:A0:B8:75:8E:A5:01:E0
            X509v3 Authority Key Identifier:
                keyid:94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1e:5a:6f:00:8a:12:31:ef:10:b1:89:11:ca:11:e9:28:a9:
         25:17:dc:4d:52:bb:fb:e8:fc:05:0e:8e:86:3c:51:1c:30:ab:
         bd:a7:50:d7:ee:dd:f4:70:6a:22:d2:69:a1:9a:f6:cf:de:03:
         db:05:84:43:79:5f:3e:7a:66:57:ec:d3:f5:82:9c:f7:70:6b:
         2b:68:11:49:7c:b0:f5:49:60:4c:15:d7:57:64:cf:b6:32:93:
         db:36:45:0a:68:4d:39:d7:17:d7:19:8e:a2:f3:b1:b1:65:86:
         fb:bc:f4:5f:f1:4a:bc:d1:bf:7c:2c:53:e6:9e:71:14:48:41:
         62:f3:f6:56:39:6e:3e:68:51:86:3a:d7:d1:ce:0a:94:b6:f5:
         de:8c:75:7c:57:c2:ba:33:eb:14:22:bb:40:5b:c9:9c:97:e4:
         12:39:1f:52:db:32:c8:c4:67:e6:f3:03:58:ef:83:d5:9f:7e:
         66:ed:7f:29:4f:17:9b:66:ae:47:05:57:54:86:78:8b:64:a4:
         f3:72:51:64:4b:75:9e:10:b4:79:90:f1:de:74:2f:46:84:e6:
         e9:77:fb:5b:78:12:19:53:bb:54:67:65:73:ef:86:3c:6b:5d:
         5c:47:42:b8:f1:21:78:5b:27:18:1e:8d:77:ce:54:10:fa:ac:
         20:69:a2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:03 2026 by rpki-client