Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
File:                     l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json)
Hash identifier:          ldF+khQYnEtPRQTPnMuM6z9wPb0tAnw7u3FxPr3L9+o=
Subject key identifier:   44:E5:B9:F6:BF:F5:73:E1:5F:CC:F4:06:1A:33:F9:9F:96:C7:D7:01
Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18
Certificate issuer:       /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
Certificate serial:       0AED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
Manifest number:          0AE4
Signing time:             Tue 28 Jul 2026 19:41:52 +0000
Manifest this update:     Tue 28 Jul 2026 19:41:52 +0000
Manifest next update:     Tue 04 Aug 2026 19:41:52 +0000
Files and hashes:         1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: OUS3B69KNKMxKDIOVvLJn5+/Ymgv+Ltjm7VVa44sIuY=)
                          2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: SrQx35DtVrxCsWAmfoF73hHpqsoh3DRvVDcP3/ka8L0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl
                          rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2797 (0xaed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
        Validity
            Not Before: Jul 28 19:41:52 2026 GMT
            Not After : Aug  4 19:41:52 2026 GMT
        Subject: CN=6a690600-42bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:84:08:53:61:ca:87:67:aa:54:1e:17:4c:15:
                    5e:21:46:3c:81:b8:2b:03:1c:49:50:c2:a9:a8:a0:
                    9f:e2:7b:68:4f:bf:ec:56:1f:4e:8c:11:6b:5e:8b:
                    da:42:b1:f3:2c:48:af:dc:45:d9:8b:4b:c3:80:68:
                    6e:d9:98:15:46:52:70:e6:e5:08:5e:ff:6a:91:9f:
                    9c:00:ab:97:df:32:c5:89:b9:b2:a8:76:df:cd:1b:
                    bc:d9:37:fa:14:a9:e9:89:d2:bc:a8:76:b0:16:c3:
                    f1:c0:19:92:6f:e6:10:b9:fa:4a:9c:df:0b:d6:07:
                    50:5d:39:8a:7a:25:b6:f9:f2:94:24:44:07:3e:c2:
                    22:fb:50:1b:b0:20:cd:86:39:bc:47:cc:25:3d:d2:
                    ae:6a:11:3e:f5:25:db:eb:a1:01:8d:24:fe:36:5c:
                    b2:8e:c3:ff:56:50:dd:03:44:ac:bb:49:d6:fb:5e:
                    57:63:5a:5b:25:ff:95:86:f8:12:32:d1:bc:3e:a8:
                    09:a7:ab:26:ed:6a:8c:a5:78:07:e5:ee:8e:5b:c8:
                    21:ff:2e:33:f9:ca:c3:67:87:a0:b9:90:c5:54:ee:
                    a7:3f:b8:42:9b:a1:44:d3:4c:e1:23:6f:4c:79:fc:
                    97:02:4f:97:11:1e:d4:01:76:46:07:21:58:01:d0:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E5:B9:F6:BF:F5:73:E1:5F:CC:F4:06:1A:33:F9:9F:96:C7:D7:01
            X509v3 Authority Key Identifier:
                keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:59:fe:1f:cd:96:33:08:de:61:27:42:32:ca:52:6a:ae:47:
         cf:01:6e:0f:1b:0c:0d:98:48:f0:98:dc:c1:8f:b8:14:0b:c6:
         91:8a:4e:b6:78:01:8e:7b:49:77:d1:e4:10:6c:56:65:fd:89:
         fe:06:6c:f0:a4:df:37:26:54:d6:15:4b:dd:66:6e:f0:57:ed:
         99:5e:21:84:cf:90:5f:31:07:93:b3:1f:3b:66:0c:1d:d5:34:
         bf:e3:79:9c:a4:e5:55:fe:25:61:50:53:fd:18:9d:44:eb:b6:
         ad:88:4a:7e:5d:0b:db:f9:c2:4f:cf:47:53:d4:07:bf:be:f4:
         12:27:53:bf:47:f6:4d:0d:54:96:0d:e3:f8:7d:fd:ca:bf:27:
         0a:92:d8:b0:52:1b:12:78:23:bb:50:34:6b:82:07:b3:d0:bc:
         9d:05:7e:94:b8:5d:fc:38:df:cd:a1:a1:73:67:24:b1:6d:32:
         c3:e5:0b:91:f5:b0:8e:70:bc:2e:8e:a2:5e:99:9d:c9:ba:fb:
         21:35:c8:b5:82:31:30:41:73:da:45:fd:8d:a7:62:d8:96:42:
         5b:47:10:4e:f5:82:63:48:5c:37:d1:25:df:ea:cf:1c:73:5f:
         07:d9:ed:57:e8:c2:c9:54:c0:3a:2a:b0:30:d6:b2:f4:c5:e7:
         73:8c:e3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:16:41 2026 by rpki-client