Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
File:                     4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json)
Hash identifier:          2Qa0+Vi/AY8rq+79EVFxTtu/rKEhpxrVpf5MFfwYVSs=
Subject key identifier:   21:2A:5E:40:3A:84:FC:4C:5B:A6:58:3B:15:91:D5:45:E7:D4:46:31
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Certificate issuer:       /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial:       0165
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
Manifest number:          015D
Signing time:             Wed 29 Jul 2026 06:18:42 +0000
Manifest this update:     Wed 29 Jul 2026 06:18:42 +0000
Manifest next update:     Wed 05 Aug 2026 06:18:42 +0000
Files and hashes:         1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: 6PGdBC6rF9hv5RAmZeBhAvc8BhYPmYI96PAIb6BiFIY=)
                          2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: y1LKkgDaRj1ISWViw1cpYZqZzU1kENkFG+OyOnuW6h8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
                          rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 06:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
        Validity
            Not Before: Jul 29 06:18:42 2026 GMT
            Not After : Aug  5 06:18:42 2026 GMT
        Subject: CN=6a699b42-f49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:08:eb:5b:02:b8:b0:74:4c:b9:cf:17:00:
                    1c:e9:72:47:02:cd:3e:ba:1c:79:5a:5b:b4:eb:1a:
                    0c:3f:03:e9:e1:4d:af:94:0f:67:a0:a3:50:2f:9f:
                    ef:a1:86:1a:3c:4c:db:a0:d9:ed:f4:97:14:7f:49:
                    56:fa:58:14:34:16:3b:8c:74:09:ba:8a:01:9a:94:
                    09:0f:69:68:59:42:ee:48:19:7e:71:ff:e7:27:37:
                    a2:7b:ce:b5:8f:9d:79:ee:6a:77:93:59:92:2a:38:
                    d8:da:0d:c7:f8:23:9e:c2:b8:03:21:76:e6:56:61:
                    8f:75:89:c5:58:8d:2e:65:35:d1:76:d9:a2:98:49:
                    6f:a6:18:e1:9c:c9:18:24:49:91:5c:7d:f5:9e:bf:
                    d8:b6:73:56:4b:f1:d1:62:0a:bc:c9:99:20:5e:52:
                    a8:fb:d2:2a:05:cd:d6:c3:bc:c0:79:58:da:3a:04:
                    aa:e1:65:3d:bb:b0:d1:b4:bf:f6:90:ff:0e:dc:e1:
                    41:7d:3a:aa:5c:b7:a4:d1:29:ae:c0:7b:cb:66:8d:
                    12:ca:62:0c:52:4e:52:33:3b:56:e6:f7:60:16:0e:
                    a7:5c:ff:6b:7f:8d:98:ca:f7:2a:6d:f0:24:d5:57:
                    40:58:20:cf:a5:a9:38:a1:b9:c8:ea:bd:1c:6f:0f:
                    7e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2A:5E:40:3A:84:FC:4C:5B:A6:58:3B:15:91:D5:45:E7:D4:46:31
            X509v3 Authority Key Identifier:
                keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:77:3e:8f:76:5b:c2:42:68:7b:62:a1:1a:df:b2:94:72:db:
         fa:e8:3a:9c:0c:04:4f:f7:60:18:94:56:2f:66:1f:28:3d:e7:
         e8:ca:fc:c4:a2:dc:95:7b:70:54:4a:9d:14:f0:ef:d2:bc:05:
         b8:c1:8f:c4:9a:26:eb:af:8e:08:af:b1:68:30:b6:94:74:b8:
         0b:14:39:a0:9a:6c:12:02:5e:e9:bc:b4:ad:31:bd:d2:a1:44:
         a7:3e:dc:0f:b9:95:f4:46:d8:0c:69:0c:24:29:81:94:27:13:
         1b:51:46:62:b7:43:36:79:51:e1:24:ad:fa:9e:a6:82:40:ba:
         b0:06:51:c5:60:3a:d7:eb:5a:b4:e3:60:e6:5d:63:34:23:97:
         dc:12:1e:a1:78:9a:db:b4:2d:37:99:6b:a1:f9:ae:10:bd:ea:
         bd:ac:80:d5:2b:a9:c0:c3:b7:72:12:6f:f7:5e:60:46:ec:f3:
         07:ee:59:40:fa:b1:1a:ca:09:4f:1a:9d:29:c0:d2:84:55:df:
         9c:8e:81:c3:ba:68:b7:ee:27:ea:e4:00:cc:0b:c9:90:82:d0:
         b4:80:f8:a1:db:6c:43:8a:f6:0b:e5:cb:d8:29:03:92:fe:24:
         e2:0b:59:28:3c:3d:89:7c:07:b4:71:c6:c2:15:58:aa:98:09:
         d0:38:09:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:00:46 2026 by rpki-client