Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
File:                     LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json)
Hash identifier:          b7nw8k6IrktCJXB8aFyn+mQjQVb07rqPdHoh4T8pcG0=
Subject key identifier:   1F:03:1B:2A:CA:6C:83:50:1B:38:E4:3C:5B:24:65:AE:EB:06:30:60
Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
Certificate issuer:       /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Certificate serial:       0A78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
Manifest number:          0A70
Signing time:             Tue 28 Jul 2026 19:55:48 +0000
Manifest this update:     Tue 28 Jul 2026 19:55:47 +0000
Manifest next update:     Tue 04 Aug 2026 19:55:47 +0000
Files and hashes:         1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: ghW13E7wXIUKeOETuYd3vUVhB7nULR3AFNZYLPNnlfM=)
                          2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: cj0uIogezd0yWwaHnlYBF13kTbwkCk4qf3kI26mN/jI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
                          rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2680 (0xa78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
        Validity
            Not Before: Jul 28 19:55:47 2026 GMT
            Not After : Aug  4 19:55:47 2026 GMT
        Subject: CN=6a690944-f7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:60:ef:0e:77:89:2d:da:95:94:36:a1:ec:
                    b6:c2:84:1d:36:b9:66:39:89:eb:f0:fa:60:9a:20:
                    8c:29:1b:1e:07:3b:63:4d:44:a7:35:e5:20:cf:97:
                    46:f5:ab:b6:3b:4c:84:cd:2a:47:7d:39:94:95:c0:
                    fe:29:84:34:ba:cc:be:a4:86:56:4b:21:e3:91:18:
                    51:0e:3b:24:8f:e6:70:85:a0:1b:2c:89:9b:dd:09:
                    ab:0f:30:de:d3:9e:30:bc:6d:d0:60:b7:0d:e3:b8:
                    9c:d8:9b:00:48:4e:fd:0d:ec:1c:88:c4:89:35:5c:
                    21:2b:c9:21:5f:49:b9:f9:41:d4:32:ba:0f:e5:be:
                    21:74:8c:c9:63:11:20:3f:cc:87:51:8d:e0:d6:14:
                    d4:b0:db:55:86:7a:9a:18:5d:9b:72:e5:e0:17:5b:
                    37:e8:d1:e0:0f:9f:a3:e6:b2:bf:8d:2b:8e:de:37:
                    6a:4b:4a:45:79:7a:a9:84:05:3c:ef:d4:41:97:e4:
                    69:17:4d:70:45:69:35:d9:54:46:22:80:8e:31:a9:
                    da:94:95:ce:4a:5e:66:bf:1a:35:85:05:08:85:80:
                    31:94:c9:82:0a:21:76:1d:66:ca:d0:ae:7e:f9:a1:
                    b2:43:8b:fe:87:68:57:f5:f4:55:01:da:2c:e4:5c:
                    1e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:03:1B:2A:CA:6C:83:50:1B:38:E4:3C:5B:24:65:AE:EB:06:30:60
            X509v3 Authority Key Identifier:
                keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:db:64:21:23:26:b8:cb:f1:eb:2f:88:4e:ea:ee:eb:f0:63:
         ee:31:58:06:b3:47:08:08:59:b4:4e:02:b1:85:49:3d:6d:d8:
         f4:84:51:ea:06:13:74:4e:6c:3a:2d:d3:53:ce:00:bf:56:be:
         51:06:67:a4:ef:16:8b:5e:26:77:4b:42:12:ec:0b:19:a4:37:
         ba:82:7b:9f:4c:89:20:51:79:0b:1f:46:aa:3a:a4:54:a9:61:
         06:04:ab:f9:ca:bd:63:15:fa:62:ec:f7:b3:ea:5f:3c:2f:ca:
         2e:26:70:01:1a:b4:91:9c:fd:b4:a5:4e:a7:18:41:8a:13:d7:
         3a:58:bb:2e:5d:76:a3:b7:cc:93:af:db:a1:57:21:0e:df:c6:
         68:29:76:e4:67:b2:b7:29:f0:b1:f3:fc:d4:d8:de:63:24:6f:
         42:50:11:b0:d5:dc:4b:7c:39:07:56:d3:3a:94:81:5e:5a:ed:
         83:f9:80:95:fb:1e:72:bc:d3:ff:e2:e3:8b:15:4c:a3:e7:72:
         db:63:5d:a0:a0:dd:62:11:94:90:63:58:4a:2f:06:22:8f:3e:
         6f:c0:ce:2f:57:9b:47:7a:98:88:51:2f:03:5c:5e:07:da:12:
         20:8b:03:31:27:2e:e6:a0:06:d3:cb:31:ed:bf:19:29:92:39:
         b8:d8:d8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:02 2026 by rpki-client