Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
File:                     lY1wluouaxa8JKHQRXGdLsUUSX4.mft (raw, json)
Hash identifier:          TVw/lWlSq0sYZoeFt3D1wZd78YD4rh8/NgyiFcqOpYs=
Subject key identifier:   66:8B:9C:72:A9:4C:05:37:2F:34:20:9B:40:4F:7B:CC:D7:A3:5A:E1
Authority key identifier: 95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E
Certificate issuer:       /CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
Certificate serial:       0334
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
Manifest number:          032E
Signing time:             Mon 27 Jul 2026 02:14:17 +0000
Manifest this update:     Mon 27 Jul 2026 02:14:16 +0000
Manifest next update:     Mon 03 Aug 2026 02:14:16 +0000
Files and hashes:         1: lY1wluouaxa8JKHQRXGdLsUUSX4.crl (hash: 0bUkQiQied6n2oCOLdz6FE1z7S6qjq0d8VFC6ZUZ6I8=)
                          2: 01109D481B9011EDBC68484CC4F9AE02.roa (hash: 9iIS+oJqtvIaxuE21AB7CyjRvSUfkuTKrVFukQPlVNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl
                          rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E28D8, serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
        Validity
            Not Before: Jul 27 02:14:16 2026 GMT
            Not After : Aug  3 02:14:16 2026 GMT
        Subject: CN=6a66bef9-4c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8b:0d:7f:61:e3:8e:00:d2:e9:8b:13:07:a8:
                    dc:34:ee:9f:58:56:3c:8f:11:89:ec:5e:ae:21:18:
                    cb:25:e5:5c:14:74:f9:4e:b1:b4:8b:31:8b:48:47:
                    68:ae:83:64:3b:cb:2c:81:b6:e5:50:21:3e:9c:ed:
                    34:7e:7e:d9:b1:58:16:4d:1e:77:37:55:99:8a:fc:
                    d0:62:2d:e4:cb:3e:eb:bf:a6:b9:16:a2:6d:5d:71:
                    f9:97:3d:55:c3:62:a8:95:6c:51:41:4f:73:2c:86:
                    d0:2b:64:7e:61:97:c9:48:aa:d6:71:15:08:4c:94:
                    74:71:90:ec:e9:08:0d:11:3e:c1:be:74:f9:13:f8:
                    42:1f:40:7e:f4:76:20:b2:3e:32:09:ee:aa:d2:dd:
                    a8:f7:e3:a7:44:f3:5b:c5:f7:16:fa:51:24:f2:24:
                    48:0a:7e:0c:75:53:42:28:18:8f:8f:c7:5f:a7:f7:
                    88:65:fb:d1:1b:fb:d5:56:a3:e9:aa:08:da:6b:4e:
                    33:c1:55:95:4c:e1:36:53:46:80:23:a7:72:63:30:
                    45:9c:a1:30:1f:6d:e9:40:6b:0d:72:0a:7c:55:73:
                    38:b4:3c:f3:cf:3a:3b:fd:88:05:ac:42:ff:1f:30:
                    8d:8d:cd:c9:4e:67:29:cf:30:1d:b9:2c:a4:7d:66:
                    c4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8B:9C:72:A9:4C:05:37:2F:34:20:9B:40:4F:7B:CC:D7:A3:5A:E1
            X509v3 Authority Key Identifier:
                keyid:95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:2b:41:0f:83:e4:f4:bb:4a:f3:56:b7:ce:c6:60:d9:0f:ea:
         63:75:c5:26:ab:d1:d9:52:9c:e2:dc:17:b0:24:34:6e:0b:dc:
         f1:0c:15:2b:db:60:15:e1:72:d4:64:70:09:62:c8:30:b2:fa:
         bd:f0:76:29:fd:8e:dc:5a:fc:e1:47:b0:cd:ed:c2:5d:a3:76:
         fd:e7:59:77:e4:74:60:6e:8d:0a:b9:48:04:ce:7e:cd:c2:5a:
         3c:b8:38:2c:35:47:55:61:ea:8d:4d:a0:5e:d0:49:3e:ef:8a:
         70:1f:ef:5e:b7:41:92:a9:de:07:d3:71:1e:ca:f3:c2:88:b3:
         17:1a:0f:55:29:1d:39:7c:a4:4a:d1:7f:fb:79:7c:cf:63:80:
         d3:5d:77:fc:39:d5:a4:e5:38:da:fd:d1:21:ad:b3:78:ca:e4:
         8f:c1:0d:63:6c:34:87:8f:12:67:cb:81:77:8b:25:53:2c:2f:
         27:ac:46:f3:bd:a6:a7:42:29:1f:8f:d1:d5:54:e6:b6:dd:20:
         26:ea:74:c6:d4:86:fb:2c:f2:00:48:f8:f4:3b:0f:53:c5:a3:
         13:a1:6d:9a:fc:9a:c1:7c:14:c4:ce:7a:ef:df:67:dd:05:33:
         d8:d6:1f:cf:7b:de:1e:b6:bc:e5:7e:34:9a:bd:e4:b1:fd:33:
         67:42:76:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:51 2026 by rpki-client