Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft
File:                     limscQ0-IdWZGSjVmk22VBGpa_8.mft (raw, json)
Hash identifier:          MqIXZCGZ51yHC9za1heXQbNW3CMKBv4djBtORQLxqwY=
Subject key identifier:   8E:A4:2C:57:5A:E6:97:51:B6:A0:5F:BB:81:D8:09:14:4D:2C:3D:77
Authority key identifier: 96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF
Certificate issuer:       /CN=A91EE6E8/serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF
Certificate serial:       0D19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft
Manifest number:          0D0D
Signing time:             Tue 28 Jul 2026 18:26:36 +0000
Manifest this update:     Tue 28 Jul 2026 18:26:35 +0000
Manifest next update:     Tue 04 Aug 2026 18:26:35 +0000
Files and hashes:         1: limscQ0-IdWZGSjVmk22VBGpa_8.crl (hash: LNxPddVd2hTOn3+MFe7GXucOO6GpaZnD8fAsR8d2BNk=)
                          2: 9CDAADC2091E11EAB375615BC4F9AE02.roa (hash: nbleFFcKgxmn1F4KARea2uckGFoVmcgHkC7uA6X0V9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl
                          rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3353 (0xd19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE6E8, serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF
        Validity
            Not Before: Jul 28 18:26:35 2026 GMT
            Not After : Aug  4 18:26:35 2026 GMT
        Subject: CN=6a68f45b-98d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f9:11:cc:b5:08:57:df:0f:1b:ed:fa:18:2f:
                    70:ce:0e:d8:ab:00:fe:76:9a:cf:b0:b3:45:7c:bf:
                    7c:cc:47:39:97:af:37:05:48:70:50:6a:07:24:88:
                    90:1d:97:38:de:e9:51:7f:45:e6:bd:d6:20:15:f7:
                    39:a8:25:c4:91:63:9b:3e:46:74:04:fb:e3:26:6e:
                    a1:7d:b5:a3:54:b9:f3:8d:91:05:1b:a7:62:ac:28:
                    5c:a7:63:51:de:df:21:eb:35:d5:5d:a1:be:c1:ce:
                    ca:b5:1a:57:f0:c4:fd:c4:0c:fb:8d:2c:1c:d3:89:
                    70:4f:f0:f4:da:62:ee:a4:f2:b5:59:cf:61:71:cf:
                    a6:21:28:68:79:65:1f:89:52:8d:01:a6:dc:bb:44:
                    ee:36:7b:78:e9:44:e9:32:e7:7a:c6:fe:ee:77:50:
                    c3:56:d0:67:5b:ff:e1:c6:90:c3:34:11:dc:f5:2c:
                    e6:72:e5:5c:4a:59:e2:d2:65:99:59:9f:3d:cd:e1:
                    0d:90:7a:ad:3d:30:39:b0:3d:28:e8:74:3a:02:38:
                    47:9f:53:2a:1a:be:6f:4d:ee:d5:98:02:d8:c3:42:
                    eb:23:c8:82:18:be:e1:10:9b:97:15:fd:66:a7:6b:
                    6b:84:aa:7e:51:d8:f2:65:1f:57:58:32:fd:7e:a0:
                    02:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A4:2C:57:5A:E6:97:51:B6:A0:5F:BB:81:D8:09:14:4D:2C:3D:77
            X509v3 Authority Key Identifier:
                keyid:96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:21:c1:8a:bd:16:74:f3:ff:e7:52:20:e2:1b:a4:41:ed:de:
         86:9e:18:15:fe:e3:bc:7e:e4:ac:d3:23:49:99:dc:94:44:1d:
         9a:fe:c2:e1:c1:e3:dc:6c:f5:19:60:25:29:c2:6c:3a:4a:ea:
         77:42:04:12:7b:1e:bc:50:a3:ce:3a:85:30:01:c0:f6:ea:6a:
         7b:81:92:bf:27:ff:92:9e:56:95:ab:88:1b:9a:06:dd:5b:44:
         86:1d:16:c3:36:db:a9:ba:0b:52:bc:46:3d:a1:c2:2a:e4:9b:
         e5:dc:ad:ff:d7:54:05:b3:c5:b7:ff:1e:06:3b:67:be:75:61:
         85:d6:f8:b2:df:3a:50:45:a3:6d:f3:38:9c:be:27:dc:f3:75:
         c8:ef:d6:5a:c8:64:8b:89:6a:25:ef:5e:f6:31:c0:95:8c:cd:
         3a:47:07:68:b5:76:28:b9:19:6a:83:c3:1f:98:17:8b:09:46:
         c7:56:8f:9c:2e:c2:eb:27:04:87:c2:58:e8:a4:31:ca:19:29:
         30:65:a3:53:b6:ff:58:df:8e:37:e6:2a:39:6e:af:b5:c7:db:
         32:40:93:17:b2:42:89:bf:17:a6:18:d5:9f:f2:1e:6a:ad:f3:
         35:01:3e:04:45:d8:57:b7:09:f4:d5:d0:67:27:a8:36:a6:6e:
         d3:69:66:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:07 2026 by rpki-client