Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
File:                     ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json)
Hash identifier:          fPwDDGQwQ18ArMcfy8rJZsYUr7McA+QhknOqzaMNw9s=
Subject key identifier:   D4:00:14:31:0E:28:8A:9E:2F:F1:79:3B:AE:BA:CF:66:59:9F:54:F7
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Certificate issuer:       /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial:       0255
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
Manifest number:          024B
Signing time:             Mon 27 Jul 2026 03:58:17 +0000
Manifest this update:     Mon 27 Jul 2026 03:58:16 +0000
Manifest next update:     Mon 03 Aug 2026 03:58:16 +0000
Files and hashes:         1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: +Y1MMqzGHFehYE6c/488M9w8ML3E4u/E8Ab143YyjCc=)
                          2: 95FE27F02D1511F19EAB6E70B3833773.roa (hash: hxELHtGIUsJ5X6fDwKBBUuO929IKOwxoHEeRfQefsOg=)
                          3: 3304B5BA43B311F19399644A98833773.roa (hash: bzOsUU4L5zybRan2RbEqjLxhGbEC4X30U/TXsNv87pc=)
                          4: 6445C13C2D1511F18C0F846BB3833773.roa (hash: PLgXnUtV5/qDMTfK+s5CXVumrPmYkILffVNAYNUoLk4=)
                          5: AD4C18D62D1511F19E800787B3833773.roa (hash: gF6FfjxDgiZ5qTPAnk0dNcAHblND2UNyNpInYeZ2Rc8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
                          rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
        Validity
            Not Before: Jul 27 03:58:16 2026 GMT
            Not After : Aug  3 03:58:16 2026 GMT
        Subject: CN=6a66d759-4fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:21:66:30:2c:fc:0e:86:a6:1a:f3:2a:9b:7e:
                    2b:74:54:ae:3f:f4:48:39:fb:31:a2:c8:d0:c2:36:
                    ad:f0:10:9e:7d:83:21:53:74:29:81:84:7b:fc:ff:
                    51:c6:b2:60:bc:7d:83:f2:21:66:f3:d6:fb:ab:50:
                    64:a0:c3:b0:80:9f:5c:03:a8:1e:8f:61:e3:77:08:
                    b7:f5:47:fb:0b:49:94:10:fa:ae:c9:dc:ad:92:a6:
                    90:b8:c1:b9:9a:12:d9:01:87:05:f4:de:df:8c:11:
                    36:1d:41:2d:2f:56:c1:48:95:b3:98:5e:c0:69:8a:
                    f8:4a:b1:49:0b:d0:22:c9:65:cf:d1:ae:3f:01:bc:
                    a7:6c:32:64:c6:40:0b:c9:7e:ee:0c:d7:ef:d4:2b:
                    38:b5:d5:3e:1a:0c:0c:40:f9:be:90:28:6b:75:38:
                    e8:ed:33:a1:fb:92:1a:12:65:1d:e0:8c:c1:0b:fe:
                    91:de:8f:f8:af:f0:88:8b:5e:3d:a2:29:33:a9:e3:
                    5a:89:5a:88:09:8b:4e:8c:70:af:24:df:72:d0:63:
                    6d:e4:7f:6d:92:02:98:3e:30:42:8a:f0:37:9e:e8:
                    2b:9d:cd:2f:aa:5c:87:2b:b9:b0:92:46:37:bd:39:
                    33:af:cf:a9:fe:4a:ab:e7:8a:2b:6e:4d:f4:aa:2f:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:00:14:31:0E:28:8A:9E:2F:F1:79:3B:AE:BA:CF:66:59:9F:54:F7
            X509v3 Authority Key Identifier:
                keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:2b:10:ed:2f:41:fe:6a:bc:88:70:8f:95:13:a0:01:16:0e:
         da:94:4b:8b:bb:b1:eb:16:97:7a:98:6f:1a:3f:3f:18:aa:8c:
         ba:a3:5c:d8:7b:09:77:39:29:8a:be:93:aa:de:e2:b5:a1:fa:
         ad:ee:fa:ef:3f:e5:2a:ca:70:3f:cb:3e:8f:38:54:15:73:55:
         87:80:f8:85:5f:bf:4f:64:24:7e:c7:29:64:39:39:9f:52:8d:
         b0:9d:88:c7:b4:cc:34:5b:75:b6:86:7d:89:79:a1:59:77:d8:
         02:a8:45:a9:1e:a6:36:f5:8f:c9:35:4d:ae:a4:fc:f3:3a:46:
         4e:ba:3d:37:26:c0:4b:df:aa:64:79:a3:3f:30:05:9f:bc:1c:
         5a:d8:4d:3f:c9:bd:75:e0:c3:13:46:ec:24:73:39:a9:8e:4a:
         bc:b1:3f:9d:31:21:99:49:ed:fa:d5:b4:f1:32:75:f5:b3:a2:
         f2:f2:47:14:0f:da:ab:05:01:95:96:ec:bb:50:7a:a5:83:ca:
         fd:ed:c8:4e:47:16:4c:bd:75:fc:95:ff:c3:9b:df:43:12:9c:
         cc:59:bd:13:fe:b5:2d:2c:2c:51:3c:5e:97:1b:e4:22:af:0e:
         de:ec:07:70:21:c9:b2:e8:fb:64:e8:51:a4:3b:b6:20:81:95:
         f8:a2:2c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:30 2026 by rpki-client