Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.mft
File:                     lEL1N-zOsDIKyhL8echC7A_9BiY.mft (raw, json)
Hash identifier:          CSCB1YN+/6tCYiwhTi6LMUfCevrsd9xii8AuU+tPuC8=
Subject key identifier:   FF:4E:DF:4E:14:4B:5D:2F:6D:6F:14:7C:F4:B5:F5:44:F8:D4:CD:9E
Authority key identifier: 94:42:F5:37:EC:CE:B0:32:0A:CA:12:FC:79:C8:42:EC:0F:FD:06:26
Certificate issuer:       /CN=A91F53E8/serialNumber=9442F537ECCEB0320ACA12FC79C842EC0FFD0626
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEL1N-zOsDIKyhL8echC7A_9BiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.mft
Manifest number:          05
Signing time:             Mon 27 Jul 2026 11:38:24 +0000
Manifest this update:     Mon 27 Jul 2026 11:38:23 +0000
Manifest next update:     Mon 03 Aug 2026 11:38:23 +0000
Files and hashes:         1: lEL1N-zOsDIKyhL8echC7A_9BiY.crl (hash: k8QH+LZ/SxgJ1l2O0yv99881kNhrfbmG/lrHyCf5Uxc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.crl
                          rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEL1N-zOsDIKyhL8echC7A_9BiY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F53E8, serialNumber=9442F537ECCEB0320ACA12FC79C842EC0FFD0626
        Validity
            Not Before: Jul 27 11:38:23 2026 GMT
            Not After : Aug  3 11:38:23 2026 GMT
        Subject: CN=6a674330-4cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cc:13:a6:25:f1:54:95:15:81:e1:29:86:78:
                    ad:01:62:bc:48:64:90:e5:ba:0e:1a:b1:dc:47:15:
                    b2:10:77:e8:3a:6b:28:28:cf:45:c8:bf:f5:63:97:
                    e9:76:85:0b:3a:18:99:6a:f6:d5:86:21:f4:7a:3a:
                    dc:31:71:72:ec:82:91:69:86:dd:a1:94:02:45:7d:
                    c1:0b:9b:0e:20:57:c4:5a:80:b2:52:c3:7a:6d:34:
                    4d:cf:0c:bf:77:f3:11:09:6f:42:a8:a7:f3:ad:1c:
                    66:1c:17:7d:5e:b7:ab:ff:81:93:d8:a1:75:03:88:
                    e6:05:3d:6e:37:ab:60:5f:29:87:bb:8a:aa:62:84:
                    c4:c5:09:68:94:bf:0b:a4:91:6b:0d:ab:06:58:2c:
                    74:3b:8d:66:f3:44:ca:6a:fe:f5:c1:55:2c:3d:14:
                    d2:ec:e8:a0:99:25:7d:17:2e:0d:8e:76:09:ab:37:
                    4d:64:81:58:ba:03:f0:00:dd:8c:ad:c1:b1:fa:9b:
                    6c:c3:4b:1d:0a:83:7e:df:b4:8a:99:6c:7b:33:02:
                    e6:45:e7:e3:32:bb:4b:f1:03:61:15:75:a6:73:72:
                    26:a9:e3:17:71:15:84:31:a3:0c:18:a1:fd:9b:ef:
                    af:bd:11:30:d5:4e:dd:3a:dc:2a:32:a0:4a:97:83:
                    96:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4E:DF:4E:14:4B:5D:2F:6D:6F:14:7C:F4:B5:F5:44:F8:D4:CD:9E
            X509v3 Authority Key Identifier:
                keyid:94:42:F5:37:EC:CE:B0:32:0A:CA:12:FC:79:C8:42:EC:0F:FD:06:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEL1N-zOsDIKyhL8echC7A_9BiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:70:94:4d:57:04:b6:48:86:7e:5b:89:4c:c9:a0:cd:6d:e9:
         d1:6b:89:f4:c2:fe:b8:57:dc:3c:66:1f:0c:f5:3c:2e:93:cc:
         2d:40:52:7c:97:ba:8a:cb:a4:ff:82:9f:78:47:19:c7:b8:7d:
         5a:a6:2e:f3:0f:5f:99:a2:96:e3:ea:f7:d4:3f:d5:c8:64:69:
         92:2d:af:ab:3e:d1:9b:ab:bc:b0:06:a1:2b:1e:e9:8b:0d:56:
         77:bf:25:69:d3:1c:68:fb:98:e8:23:30:1a:71:11:4e:6e:09:
         e7:ff:c8:c5:c5:d3:6e:f6:70:87:75:3e:5f:9f:51:a9:16:aa:
         ed:63:81:b8:5f:71:14:0c:d2:65:0c:85:a2:db:cb:e9:24:bf:
         62:24:55:1a:af:94:39:22:16:51:ab:bd:90:ae:0c:66:f7:b3:
         8a:99:96:3a:83:90:0f:9c:95:3b:2a:ba:f8:43:99:b3:7f:f6:
         20:98:be:a0:46:e0:28:9e:01:7b:d6:fb:eb:59:b5:6f:e1:b7:
         d9:21:83:08:26:55:4e:13:a9:42:a7:ac:f9:3e:d9:91:78:27:
         0f:26:50:35:0a:af:55:7d:16:50:1e:01:c4:93:82:e1:24:33:
         27:bb:12:63:fd:11:6d:da:58:15:57:a1:1e:25:3d:5c:7f:ef:
         0f:5e:ce:61
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NTNFODExMC8GA1UEBRMoOTQ0MkY1MzdFQ0NFQjAzMjBBQ0ExMkZDNzlDODQyRUMw
RkZEMDYyNjAeFw0yNjA3MjcxMTM4MjNaFw0yNjA4MDMxMTM4MjNaMBgxFjAUBgNV
BAMTDTZhNjc0MzMwLTRjZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDkzBOmJfFUlRWB4SmGeK0BYrxIZJDlug4asdxHFbIQd+g6aygoz0XIv/Vjl+l2
hQs6GJlq9tWGIfR6OtwxcXLsgpFpht2hlAJFfcELmw4gV8RagLJSw3ptNE3PDL93
8xEJb0Kop/OtHGYcF31et6v/gZPYoXUDiOYFPW43q2BfKYe7iqpihMTFCWiUvwuk
kWsNqwZYLHQ7jWbzRMpq/vXBVSw9FNLs6KCZJX0XLg2OdgmrN01kgVi6A/AA3Yyt
wbH6m2zDSx0Kg37ftIqZbHszAuZF5+Myu0vxA2EVdaZzciap4xdxFYQxowwYof2b
76+9ETDVTt063CoyoEqXg5ZvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/07fThRL
XS9tbxR89LX1RPjUzZ4wHwYDVR0jBBgwFoAUlEL1N+zOsDIKyhL8echC7A/9BiYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1M0U4Lzc4MDVGQTlDODVG
NDExRjFCOUEwMDQ4ODc0QTMwRkJDL2xFTDFOLXpPc0RJS3loTDhlY2hDN0FfOUJp
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbEVMMU4tek9zRElLeWhMOGVjaEM3QV85QmlZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1
M0U4Lzc4MDVGQTlDODVGNDExRjFCOUEwMDQ4ODc0QTMwRkJDL2xFTDFOLXpPc0RJ
S3loTDhlY2hDN0FfOUJpWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBMcJRNVwS2SIZ+W4lMyaDNbenRa4n0wv64V9w8Zh8M9Twuk8wtQFJ8l7qKy6T/
gp94RxnHuH1api7zD1+Zopbj6vfUP9XIZGmSLa+rPtGbq7ywBqErHumLDVZ3vyVp
0xxo+5joIzAacRFObgnn/8jFxdNu9nCHdT5fn1GpFqrtY4G4X3EUDNJlDIWi28vp
JL9iJFUar5Q5IhZRq72Qrgxm97OKmZY6g5APnJU7Krr4Q5mzf/YgmL6gRuAongF7
1vvrWbVv4bfZIYMIJlVOE6lCp6z5PtmReCcPJlA1Cq9VfRZQHgHEk4LhJDMnuxJj
/RFt2lgVV6EeJT1cf+8PXs5h
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:01:43 2026 by rpki-client