Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
File:                     2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft (raw, json)
Hash identifier:          tcB3wnC+etJ8wvbzNVXDO3iIhgXw47dhPHYGikaqloQ=
Subject key identifier:   F4:8B:C8:8E:F8:13:43:B0:DE:33:50:F1:EF:CB:80:9B:38:82:56:F7
Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
Certificate issuer:       /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Certificate serial:       02B7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
Manifest number:          02B0
Signing time:             Tue 21 Jul 2026 01:08:07 +0000
Manifest this update:     Tue 21 Jul 2026 01:08:07 +0000
Manifest next update:     Tue 28 Jul 2026 01:08:07 +0000
Files and hashes:         1: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl (hash: RkNA4nQi+k7pFyzmX5u/B7UEAm+oi0WqB/HYv7UBMy8=)
                          2: F060FF0E720D11EDA84BE02EC4F9AE02.roa (hash: XjvBtz5g4frcjOMdQDCMXkpZji1fTdysFW39IJffTO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl
                          rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 01:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
        Validity
            Not Before: Jul 21 01:08:07 2026 GMT
            Not After : Jul 28 01:08:07 2026 GMT
        Subject: CN=6a5ec677-9813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:02:2f:38:57:4b:30:20:a0:23:d0:f4:76:
                    31:88:6c:c0:18:fe:5b:7d:6d:e7:6a:39:67:b7:53:
                    9b:bc:ce:0a:7f:5c:5f:dc:20:fa:06:c4:14:86:8e:
                    46:f8:fa:9f:87:24:a6:3a:e5:68:cc:9a:22:87:96:
                    89:bb:92:36:fe:3b:8f:a5:bd:9c:c5:85:f6:0f:57:
                    dd:bd:f4:7b:19:f9:1b:b6:79:34:d1:11:d4:c3:05:
                    2b:d7:25:34:32:cd:d9:1d:b1:48:60:be:9a:ab:47:
                    f0:47:8d:2d:dd:79:5c:be:64:0f:2c:8f:39:a5:e8:
                    f3:6e:0a:69:da:81:7e:36:f1:04:3b:1d:1d:7a:ce:
                    8e:8c:d9:20:69:04:d0:69:b0:a1:fd:81:83:d0:5d:
                    cb:25:c8:a6:e1:58:98:a1:51:41:2c:d3:3e:ba:08:
                    dc:95:9d:13:2a:a6:c3:e8:d7:a9:b3:3d:8d:76:dc:
                    28:fb:7d:d4:57:db:79:ad:60:58:7d:d5:43:43:1c:
                    7f:03:68:31:d6:9a:ad:f4:b1:7f:80:83:ac:22:24:
                    a4:39:c3:fe:45:6a:81:f4:90:62:f5:65:99:74:fa:
                    a6:84:e5:c6:02:f2:b7:70:c8:e8:89:3f:84:63:03:
                    f9:5c:68:fd:21:43:e5:0f:d8:c8:9e:8e:6d:a8:d5:
                    26:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8B:C8:8E:F8:13:43:B0:DE:33:50:F1:EF:CB:80:9B:38:82:56:F7
            X509v3 Authority Key Identifier:
                keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:87:66:2c:48:e3:d0:6f:e7:2b:05:d2:7c:e2:dc:51:08:88:
         2b:14:2b:35:62:cc:12:7c:c7:60:f0:bf:8b:1d:b6:e9:e3:78:
         b5:91:d1:73:2e:22:d5:a1:bd:6d:39:22:95:48:ce:bc:0a:83:
         73:e6:18:10:66:ad:26:f3:00:5d:3d:21:7b:ee:cc:3c:bd:4a:
         0c:96:92:41:21:50:fc:92:9c:31:42:b5:87:6b:a7:c4:8c:96:
         e4:71:bd:85:c8:2a:5b:24:3e:6d:3b:db:3a:56:67:d8:06:f6:
         d9:f6:6b:c2:f5:b9:0b:a6:4a:e2:c5:dd:47:a9:37:ab:ad:9e:
         35:f1:f1:6f:eb:96:17:29:af:bf:6c:31:49:21:d1:3f:d4:e2:
         b2:9c:f9:99:4c:97:db:d0:60:9f:83:ab:1e:ba:68:dc:9d:b6:
         15:ce:95:10:26:67:97:eb:a0:e6:7d:92:83:26:e5:0e:7e:4d:
         26:0e:23:97:ee:e3:63:8f:5c:7b:89:94:a8:47:2a:06:de:f7:
         51:2a:2b:24:84:27:ed:98:19:c1:6e:15:9b:82:1a:0f:87:a6:
         b4:de:71:65:a1:5d:b7:23:1e:35:c3:30:9d:8f:06:5c:3b:83:
         a1:e6:a6:6d:76:fd:ba:2c:a3:93:09:9c:b0:3d:f9:97:db:d8:
         bc:10:a6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:01:43 2026 by rpki-client