Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft
File:                     r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json)
Hash identifier:          PjsXxWc5TloigMjQpQuMAKnni6OlcNcLvxcY1f6BWV4=
Subject key identifier:   77:1F:BE:73:B2:66:E1:EE:EE:90:1A:39:29:D1:49:36:8E:8A:70:50
Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15
Certificate issuer:       /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815
Certificate serial:       2B36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft
Manifest number:          2B04
Signing time:             Fri 04 Sep 2026 15:32:02 +0000
Manifest this update:     Fri 04 Sep 2026 15:32:01 +0000
Manifest next update:     Fri 11 Sep 2026 15:32:01 +0000
Files and hashes:         1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: lUnZ6kUm8IVdwTMXMtjx2+UBIPn9p3uCLFhZMDdysQk=)
                          2: CDF2E51A092B11F08557BF1AC4F9AE02.roa (hash: KfbtJA247J/Zmfl5Zk/N7yPlBYy8W2snRQQBsdFcv+c=)
                          3: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: mi5Z8QiyFyePXfXFb5bmVuyq1rksFrDBMyBn1iuDnTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl
                          rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11062 (0x2b36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91620ED, serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815
        Validity
            Not Before: Sep  4 15:32:01 2026 GMT
            Not After : Sep 11 15:32:01 2026 GMT
        Subject: CN=6a9ae472-ad4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:49:d8:ed:c7:5d:1c:91:96:c8:b6:2d:1d:45:
                    5e:c9:1a:76:6c:1e:89:5f:6a:69:1e:66:0d:22:d6:
                    2a:cd:6a:26:2f:e0:61:52:a9:39:f9:b7:75:96:88:
                    dd:7c:51:0e:a6:51:4f:ae:91:92:5a:aa:05:fb:69:
                    00:32:4e:53:a4:c8:da:7c:f7:ff:63:45:81:b9:57:
                    39:35:61:ff:9d:46:48:d7:db:e7:8c:14:3c:66:3b:
                    a1:11:5e:08:42:fc:bc:a3:4b:36:a6:03:e0:1a:60:
                    97:4e:fc:b4:d3:3e:08:87:27:ea:32:6e:5b:d6:3d:
                    27:b9:90:89:9f:75:86:4f:31:83:89:f3:bf:2a:09:
                    f8:b1:35:b4:b2:66:03:5f:2a:0c:43:96:d8:0e:c3:
                    f0:ad:c7:c9:22:88:20:6e:fc:9b:5d:45:2c:7e:0c:
                    09:fa:94:50:3a:52:a1:25:fb:f5:7f:79:13:15:86:
                    b3:1b:e4:c3:cf:4b:ce:df:5f:17:aa:56:5b:47:3a:
                    e1:45:19:31:ec:ff:f7:c5:31:5b:bc:bc:29:c6:44:
                    6a:58:1c:ff:82:88:af:eb:dc:9a:14:74:5d:91:a8:
                    50:0f:32:70:40:02:9d:55:52:c7:d9:2a:03:da:ee:
                    df:0b:10:42:7c:d8:31:fd:7a:ad:5f:7c:9a:e3:a2:
                    a9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1F:BE:73:B2:66:E1:EE:EE:90:1A:39:29:D1:49:36:8E:8A:70:50
            X509v3 Authority Key Identifier:
                keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:78:bd:04:2c:e5:df:5f:41:96:8c:d3:8b:6a:65:cd:e7:00:
         f6:29:11:a5:2f:9e:82:fa:56:d6:7d:23:06:9b:61:79:14:65:
         88:1a:79:22:dc:c3:1b:bc:db:22:79:45:46:83:39:7c:cd:7f:
         9b:bd:ca:ec:ac:c6:7d:fd:5c:6c:64:01:a9:1b:2b:a2:20:c4:
         e6:be:54:fa:4e:93:7c:d2:e8:b6:f5:7f:3b:21:96:1f:2f:ce:
         ba:f2:fe:fd:10:fa:ae:b0:61:66:fc:db:86:58:39:33:2c:39:
         35:a8:12:9c:c5:a7:c3:91:7f:9e:42:2e:44:cf:69:7f:e4:69:
         ea:1c:5e:39:2f:d1:ae:93:82:41:cd:ef:23:bc:6a:08:e5:6c:
         7e:70:bd:35:fe:7b:12:15:ea:12:20:23:91:96:42:c8:f6:b4:
         91:f9:be:56:21:14:dc:a0:50:5d:1e:b3:8e:14:b7:59:d2:d5:
         23:eb:61:5b:b7:ca:51:2b:b4:25:63:81:64:78:b7:1b:17:10:
         19:57:a5:1e:76:3e:b8:40:44:56:c9:e1:a0:af:92:5c:80:eb:
         c1:90:ce:49:90:cc:25:95:fa:1e:c9:b9:f9:03:89:f1:20:10:
         02:eb:6c:a7:d2:f7:07:74:af:9f:75:d0:a5:01:3f:2b:c5:98:
         bb:5c:c4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:40:57 2026 by rpki-client