Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
File:                     N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json)
Hash identifier:          evWZsS4tqavU6EzR2kAaULCMf1qXehelpc9G2SwWlEQ=
Subject key identifier:   C3:AF:B9:DB:43:F6:0D:B2:3A:BF:1E:97:C7:29:7C:08:AB:58:08:F3
Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
Certificate issuer:       /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Certificate serial:       0313
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
Manifest number:          02FA
Signing time:             Tue 21 Jul 2026 02:13:14 +0000
Manifest this update:     Tue 21 Jul 2026 02:13:14 +0000
Manifest next update:     Tue 28 Jul 2026 02:13:14 +0000
Files and hashes:         1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: wqXoLs90T3gJ5f0N1gRHakoEUio4zMH5PCheQ97dI6c=)
                          2: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: yGk/vqcwYlqrGgMj3fbRLifOH/23m2bl0HS4VWGoMYs=)
                          3: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: N8hOIX9lBnkWNR17KITPRqZldmiFlqdcpwwzsFLdg0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
                          rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 02:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787 (0x313)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
        Validity
            Not Before: Jul 21 02:13:14 2026 GMT
            Not After : Jul 28 02:13:14 2026 GMT
        Subject: CN=6a5ed5ba-36e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:a8:33:51:10:30:d9:8b:86:93:85:a2:28:
                    7b:9b:91:a6:2c:28:46:41:0a:5e:6d:7d:a5:c8:00:
                    6d:7d:d9:44:3c:46:a7:05:d3:6d:aa:77:fb:68:b8:
                    a4:e9:90:a8:b9:76:d1:0f:ad:bd:65:97:0f:1c:72:
                    f4:1a:2f:b0:b1:90:85:0b:f1:29:da:16:22:c8:a4:
                    c2:98:c2:95:c5:af:64:13:23:9d:d4:d9:75:4e:39:
                    d2:60:12:dd:f0:f4:25:94:eb:33:b4:a6:1d:63:6d:
                    e5:1b:f0:84:48:73:b0:d0:27:a0:c2:72:95:b8:88:
                    e7:eb:25:96:6a:af:19:3e:20:f4:65:1e:a0:ad:b3:
                    09:5e:95:0b:3a:08:36:e9:b4:a7:d8:3c:c7:7a:09:
                    ad:53:6a:bd:a0:28:f5:32:82:a5:4c:26:98:be:7e:
                    e3:d0:b2:b3:36:2c:df:11:bf:8e:04:65:89:65:52:
                    5b:a5:1f:eb:f7:8e:d1:78:85:41:11:3d:66:31:c8:
                    1f:02:76:58:fa:e9:21:9c:9a:3a:56:d9:e3:43:6a:
                    e3:62:0e:f9:32:c4:ae:4f:37:cc:55:5a:aa:01:6f:
                    6e:82:3f:42:92:ce:e8:65:87:58:bf:77:b3:d6:07:
                    83:a2:1f:b7:01:b1:28:61:2a:fc:a3:1c:2a:57:ca:
                    fb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AF:B9:DB:43:F6:0D:B2:3A:BF:1E:97:C7:29:7C:08:AB:58:08:F3
            X509v3 Authority Key Identifier:
                keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a6:2c:75:2a:8c:7c:5c:29:b2:9a:e3:35:12:6f:4e:8e:b2:
         bc:e7:5d:bd:8c:e8:87:df:58:e8:ba:9d:e1:fc:37:97:08:78:
         df:ab:55:50:1a:1d:cc:81:85:97:b6:34:34:06:0e:11:26:49:
         55:87:45:a3:9b:b1:1f:1a:e7:4c:6d:f9:e1:9e:c4:b6:96:c2:
         48:d1:9e:c1:3b:bd:fa:02:76:74:60:1b:bf:aa:bf:f6:d5:ca:
         7c:78:c8:00:cc:3b:37:0f:4c:53:c5:a5:3b:18:8f:9e:b0:a7:
         71:43:ce:a0:b5:6f:cf:26:2f:54:6f:65:70:70:aa:9c:f6:1d:
         a9:aa:3f:85:1a:ae:c1:fc:cc:0b:9b:83:13:c3:16:3b:65:88:
         02:88:9e:5a:45:92:23:c9:16:0d:18:f6:23:e9:61:8e:ca:68:
         0a:b5:b0:66:27:e8:11:05:75:23:92:d8:6d:ff:b1:ab:cf:e7:
         2e:d1:d8:07:7e:6b:e7:31:96:77:9f:72:52:c2:59:7f:f3:70:
         56:00:58:18:b2:7a:fb:96:de:24:91:07:82:10:76:48:34:87:
         df:e9:fd:c7:95:9d:a0:c3:e8:15:9c:34:93:5b:86:90:de:7d:
         60:88:73:9a:b9:53:12:d0:c7:bd:6f:34:15:68:9b:73:13:97:
         17:6a:e6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:58:39 2026 by rpki-client