Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
File:                     2MZzCV6Cqbfn381GWA94MajRiso.mft (raw, json)
Hash identifier:          ZJY42fFnLJzAncXv0uxI4P9pkBNNE/6FGW1T9tjAomQ=
Subject key identifier:   34:6F:0F:75:6B:E5:7D:4C:B2:8C:49:F0:53:4B:6B:E3:F3:AD:91:B0
Authority key identifier: D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
Certificate issuer:       /CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Certificate serial:       1843
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
Manifest number:          181D
Signing time:             Thu 10 Sep 2026 16:31:16 +0000
Manifest this update:     Thu 10 Sep 2026 16:31:15 +0000
Manifest next update:     Thu 17 Sep 2026 16:31:15 +0000
Files and hashes:         1: 2MZzCV6Cqbfn381GWA94MajRiso.crl (hash: jjrd9GhIEuraY8YzwebJa1v2B51u4m3po+dsnKEDBLQ=)
                          2: 07FF86DACF3F11F0AF94352AC4F9AE02.roa (hash: axL4DxRLdN4w1oidCM91AwY0+Ml6Zzq4wlYIpZ72Alw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
                          rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 16:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6211 (0x1843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911862D, serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
        Validity
            Not Before: Sep 10 16:31:15 2026 GMT
            Not After : Sep 17 16:31:15 2026 GMT
        Subject: CN=6aa2db53-e907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:e9:a6:8c:b4:6a:ae:97:c8:6a:19:19:ee:
                    a1:e1:35:5e:72:30:21:b2:92:52:2b:87:a6:d2:d2:
                    5b:58:c3:a1:ef:9a:42:36:00:07:3b:82:f7:ac:28:
                    e6:d3:36:40:5f:6a:b0:9d:18:8a:4e:d7:6c:e6:cc:
                    4e:d3:40:70:9e:5e:2b:88:c8:5d:2e:96:c6:9f:40:
                    c3:cc:59:5d:21:23:00:75:6a:6b:f8:b1:35:16:52:
                    cb:78:ab:00:56:43:51:93:71:44:a8:49:ca:1d:6f:
                    ec:03:33:c3:e1:d2:c5:a7:17:93:db:12:fe:d9:cc:
                    0d:1a:41:be:b7:b3:03:46:ca:c8:98:5e:d5:d8:b5:
                    93:5a:64:8a:c9:75:47:e3:cb:fb:0d:6a:b3:9c:f1:
                    80:ad:50:4b:c7:8c:dd:c5:f0:52:18:7f:31:4d:83:
                    e0:bf:04:5b:8c:06:87:38:45:d4:53:5f:f6:1b:57:
                    ec:34:fa:38:8c:06:c0:f3:cb:db:19:01:ec:3c:79:
                    b6:f5:55:1e:81:39:bf:fe:d0:94:41:d2:90:e9:14:
                    69:60:ba:5a:79:54:e3:92:51:be:54:1c:05:14:ae:
                    54:cc:63:2d:68:27:a3:2c:7e:a2:96:ca:93:78:6d:
                    07:b1:c8:dc:b2:f5:44:01:68:c7:8b:bd:cf:f2:62:
                    5b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6F:0F:75:6B:E5:7D:4C:B2:8C:49:F0:53:4B:6B:E3:F3:AD:91:B0
            X509v3 Authority Key Identifier:
                keyid:D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a0:36:d5:3a:9c:21:4a:c3:a8:9f:65:b0:03:9d:16:99:9b:
         61:6d:69:03:77:c7:08:94:e2:b5:76:95:53:ef:8d:e7:fd:20:
         44:1e:62:0d:94:7c:8a:2e:b2:e6:52:6f:41:24:ee:e4:c6:ae:
         e2:d7:17:db:cf:86:26:17:10:08:e8:ed:ea:49:e6:36:01:d1:
         19:c7:35:fa:ee:0f:aa:17:53:18:da:9a:48:43:0d:59:65:8a:
         60:10:f9:55:87:ef:b4:ec:d9:7e:31:de:f1:5b:61:d2:9d:b5:
         fc:e7:27:0c:a9:f4:0a:25:cf:7a:86:28:89:41:db:57:e1:88:
         a4:02:9d:d3:e7:56:20:ab:ac:73:bf:61:0b:a2:31:74:9e:86:
         8e:bd:d5:4d:50:f7:e6:4a:75:ce:07:72:28:19:60:9a:37:38:
         7a:84:8b:ad:c6:8d:c5:b2:3a:e3:3b:19:15:60:1c:74:54:41:
         cf:3b:56:cd:32:aa:37:e4:86:23:8a:ac:23:06:4d:47:3a:77:
         78:53:f7:3b:25:91:de:0c:3a:e3:19:bc:2a:0c:be:fa:f5:c7:
         7c:98:d1:b3:36:e8:a7:eb:90:24:b3:39:80:1b:6f:80:df:d8:
         8e:47:17:4f:b4:f7:97:05:16:aa:a0:85:d1:94:6d:5a:73:96:
         3c:60:43:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:29:19 2026 by rpki-client