Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft
File:                     2KPIZydtR_ptDvLogh8Ps9MZcb8.mft (raw, json)
Hash identifier:          E/i0xTz40nyUUQkz9dPrA4Go+2jXW+cYqDIr7mHCCQA=
Subject key identifier:   6A:6F:14:39:B7:EE:B8:B8:E0:33:F4:3E:DB:2A:A8:4D:81:B5:A5:0C
Authority key identifier: D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF
Certificate issuer:       /CN=A91278E5/serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft
Manifest number:          50
Signing time:             Wed 19 Aug 2026 09:00:25 +0000
Manifest this update:     Wed 19 Aug 2026 09:00:24 +0000
Manifest next update:     Wed 26 Aug 2026 09:00:24 +0000
Files and hashes:         1: 2KPIZydtR_ptDvLogh8Ps9MZcb8.crl (hash: EgBFRLdsCEZgvUcInCMiN8sDUW9QpaMhmJLfn8nqPlw=)
                          2: 1C7AB64E21BE11F191732FC01B3D8C67.roa (hash: VkCR5thgem73gdzuOjRPxScIE5IryV7vWPHF+kNveak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl
                          rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278E5, serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF
        Validity
            Not Before: Aug 19 09:00:24 2026 GMT
            Not After : Aug 26 09:00:24 2026 GMT
        Subject: CN=6a8570a8-512f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:67:52:b9:8f:17:b1:f9:89:7f:f9:da:ab:93:
                    ce:11:75:d9:e8:e1:ec:2b:dd:cd:13:ad:6e:db:51:
                    ef:bc:df:17:91:37:43:ae:4e:69:16:16:91:3b:89:
                    66:8d:8f:02:6d:0e:84:f9:be:f3:ca:b4:1a:db:8c:
                    46:f1:50:7a:a6:44:6b:41:e6:af:3a:52:79:dc:4b:
                    8c:a6:58:b6:e0:eb:f8:cd:f0:7e:c2:96:00:07:54:
                    61:56:96:4f:2d:e8:6e:ab:0c:d4:80:a7:5d:e6:f0:
                    f4:b4:82:88:68:36:2a:95:ae:2d:6e:ed:ed:c9:41:
                    c2:07:ff:84:59:0f:09:ce:b0:13:b1:c6:6e:51:59:
                    e1:ac:ee:e1:c1:54:8c:45:9f:42:b5:4a:b0:7f:fe:
                    7c:16:35:99:ca:df:b2:7f:67:f0:e1:c2:95:c4:90:
                    2e:29:3e:e0:22:37:95:7e:1e:4f:ae:c3:65:81:d1:
                    dd:c8:f3:2d:2d:18:56:a3:7f:a7:39:ac:71:6d:e5:
                    93:92:9a:7d:4c:5b:6a:a3:ab:5f:3b:06:1f:e0:ab:
                    e2:15:7b:51:d1:7c:9c:6a:98:44:bd:b9:92:cf:5c:
                    91:40:88:e8:59:a6:87:1b:27:c1:e7:a2:9f:8f:20:
                    9f:67:50:c7:4a:d8:64:10:20:c4:d9:25:3e:83:e9:
                    cf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6F:14:39:B7:EE:B8:B8:E0:33:F4:3E:DB:2A:A8:4D:81:B5:A5:0C
            X509v3 Authority Key Identifier:
                keyid:D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:11:ce:29:7f:1a:b6:6f:00:37:10:7b:a1:fe:9b:7d:d7:0e:
         7b:5f:18:4e:f4:66:19:ec:53:03:72:75:13:f8:6a:b9:e8:54:
         f5:85:50:fb:cb:42:69:8e:44:ce:56:a1:ff:fd:ba:b7:85:72:
         5b:0e:7f:48:dd:84:55:e7:99:7b:6f:41:07:64:c8:e6:d5:fb:
         43:92:c4:83:e6:0b:c5:4c:c5:13:1c:47:e6:11:90:cc:a7:21:
         91:97:d4:49:bc:60:96:b1:8e:17:21:fc:ac:52:76:b5:43:30:
         c7:97:ed:ae:8f:e2:5a:80:b5:67:eb:2b:a7:20:55:18:64:ac:
         3f:81:68:3e:eb:15:2e:68:5f:2a:20:b4:b5:3e:4c:db:f5:d3:
         ab:68:c6:74:d8:87:3f:22:1c:81:a9:5d:19:39:a7:77:32:00:
         c3:8a:b8:c1:81:8d:9c:fd:8f:e7:f0:e0:55:b7:ba:53:cd:e4:
         10:f3:f5:dc:02:56:58:2e:4d:7c:6d:6b:05:19:47:9c:d1:36:
         64:c2:1d:62:48:4d:1e:97:fe:4f:ac:f2:ef:9e:3f:8d:3b:ac:
         48:63:f0:6f:0d:2d:b2:b7:d1:8a:38:87:7b:9f:04:2b:dd:a6:
         6c:18:30:07:c5:db:5b:d7:3c:c1:94:4c:3f:45:f7:dd:6a:c5:
         97:f9:58:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:16 2026 by rpki-client