Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
File:                     2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft (raw, json)
Hash identifier:          Ztsc2KreU9svd8g0dxzYO4qTlOyVuxBB/mL6RlsD+aE=
Subject key identifier:   E4:EA:46:58:05:24:A8:F8:4B:A9:9B:42:1B:C5:56:ED:CB:DF:A3:2D
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Certificate issuer:       /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial:       028E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
Manifest number:          0278
Signing time:             Wed 19 Aug 2026 02:33:43 +0000
Manifest this update:     Wed 19 Aug 2026 02:33:42 +0000
Manifest next update:     Wed 26 Aug 2026 02:33:42 +0000
Files and hashes:         1: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl (hash: Lsd26M0dprsVkCQOCGioQe7cIgRxGF14zqDrKUFvwJI=)
                          2: D2677928DD9811EDB2BBBA09C4F9AE02.roa (hash: oTWb+bgInuA40lVE9MU0fw0Ps1nvcZEIkiY5rAEAf1M=)
                          3: D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (hash: uq6cUAp8aWstgVcfNAAsf2DmlkVgoELMDbHxDJXHEOY=)
                          4: B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (hash: didvJhI7x6rWco2OGYAbxDlObbw/3Pq6tRwgusbYWYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
                          rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654 (0x28e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
        Validity
            Not Before: Aug 19 02:33:42 2026 GMT
            Not After : Aug 26 02:33:42 2026 GMT
        Subject: CN=6a851606-de8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a9:4f:c4:98:72:b6:b6:dc:b0:5c:5a:e4:0b:
                    2c:3f:22:e2:14:97:24:07:26:e2:14:0d:b8:2c:42:
                    c2:51:59:db:60:1a:72:58:e3:6c:97:b8:43:be:b1:
                    96:42:35:59:ab:47:1e:8c:d3:5a:8f:5b:74:fc:e2:
                    c3:ba:e3:64:4f:53:a1:cc:dd:bb:62:28:2c:c4:be:
                    40:ed:47:9d:0c:9e:11:d4:22:91:6b:b4:6b:2f:20:
                    d4:29:c2:0b:3c:ab:8d:a7:0b:21:75:97:e5:3a:3e:
                    3e:a3:21:93:b3:b5:39:c5:61:1d:15:73:3d:d3:8b:
                    2f:08:f7:0b:19:85:e5:3d:d8:58:0b:e7:e1:91:56:
                    9b:37:c4:17:68:31:d6:c9:af:37:68:22:3c:ef:62:
                    79:f9:25:bc:56:d1:88:96:58:41:11:ca:d9:51:0f:
                    91:ab:15:1f:a9:5a:be:89:af:b7:8e:48:c4:46:8d:
                    6a:10:08:90:8e:43:f9:b1:97:92:6f:74:e8:9f:4c:
                    56:4c:b8:38:04:7e:8a:8d:5f:03:d4:8d:ab:ac:cc:
                    e1:9b:dc:28:d1:b6:3f:2e:73:50:ab:6c:98:0a:79:
                    bb:ff:28:84:22:b8:9a:f0:d9:a3:ec:bb:c5:26:7c:
                    cb:b5:ea:fc:61:27:4e:1c:cd:ef:c6:58:b6:a2:20:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EA:46:58:05:24:A8:F8:4B:A9:9B:42:1B:C5:56:ED:CB:DF:A3:2D
            X509v3 Authority Key Identifier:
                keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e5:a4:2d:50:5f:d6:89:2a:1a:af:ff:f9:6c:a2:32:34:2e:
         1b:3e:93:f8:6e:0e:2f:ee:42:4d:2f:a4:77:4b:ba:1d:7a:27:
         70:c0:d0:a4:f7:ca:80:22:89:7e:54:dc:ab:94:d0:1d:76:f8:
         4d:94:f1:94:ee:fb:7a:1f:c3:c3:f2:be:93:e5:17:0d:16:56:
         42:7d:3b:34:ad:fc:66:ff:0d:54:30:c6:a9:c3:9a:b4:fc:02:
         3b:d6:99:63:1c:b8:03:3f:c9:5c:95:7c:af:60:53:13:f6:52:
         72:db:d0:1d:2f:dd:d0:42:85:9a:88:82:1c:c3:07:42:9d:f6:
         b5:44:05:03:4b:1c:63:2c:b8:f4:4b:53:9f:ad:92:09:63:ab:
         33:67:c1:1d:be:3f:4f:85:a5:b1:03:4f:6d:eb:37:a7:c6:69:
         21:fa:b0:c7:10:b8:92:32:41:7f:59:bd:ad:1e:fc:d4:df:8b:
         1f:b9:a1:fa:bb:8c:f8:82:d3:03:b2:74:81:6d:83:99:79:81:
         98:52:f8:dd:f2:41:55:43:3f:e1:f0:38:24:d5:b9:e0:24:b3:
         9d:35:80:5f:23:49:86:de:9a:53:d6:70:4f:fb:55:32:5f:94:
         47:9d:c2:4c:34:b7:78:fa:e2:b2:3d:a3:1a:d7:b2:4d:66:38:
         67:5d:5c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:10 2026 by rpki-client