Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
File:                     2leiQgcEcAjXOmXWgiSke5oD2qo.mft (raw, json)
Hash identifier:          pWrjZKvHbgG0rysjJ/ClFnaFlqj2BZ9+kox2RMlMGAs=
Subject key identifier:   38:F2:DA:24:04:92:A5:7C:DE:5D:10:07:CA:03:B8:34:82:D7:B7:6C
Authority key identifier: DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA
Certificate issuer:       /CN=A914573E/serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA
Certificate serial:       06FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
Manifest number:          06F3
Signing time:             Tue 18 Aug 2026 22:32:35 +0000
Manifest this update:     Tue 18 Aug 2026 22:32:34 +0000
Manifest next update:     Tue 25 Aug 2026 22:32:34 +0000
Files and hashes:         1: 2leiQgcEcAjXOmXWgiSke5oD2qo.crl (hash: L66LP69u0ILm0mKJafKIYF55SpZcLWaGsmVFYe6bw3A=)
                          2: B67E0BB4A5A511EB94C0DE0FC4F9AE02.roa (hash: +i5uHJyJF9AnTEDT4nux2xnB0e7UDjY1PtVm2KqOSJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl
                          rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1788 (0x6fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914573E, serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA
        Validity
            Not Before: Aug 18 22:32:34 2026 GMT
            Not After : Aug 25 22:32:34 2026 GMT
        Subject: CN=6a84dd83-fde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:4a:53:08:48:bd:f3:7f:d9:9c:a9:dc:fd:
                    f5:02:28:74:4a:a7:43:fa:c9:97:a9:3e:3c:fb:18:
                    77:ec:60:e3:6f:a7:11:85:ed:5f:32:0f:d6:16:9a:
                    2e:4d:4b:ab:93:3d:bf:8c:04:1a:9b:4b:4a:dc:28:
                    39:5b:bd:fa:7b:b8:99:0a:3e:82:5e:98:e1:67:27:
                    21:a7:2c:61:41:91:b2:40:cc:3b:c4:8d:c5:68:50:
                    28:46:18:53:57:d8:92:d5:51:6e:59:27:7f:f0:4e:
                    14:0d:44:bc:60:b8:53:53:86:48:ba:b3:07:47:73:
                    49:a4:c9:27:22:74:b8:0c:53:1f:48:22:26:9d:1c:
                    6c:40:c8:0f:c1:fb:98:2a:1e:10:d1:d7:5c:6f:2e:
                    d2:4b:58:7f:c3:16:a2:ca:ff:a7:db:43:fd:1e:2b:
                    46:73:a1:32:35:29:3e:9c:f9:39:01:a1:63:b3:aa:
                    78:c0:15:f6:4a:ff:8e:2d:e0:9e:7d:ec:5f:46:b3:
                    84:e6:ba:30:62:eb:6d:93:8c:a8:27:72:85:e0:03:
                    55:16:44:4a:15:f7:42:da:0a:c3:b1:e2:ff:93:92:
                    25:74:cd:27:0b:03:80:13:78:38:c3:06:f4:3c:4c:
                    64:54:97:38:03:5f:49:0b:cd:59:86:20:f4:10:2d:
                    1c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F2:DA:24:04:92:A5:7C:DE:5D:10:07:CA:03:B8:34:82:D7:B7:6C
            X509v3 Authority Key Identifier:
                keyid:DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:98:86:55:6c:e4:10:7e:61:76:f3:bd:93:69:5a:f9:a0:17:
         bb:d2:97:f9:9c:bc:41:dc:18:20:48:66:21:d0:05:d8:3d:43:
         14:5a:af:3d:d2:7e:56:f7:e6:d0:6b:f3:7e:a3:c0:75:bb:13:
         b8:cd:10:16:a4:47:24:78:aa:eb:88:06:d7:43:fa:d8:10:aa:
         d7:3f:64:be:98:8d:d1:9a:1e:39:64:97:48:61:fc:24:79:1e:
         e3:19:6f:17:1d:a6:51:93:3c:14:94:4a:6b:4c:92:f4:5c:df:
         e9:94:f9:42:8d:79:15:9d:2d:e7:c7:37:42:81:bf:c8:c5:e0:
         e3:77:f7:38:62:71:c6:19:67:04:ad:5a:de:22:28:74:24:7c:
         26:b0:a7:31:57:40:79:45:31:01:75:18:bb:c1:62:43:2c:c8:
         98:b4:f1:2f:0d:f2:1d:16:77:f2:b0:9e:89:d0:66:4d:c1:3b:
         ca:74:fb:16:94:4a:1b:6d:39:cc:06:24:e9:fd:70:40:27:75:
         af:b9:a7:a9:79:3a:c4:6f:8f:81:23:91:0a:4e:bd:25:a3:03:
         e6:30:74:b6:e6:6f:93:bc:0b:af:4f:54:04:08:99:ee:ef:c9:
         bb:b4:b8:1d:21:09:2d:e0:e6:c3:fb:f2:0f:d8:a5:4c:fb:28:
         d1:6e:03:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU3M0UxMTAvBgNVBAUTKERBNTdBMjQyMDcwNDcwMDhENzNBNjVENjgyMjRBNDdC
OUEwM0RBQUEwHhcNMjYwODE4MjIzMjM0WhcNMjYwODI1MjIzMjM0WjAYMRYwFAYD
VQQDEw02YTg0ZGQ4My1mZGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAotVKUwhIvfN/2Zyp3P31Aih0SqdD+smXqT48+xh37GDjb6cRhe1fMg/WFpou
TUurkz2/jAQam0tK3Cg5W736e7iZCj6CXpjhZychpyxhQZGyQMw7xI3FaFAoRhhT
V9iS1VFuWSd/8E4UDUS8YLhTU4ZIurMHR3NJpMknInS4DFMfSCImnRxsQMgPwfuY
Kh4Q0ddcby7SS1h/wxaiyv+n20P9HitGc6EyNSk+nPk5AaFjs6p4wBX2Sv+OLeCe
fexfRrOE5rowYuttk4yoJ3KF4ANVFkRKFfdC2grDseL/k5IldM0nCwOAE3g4wwb0
PExkVJc4A19JC81ZhiD0EC0cgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDjy2iQE
kqV83l0QB8oDuDSC17dsMB8GA1UdIwQYMBaAFNpXokIHBHAI1zpl1oIkpHuaA9qq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTczRS82NzY4OTc4RUE1
QTQxMUVCOThDMzI5MEZDNEY5QUUwMi8ybGVpUWdjRWNBalhPbVhXZ2lTa2U1b0Qy
cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJsZWlRZ2NFY0FqWE9tWFdnaVNrZTVvRDJxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTczRS82NzY4OTc4RUE1QTQxMUVCOThDMzI5MEZDNEY5QUUwMi8ybGVpUWdjRWNB
alhPbVhXZ2lTa2U1b0QycW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKZiGVWzkEH5hdvO9k2la+aAXu9KX+Zy8QdwYIEhmIdAF2D1DFFqvPdJ+Vvfm
0GvzfqPAdbsTuM0QFqRHJHiq64gG10P62BCq1z9kvpiN0ZoeOWSXSGH8JHke4xlv
Fx2mUZM8FJRKa0yS9Fzf6ZT5Qo15FZ0t58c3QoG/yMXg43f3OGJxxhlnBK1a3iIo
dCR8JrCnMVdAeUUxAXUYu8FiQyzImLTxLw3yHRZ38rCeidBmTcE7ynT7FpRKG205
zAYk6f1wQCd1r7mnqXk6xG+PgSORCk69JaMD5jB0tuZvk7wLr09UBAiZ7u/Ju7S4
HSEJLeDmw/vyD9ilTPso0W4Dhg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:12 2026 by rpki-client