Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
File:                     2-bH-ZCQRq41ohWw4hVErlIjfoo.mft (raw, json)
Hash identifier:          coiSGAmMvszajZBIYXJ9k63Q9FJTW9emdP+peALb2Uk=
Subject key identifier:   72:12:2D:24:E1:DA:AA:13:AD:D4:31:8A:5E:DE:F4:B2:E3:E1:F7:74
Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A
Certificate issuer:       /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A
Certificate serial:       0757
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
Manifest number:          0882
Signing time:             Mon 20 Jul 2026 20:56:18 +0000
Manifest this update:     Mon 20 Jul 2026 20:56:18 +0000
Manifest next update:     Mon 27 Jul 2026 20:56:18 +0000
Files and hashes:         1: 2-bH-ZCQRq41ohWw4hVErlIjfoo.crl (hash: rhWHcaB82O1BbUefyzBfFOn864QwhuxUxL9pumIsffc=)
                          2: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (hash: uPVVKDs8FXCGXCVQqQJZYdG3JPqyWcieyoiy4+qFczg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl
                          rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 20:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1879 (0x757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F697, serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A
        Validity
            Not Before: Jul 20 20:56:18 2026 GMT
            Not After : Jul 27 20:56:18 2026 GMT
        Subject: CN=6a5e8b72-4288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:f8:47:82:b0:79:8c:7c:e4:d9:e5:0c:34:
                    cf:9c:14:fe:18:17:aa:5b:2b:fd:bd:99:c0:a1:4d:
                    41:07:35:3f:38:d0:96:bc:c8:1f:6e:49:c5:e4:eb:
                    06:de:5c:d4:bf:b7:cf:2a:c0:c5:21:41:56:65:65:
                    63:9d:8c:9a:bc:81:0d:d6:ca:e5:d0:32:9a:c0:f3:
                    03:73:d8:a9:d6:c6:9d:44:fb:2c:ab:fd:ee:38:59:
                    e4:f6:82:71:8d:16:02:ae:45:74:63:17:71:5f:32:
                    3b:28:e4:cd:f5:9a:d0:d1:6e:71:4d:44:cf:85:6b:
                    12:a9:5a:94:26:8f:f9:e0:ce:fe:99:fb:57:3a:69:
                    74:0b:05:6c:d2:b2:31:5a:7f:03:61:f5:0f:01:7a:
                    b7:bc:14:1b:4d:0a:d2:b4:9a:a0:a3:8e:25:fb:5f:
                    04:94:68:c6:04:d1:ee:09:27:71:8c:36:d4:63:4a:
                    01:35:25:76:81:29:19:54:51:17:6d:6f:62:3a:58:
                    96:1f:c2:04:82:b2:94:aa:d6:bc:c4:dd:29:80:03:
                    86:16:47:15:82:26:d8:8a:64:ca:fe:7c:ba:ec:66:
                    68:71:20:4e:75:7b:76:34:b3:5e:a1:1d:b4:c2:37:
                    39:c2:5d:c8:19:91:e0:1d:01:bb:1f:ff:9b:40:5b:
                    3d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:12:2D:24:E1:DA:AA:13:AD:D4:31:8A:5E:DE:F4:B2:E3:E1:F7:74
            X509v3 Authority Key Identifier:
                keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f2:c5:01:e7:2c:20:76:00:21:18:d8:a0:a2:f3:ac:f5:8d:
         0d:06:a2:b5:f6:1b:af:e3:a5:cb:fc:34:49:c1:a0:80:6d:dd:
         2f:0c:85:92:f2:58:b5:ca:50:53:1e:d7:39:1b:49:04:e6:7e:
         16:12:dd:24:01:de:45:a5:0e:a1:30:3e:85:3a:cb:5a:3c:22:
         2c:39:8e:78:ea:9c:b0:f8:29:53:d9:5c:70:b8:97:e1:d7:6a:
         dd:d3:15:18:06:51:01:26:de:b0:70:29:fd:d3:e9:7d:61:22:
         bc:93:54:0f:2b:d7:51:a9:9f:0c:3c:65:9f:ec:8b:eb:55:f2:
         c5:a6:9b:1e:55:c7:b7:15:ee:1f:39:5a:0c:a6:fb:a8:5d:57:
         78:7d:72:71:56:37:86:e9:ce:87:a1:78:44:ba:24:44:f4:f9:
         fd:47:6f:97:2f:f7:b2:be:86:e7:63:9c:6c:12:34:00:63:22:
         83:b7:3c:1d:28:27:52:93:ec:79:31:06:00:73:fb:32:8f:65:
         c4:6f:2f:ab:d2:c9:fc:0c:84:4d:9d:1c:10:a8:b0:a8:7a:70:
         36:5b:fc:e9:57:e8:39:26:94:97:f1:bb:28:b7:db:41:c8:65:
         13:fa:b0:df:a5:22:b2:c3:9b:8d:ac:6c:2b:a7:36:6a:26:76:
         1e:6b:c5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:33:46 2026 by rpki-client