Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
File:                     2iwTK47FBxr425BJG63bwPCntEU.mft (raw, json)
Hash identifier:          xdv7JQZhxtkhfqi9sj4gtZMDYblDg0pwdkAtHLaq+zA=
Subject key identifier:   10:A0:64:3F:EA:E2:F7:1F:51:07:25:47:C6:EE:3A:F0:6F:A3:C3:91
Authority key identifier: DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45
Certificate issuer:       /CN=A91534B8/serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
Certificate serial:       0376
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
Manifest number:          0376
Signing time:             Thu 03 Sep 2026 00:46:17 +0000
Manifest this update:     Thu 03 Sep 2026 00:46:17 +0000
Manifest next update:     Thu 10 Sep 2026 00:46:17 +0000
Files and hashes:         1: 2iwTK47FBxr425BJG63bwPCntEU.crl (hash: 4L6B6tSs6AslOvGgI5WJ3C0m2ngOfAlPeted4uhtyUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl
                          rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 00:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886 (0x376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91534B8, serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
        Validity
            Not Before: Sep  3 00:46:17 2026 GMT
            Not After : Sep 10 00:46:17 2026 GMT
        Subject: CN=6a98c359-ccf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:79:bd:78:bb:03:80:3a:86:19:a1:45:6b:
                    e0:75:79:9b:29:d1:e0:b8:5c:88:56:55:ec:2b:c8:
                    7b:c7:9d:3f:a3:a4:0a:24:6f:67:7a:e9:e4:75:de:
                    02:6b:18:d3:8a:41:e5:66:6e:f2:69:99:0f:47:66:
                    0d:c0:2c:7c:89:87:82:8f:b3:d0:df:07:ce:3b:40:
                    bd:f8:13:cf:03:3a:b0:83:77:b4:58:ce:5f:9f:a8:
                    e6:4f:a6:91:9a:eb:47:ed:78:8a:af:9e:be:77:1a:
                    ed:ef:b2:8d:ac:7e:89:c6:fd:f8:7f:1f:53:51:d8:
                    9b:4b:24:d3:d0:e4:8b:24:6e:1e:1c:cc:41:5a:d9:
                    52:57:e1:32:1b:10:34:9a:6d:24:11:b5:40:df:77:
                    e7:be:b1:ad:48:00:1f:15:14:9d:98:ea:fb:0f:fe:
                    c0:e0:ab:d4:a0:6c:13:7e:28:53:f1:95:95:55:be:
                    a1:8b:c3:43:8a:d5:3c:d5:46:62:20:80:25:6a:fe:
                    82:56:30:09:58:e3:91:23:fc:85:be:89:13:d5:9f:
                    09:89:4e:c0:fe:88:f5:cb:71:b7:e9:38:94:bb:c4:
                    76:b4:a1:38:f3:1c:ca:d3:b5:fb:ba:66:15:39:bb:
                    fe:df:9d:4f:53:e6:0f:07:36:18:c2:0d:6c:5e:6b:
                    65:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A0:64:3F:EA:E2:F7:1F:51:07:25:47:C6:EE:3A:F0:6F:A3:C3:91
            X509v3 Authority Key Identifier:
                keyid:DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:eb:2c:81:df:df:33:72:8e:9e:65:1f:68:50:b2:a7:98:5f:
         eb:77:ed:d3:63:40:c3:aa:f1:1b:6a:34:63:dc:46:6a:5d:e2:
         71:3c:c8:c3:96:de:ec:62:d0:10:d2:30:22:d7:a1:2f:20:91:
         d1:02:23:1b:07:2f:fa:27:74:58:86:8e:07:bc:5a:4d:05:72:
         60:dd:5e:7f:4a:9e:9e:00:9f:03:35:ba:61:20:01:7e:a1:51:
         b4:45:34:0b:c1:6c:3c:b4:b4:78:7c:a0:06:18:6e:6a:c1:03:
         ac:b0:b3:d3:6d:30:30:3b:30:a1:82:de:01:18:99:64:81:8f:
         06:f6:c7:53:b7:e4:2b:3e:13:47:95:09:16:61:95:89:d3:21:
         71:77:6c:bd:c7:d1:fe:49:fa:c4:23:c8:dc:eb:9c:13:30:79:
         19:a6:96:5d:44:21:fe:c0:71:ce:41:cc:cc:25:ae:af:61:57:
         eb:e3:8e:53:df:af:a1:75:37:e8:40:12:2f:f1:c6:53:cc:fb:
         45:50:c9:20:7e:2d:fe:da:63:bc:f4:89:76:43:ed:ef:b5:16:
         0e:a1:4c:8b:d0:97:f7:b7:fe:f0:cd:95:fa:0c:58:63:e4:ab:
         d1:38:93:67:5a:fe:2d:c4:85:02:60:ca:97:64:8e:cf:b1:e2:
         dd:fe:b6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:36:35 2026 by rpki-client