Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
File:                     2m7mst6yYhOWAXC6ZYdieLLff84.mft (raw, json)
Hash identifier:          qLgtm57Iu0naf5Oh739PAzyerJ4N/x9RwMzQ6TBjPNE=
Subject key identifier:   1A:43:41:9A:DF:C5:DA:97:B8:51:98:8D:89:6B:5C:3B:E9:E0:51:94
Authority key identifier: DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE
Certificate issuer:       /CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE
Certificate serial:       047A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
Manifest number:          0473
Signing time:             Fri 17 Jul 2026 00:41:52 +0000
Manifest this update:     Fri 17 Jul 2026 00:41:52 +0000
Manifest next update:     Fri 24 Jul 2026 00:41:52 +0000
Files and hashes:         1: 2m7mst6yYhOWAXC6ZYdieLLff84.crl (hash: AATtUViPUEGgTDQB1z9XZSH5gNZfcLl6wamLNKXou4A=)
                          2: E15BCDE69AAD11ECB4212E2AC4F9AE02.roa (hash: aeo+0u6kj/HbCCELyJjH0LNdDHk/8Y8ZluKCvUXbjJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl
                          rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 00:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1146 (0x47a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915429C, serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE
        Validity
            Not Before: Jul 17 00:41:52 2026 GMT
            Not After : Jul 24 00:41:52 2026 GMT
        Subject: CN=6a597a50-76f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:03:bf:5d:11:29:ef:2e:e2:ad:b4:3f:f3:bd:
                    12:f9:ef:13:2b:46:bd:ae:72:25:55:3b:75:37:51:
                    69:1f:24:ae:d7:33:b1:78:51:71:d2:e3:d9:69:b7:
                    63:a3:99:ab:16:ae:23:aa:ff:8f:e4:fb:40:32:b1:
                    b1:fe:9f:9d:eb:aa:e0:24:93:bb:80:df:39:7b:9b:
                    7c:65:e4:50:cf:38:11:9f:a8:9f:54:2b:48:0f:97:
                    31:40:40:4c:17:97:68:ea:1c:37:9f:f7:64:d8:9e:
                    c0:8d:68:ef:ed:54:ab:65:8b:39:0d:a2:39:eb:79:
                    fd:ee:97:f4:01:a6:76:17:70:09:4e:56:e8:df:c9:
                    09:1b:89:e3:05:8d:35:72:06:d5:4d:64:96:dd:54:
                    8e:e8:c0:e3:12:fe:8b:b4:d8:7c:bb:78:a9:de:6e:
                    43:af:19:5b:de:02:45:a2:df:cd:6b:27:fb:60:d3:
                    c6:4d:17:fa:b6:b4:ec:a9:73:92:e1:cc:49:fc:3c:
                    5a:12:07:7a:b2:21:34:81:7e:4a:af:31:42:94:ac:
                    13:a8:a6:5c:8d:e4:e3:b4:47:46:04:82:41:6a:33:
                    67:23:62:6e:9c:fd:d0:1d:ad:2a:69:11:42:da:6c:
                    77:3c:f5:67:70:5c:6c:b6:22:40:7e:11:b8:77:74:
                    5c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:43:41:9A:DF:C5:DA:97:B8:51:98:8D:89:6B:5C:3B:E9:E0:51:94
            X509v3 Authority Key Identifier:
                keyid:DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:27:49:c5:da:f2:0b:36:eb:5c:00:15:22:de:00:28:cf:58:
         90:05:1c:b6:b4:92:de:3f:ea:b9:a6:5e:f4:22:cf:80:6a:83:
         ef:69:18:65:36:6b:5b:89:50:01:d6:72:b4:33:97:c1:8e:56:
         14:fd:4a:c6:49:ed:54:df:d5:81:ff:f8:cd:7e:70:5c:c9:52:
         48:4b:0b:fd:3a:0b:4b:b5:69:75:1b:4b:09:05:c7:29:52:e0:
         a7:51:11:21:1f:53:64:f0:9d:40:03:e3:c6:8c:71:09:1c:9c:
         b6:27:e6:50:a0:28:b7:12:39:a0:50:12:61:f8:6e:6f:5c:28:
         f3:ac:e1:14:b6:72:c7:cf:f7:98:2c:d9:64:40:d8:e4:b9:f2:
         35:ce:c3:65:40:93:91:14:3b:52:32:65:88:02:0f:c4:fa:a4:
         63:b7:de:de:99:31:ee:47:31:f9:98:5a:43:70:8c:a5:02:a8:
         42:25:e9:4a:f6:78:6e:96:62:8c:76:c9:75:54:58:8f:e4:76:
         5b:22:1b:98:ed:0a:64:87:12:ea:eb:80:bd:61:e4:ac:a8:45:
         33:29:95:45:e6:4f:1c:03:56:3a:23:a5:8e:1b:77:95:3d:ef:
         99:46:be:23:7d:f2:f1:7e:9e:c6:8d:3c:93:af:76:37:b4:0d:
         5e:d0:8c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:22:00 2026 by rpki-client