Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
File:                     2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft (raw, json)
Hash identifier:          4SEKcgr2PvOTEgg4SAAnUFH2+N3Yuim8mwEW+HMlo0g=
Subject key identifier:   55:76:1E:8D:BD:72:85:B6:35:55:0D:A7:03:17:E1:E0:A7:99:C4:57
Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
Certificate issuer:       /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
Manifest number:          D8
Signing time:             Mon 27 Jul 2026 09:11:54 +0000
Manifest this update:     Mon 27 Jul 2026 09:11:54 +0000
Manifest next update:     Mon 03 Aug 2026 09:11:54 +0000
Files and hashes:         1: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl (hash: V6JRIUhjta38zATTlT0HsBPdsWsqsk47Ou4qHDuqihc=)
                          2: 0B4068BEC55D11F0B9FDE586C4F9AE02.roa (hash: Q5D67jNmugqmuZx6Mln1BqBj64RHtIaLCMbnVw/ZKoU=)
                          3: 880DD06A13C411F1A59637CD0A3D8C67.roa (hash: IRzwW31IFK0aM/X6hDs/vAqartR5Du8EA+bgcPRQw4c=)
                          4: 6C8EEADA8FE011F0A1C6120DC4F9AE02.roa (hash: hpB6XWjWMWxSngM0RUJyt0B9skfR+aSywNyweLCVrOU=)
                          5: B3D7207C0CCE11F18D20135B323D8C67.roa (hash: goJQ6WHTbtjm3owLcaK0Ly1P0RrZQSDux7VE6q6D1CE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
                          rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
        Validity
            Not Before: Jul 27 09:11:54 2026 GMT
            Not After : Aug  3 09:11:54 2026 GMT
        Subject: CN=6a6720da-5199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6a:f1:59:74:c6:b2:5f:4f:f0:45:c5:bf:5e:
                    17:b1:1a:f2:b6:76:bc:f7:3e:36:3a:36:7b:4e:69:
                    1b:88:f8:23:f2:15:31:6c:c0:2d:4f:05:41:5d:9e:
                    1e:a5:a6:03:5d:43:ce:22:e9:28:66:dd:5d:c4:69:
                    f0:d0:4d:84:d0:b3:20:9a:79:ae:33:f9:9a:a1:4b:
                    aa:2b:9d:e3:8f:31:ec:56:5f:42:16:57:16:e6:23:
                    80:5e:13:17:a2:f9:74:63:a7:b7:1c:6e:1f:aa:6e:
                    35:b7:04:e2:d0:f3:bb:f2:8d:17:ea:8a:41:0f:ad:
                    11:e9:3c:03:df:bf:e7:7e:13:36:6d:bb:2e:b3:62:
                    d3:ba:4c:1e:5f:bb:e5:05:89:04:4d:f1:e2:05:fe:
                    76:41:b0:f5:f9:0c:a5:e5:32:6d:2e:9b:5c:00:aa:
                    e8:32:01:2f:eb:12:80:90:a1:03:3b:ef:01:68:66:
                    22:fc:66:49:2b:ee:1c:f6:f4:57:c2:3c:b3:78:c1:
                    1d:df:24:00:a4:6d:8c:30:07:53:39:3b:9c:45:86:
                    96:44:4b:70:e7:57:42:2e:1c:a5:c6:cb:69:46:d7:
                    e3:db:b2:12:f0:71:6c:e7:5f:ec:ea:df:1a:d2:13:
                    fa:b3:8c:0a:2b:74:53:e3:df:7f:12:d9:2c:ae:e3:
                    7b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:76:1E:8D:BD:72:85:B6:35:55:0D:A7:03:17:E1:E0:A7:99:C4:57
            X509v3 Authority Key Identifier:
                keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:fd:f0:7e:1c:68:5a:6c:e2:9c:3a:7d:45:dc:43:55:a8:f1:
         f5:2c:e9:49:6e:67:02:75:b6:00:e6:e1:8c:c4:a6:b8:b0:c5:
         f5:22:2e:91:9f:e3:47:6a:b0:17:79:04:5c:0c:81:a2:33:c2:
         e5:06:1a:b9:df:6c:2d:b6:cd:1a:2d:f4:07:4d:3b:9a:b3:c0:
         55:ec:2a:62:0a:e1:c2:f2:d6:f0:37:56:e5:08:8e:2b:b4:b5:
         34:ec:cc:c8:0d:6d:97:e5:a6:25:54:2a:74:85:c4:5a:b7:5f:
         77:14:25:c4:4e:14:a8:f7:cb:b7:96:04:4c:57:ee:d5:cc:b7:
         be:c5:d2:24:da:11:9f:2c:c9:16:26:15:e5:29:84:7f:8a:0d:
         ff:fe:98:61:ac:4e:45:85:88:c3:7a:63:23:d8:5c:47:46:1a:
         eb:95:4d:b6:51:3c:3b:c3:92:07:d5:73:16:0c:0d:9a:05:4a:
         02:42:53:cb:4e:0f:02:6e:ed:4d:ae:97:bc:c4:8e:eb:fb:34:
         7e:42:e9:3b:3a:af:14:33:c3:d8:18:f2:8a:06:83:c8:89:4c:
         6f:a5:f8:54:9f:e6:24:62:7d:d7:0e:6d:e6:d3:ac:fe:80:ba:
         4a:41:1f:a3:f6:ba:4d:7c:e1:49:74:d5:22:13:a9:09:06:92:
         12:25:24:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 22:22:22 2026 by rpki-client