Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
File:                     2nLQztquGaHsPtugRn1ZjrmRVlY.mft (raw, json)
Hash identifier:          AOwPKSXxzimoiDc67E0mrjjs5KC1jiRD6FtcsZS4Ps0=
Subject key identifier:   44:C1:53:77:0D:85:11:4F:56:4C:75:4F:0B:37:BA:D9:FE:D6:47:6C
Authority key identifier: DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56
Certificate issuer:       /CN=A915E131/serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
Manifest number:          78
Signing time:             Tue 23 Jun 2026 07:59:26 +0000
Manifest this update:     Tue 23 Jun 2026 07:59:25 +0000
Manifest next update:     Tue 30 Jun 2026 07:59:25 +0000
Files and hashes:         1: 2nLQztquGaHsPtugRn1ZjrmRVlY.crl (hash: SphVxzqxHCr0Og9NiOGNZmXjjQHQOaf9/X/naMMrRt0=)
                          2: 7D4302A0BEC811F0AE45220FC4F9AE02.roa (hash: DdCOIo33v4IDMQPtkKtDFsOxid92dMxNzutXTG46zeE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl
                          rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 07:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E131, serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
        Validity
            Not Before: Jun 23 07:59:25 2026 GMT
            Not After : Jun 30 07:59:25 2026 GMT
        Subject: CN=6a3a3cde-9f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1c:0c:98:a9:39:00:5f:87:7d:40:6a:4a:63:
                    50:0d:56:22:c7:e8:8a:67:02:bc:a1:32:95:51:84:
                    a7:75:db:bc:2c:8c:4b:6e:15:e8:96:1d:ac:2c:53:
                    85:fc:b4:41:aa:01:7a:03:57:86:4d:54:77:30:34:
                    73:76:51:4d:c9:0e:b2:5a:39:e2:36:60:c5:ce:ed:
                    4f:81:24:42:cd:f4:1a:1a:d9:e1:17:63:f7:9f:25:
                    48:d8:42:2e:fa:d0:39:9e:7f:1f:a0:1e:49:c6:a1:
                    12:9f:d8:d1:23:99:33:e2:a8:bb:56:87:b6:bf:a1:
                    6d:b7:ca:6d:f6:97:b0:db:64:2b:1a:a5:a1:69:3b:
                    9a:ad:67:7b:e8:eb:be:64:a8:6c:92:0a:75:45:75:
                    1e:3e:47:e1:1f:ea:48:4b:32:95:ea:4e:19:6e:79:
                    c9:b0:5b:04:ba:55:82:74:78:bd:98:8f:79:3d:f6:
                    a0:46:1e:a4:0b:47:cc:1a:c0:4c:16:13:12:88:ac:
                    a5:ed:8b:d6:83:d3:c8:34:54:d5:5f:70:4b:02:39:
                    8a:1d:47:c1:f1:5e:a6:0f:b7:5c:e5:32:2d:44:f4:
                    4c:e8:2c:4d:ad:16:24:7e:11:56:29:1c:83:68:0e:
                    91:40:70:6d:58:8c:47:56:4f:2e:fa:3d:76:86:8e:
                    39:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C1:53:77:0D:85:11:4F:56:4C:75:4F:0B:37:BA:D9:FE:D6:47:6C
            X509v3 Authority Key Identifier:
                keyid:DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:dc:e7:4d:1f:43:d2:f9:ff:60:97:17:e7:79:ab:51:50:04:
         d0:e1:6b:fa:d3:af:09:d2:d0:7e:7c:33:b1:f2:c8:ca:30:05:
         ea:4d:ea:86:db:31:59:8e:9f:f6:c0:ba:bb:31:12:b0:86:ff:
         70:59:06:b8:91:1a:35:21:18:7c:33:f5:42:55:f5:ed:1d:b8:
         fd:7d:7c:43:91:43:80:95:83:73:5f:83:7f:7d:e2:84:63:ac:
         88:90:53:8c:c4:59:02:4a:72:cb:4d:fe:f7:01:29:95:6f:6f:
         e2:5a:7f:21:f9:e8:e6:d7:3a:64:2f:1f:9f:77:91:8c:3f:29:
         5b:3f:b5:d3:b1:7a:97:e4:92:34:e7:6b:ce:3a:5f:8c:cc:32:
         33:3f:9a:34:8f:4d:ea:92:c6:10:cd:33:be:6e:d9:7a:7e:ff:
         6a:ad:af:a0:b2:5f:e6:90:9a:7e:6b:87:81:14:91:33:50:af:
         d1:ac:9b:fb:32:8b:97:da:90:f1:0a:2a:e9:7c:bf:9f:8a:c6:
         d0:29:2f:73:cd:3e:4f:32:6b:ce:d1:ce:ed:cc:86:3b:de:18:
         37:1b:57:43:c8:13:1b:03:b6:69:0b:3c:fd:d2:d2:23:84:72:
         4c:61:28:8a:8f:d7:b6:bd:77:93:9f:4f:2c:ce:43:fb:0c:f6:
         19:8e:f4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:01 2026 by rpki-client