Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
File:                     2wVNT_SDuJTYCF4P43hs4um1MGI.mft (raw, json)
Hash identifier:          gMagr5jpc7JR14A3lZ6XFWHd549t2sgq5wu2cYFJ6uU=
Subject key identifier:   93:55:8A:1D:63:56:0E:81:AB:04:04:BB:3F:EB:BE:0D:74:1E:FD:2B
Authority key identifier: DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62
Certificate issuer:       /CN=A91758DF/serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
Manifest number:          3C
Signing time:             Sun 26 Jul 2026 20:55:26 +0000
Manifest this update:     Sun 26 Jul 2026 20:55:26 +0000
Manifest next update:     Sun 02 Aug 2026 20:55:26 +0000
Files and hashes:         1: 2wVNT_SDuJTYCF4P43hs4um1MGI.crl (hash: V6GCO1RUcgSM+fmbf0IPtz40pA+I0/u0tsBMMOILdDk=)
                          2: 031A6E544E9311F19004C0C7A2EE528E.roa (hash: w/4wlpVVsUwM2QVkvZtJ7suuuKCdp4EEZYeS6K8GgLc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
        Validity
            Not Before: Jul 26 20:55:26 2026 GMT
            Not After : Aug  2 20:55:26 2026 GMT
        Subject: CN=6a66743e-e40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:4d:0c:01:2c:3c:21:d5:bd:ed:dc:e2:64:
                    13:46:b7:cc:43:0d:4a:e0:26:41:63:bc:f3:2c:26:
                    9c:4f:6a:eb:b1:b3:29:31:f6:50:77:9d:87:48:74:
                    c3:c4:31:d3:9b:46:8c:3d:2e:fa:4a:34:83:eb:b3:
                    5d:f8:20:ee:c3:52:7a:bd:7a:25:5a:55:a0:23:bf:
                    20:31:52:31:f5:29:18:6f:04:31:ec:7f:af:60:f5:
                    09:b4:bb:fb:b6:7c:76:86:5e:13:03:f5:82:2d:b3:
                    3d:ac:16:13:17:19:9c:7f:f0:df:ec:99:9c:b7:54:
                    22:af:06:cb:b8:1f:a8:71:8d:75:aa:30:12:e9:53:
                    10:c9:f7:59:2a:2e:6c:8e:93:9a:26:31:81:33:f6:
                    26:57:e8:ed:5c:0f:7d:38:8d:b6:99:3e:a3:8c:7f:
                    a7:9e:22:3d:97:fa:c6:6e:4e:2e:58:80:f5:f6:f1:
                    66:46:94:12:b2:17:b1:c3:66:f0:d0:36:32:32:b1:
                    0b:9d:aa:44:62:24:61:36:30:01:5c:6d:41:b1:80:
                    68:93:aa:17:f4:17:fb:c9:18:25:0d:48:4f:80:fa:
                    40:0e:45:98:c0:01:ab:a9:63:b6:f8:4e:01:77:06:
                    58:77:8f:cf:96:40:0c:d3:3c:4d:ae:29:7b:10:9e:
                    50:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:55:8A:1D:63:56:0E:81:AB:04:04:BB:3F:EB:BE:0D:74:1E:FD:2B
            X509v3 Authority Key Identifier:
                keyid:DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:28:60:5b:0b:cf:b4:3b:24:eb:17:f2:cb:8c:87:d7:4a:1d:
         d3:03:c5:60:4b:ec:bc:cd:89:b6:20:2c:5b:e2:0b:2d:70:eb:
         c5:c5:ee:2c:55:81:0f:74:20:84:56:81:16:0b:ee:c9:42:ce:
         e0:d0:2d:c9:9f:82:a1:ad:cd:51:91:5b:11:42:f2:a5:e2:0a:
         cd:e8:a2:db:81:8f:5e:8c:00:1c:fc:a8:c3:25:32:98:e7:b3:
         09:92:1b:8e:26:34:a3:9a:f2:8b:02:61:30:84:58:01:f8:ad:
         8e:20:20:76:b4:8d:71:e6:d3:b6:6c:f2:c8:c0:98:b7:3b:55:
         38:df:31:48:25:5b:e0:29:9b:c6:db:61:6d:9a:2d:e8:d3:ab:
         86:c4:ec:ec:66:d4:20:d3:bf:50:05:0c:1e:af:6e:34:e8:42:
         f1:e5:40:35:b6:30:0c:b3:ce:30:da:e1:44:6e:04:0b:f9:77:
         b5:55:08:88:b6:6f:2d:39:21:8c:e8:3a:d5:cc:fb:22:7c:1f:
         c7:aa:78:28:3b:82:fe:73:96:b6:d2:be:c2:27:59:1d:d1:73:
         ba:68:7d:78:36:1d:ac:13:42:a8:40:1a:14:a4:25:a1:fe:b5:
         d5:b3:64:95:02:02:d9:d0:f8:a5:76:d7:9b:6b:d8:3a:09:25:
         05:81:23:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:48:18 2026 by rpki-client