Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
File:                     2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json)
Hash identifier:          nLBB610cqlBfiBmqSGgEd2Efi2SVsmImEf2dOAJLp8U=
Subject key identifier:   44:54:8D:DC:C1:15:A1:1F:28:BC:39:79:6A:8E:AD:E1:F1:A4:2C:19
Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC
Certificate issuer:       /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC
Certificate serial:       030B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
Manifest number:          02FD
Signing time:             Fri 17 Jul 2026 01:53:52 +0000
Manifest this update:     Fri 17 Jul 2026 01:53:52 +0000
Manifest next update:     Fri 24 Jul 2026 01:53:52 +0000
Files and hashes:         1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: y8rrEWJTahEFdSwC8GlGFatqSgT2vnS2R7IUOOOF+1o=)
                          2: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (hash: qmW4boAu4mPyTeZ/1TM4f4A59PHbYduM7lK03RYvMz8=)
                          3: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (hash: Qq87SJXaEP4qrP/T3bWQOCeWogcPQnVi06inH60FBfo=)
                          4: C4149072C8FF11F0AC8AE779C4F9AE02.roa (hash: e26HjI6IThHSTcyiS5wewUgNVLH1ZtA87nwKAQOfEN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl
                          rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 01:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779 (0x30b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC
        Validity
            Not Before: Jul 17 01:53:52 2026 GMT
            Not After : Jul 24 01:53:52 2026 GMT
        Subject: CN=6a598b30-e7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4e:a7:e2:2a:c0:e4:c3:32:86:5b:13:3a:03:
                    7b:df:19:b7:6c:4b:ce:cb:eb:65:e4:56:6d:77:46:
                    d4:55:d2:72:35:a1:c8:8f:d2:15:b5:d6:f2:34:d2:
                    73:c0:31:9b:fb:91:e1:45:9d:92:5b:f0:bf:b0:9f:
                    28:d8:ba:f7:9f:3e:84:12:3e:d9:d5:53:b8:2e:e9:
                    b2:ab:67:a0:b4:01:91:d2:16:01:83:6f:53:f5:67:
                    9f:5e:a8:87:00:e7:ca:3a:e4:66:e4:b4:ff:7a:57:
                    79:06:e6:b3:d6:3a:dd:6a:39:37:3c:06:80:bb:0d:
                    95:c6:ba:2c:e4:c6:2e:29:01:e6:bc:49:25:b6:5e:
                    f5:e9:44:5b:af:0c:2a:96:10:36:7e:91:0d:ed:ae:
                    83:e2:1b:77:ff:3f:84:49:33:7e:a4:62:3c:ee:98:
                    a1:31:4e:58:22:f0:1e:04:1c:24:9a:38:72:02:2c:
                    19:99:0b:f3:df:28:81:19:97:d2:8e:dd:9c:aa:28:
                    5c:77:7b:26:38:b1:b2:7c:89:80:74:e1:d6:01:45:
                    2b:f6:06:0e:d9:99:8d:30:e8:b0:b1:d0:3d:03:d4:
                    da:d7:05:2e:41:7d:1a:28:a4:08:b6:e0:67:45:fa:
                    37:4a:af:f9:cd:97:9d:e2:46:98:d9:03:14:c2:be:
                    f4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:54:8D:DC:C1:15:A1:1F:28:BC:39:79:6A:8E:AD:E1:F1:A4:2C:19
            X509v3 Authority Key Identifier:
                keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:6c:42:33:83:5d:68:91:86:97:99:dd:11:98:23:57:87:75:
         58:28:ae:66:f1:01:61:8d:84:cc:6e:4b:0c:fb:62:99:d1:f2:
         12:9f:a5:6f:7a:7d:92:f9:c6:53:00:0e:a1:03:68:fa:a1:64:
         df:e2:f3:a0:14:a0:b0:d4:d4:70:03:77:6f:04:49:3a:19:26:
         2d:93:24:5a:93:d5:75:a4:bb:d8:e3:bd:e0:05:9d:5e:2c:c0:
         c3:8c:35:e9:02:f9:ed:01:7f:6a:05:d4:87:0b:f4:7a:7e:e8:
         ef:0f:ff:b2:56:28:f7:0e:f7:09:9c:02:16:5b:27:eb:43:c8:
         c7:02:39:55:1f:17:14:84:1c:35:5c:65:6a:77:73:8d:1d:23:
         2e:0c:b0:86:a4:f6:46:fc:ef:8a:5c:a8:8e:50:f9:d5:80:1d:
         59:44:f5:81:61:f2:18:b8:3e:4c:96:0d:92:69:a0:ec:ed:c4:
         6b:c1:b1:1a:60:dd:75:4f:0b:6d:c7:90:30:1b:ab:76:f3:5b:
         a7:1c:d6:dc:99:44:04:44:cf:bc:13:64:87:a1:db:cf:d6:9a:
         8e:ca:9e:2f:22:a4:41:5e:b8:1a:8c:18:e8:aa:0f:d8:af:a8:
         6c:b0:35:22:a0:bf:c6:b2:4f:ec:0f:33:34:ab:f0:78:b9:d6:
         27:c2:56:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:16:21 2026 by rpki-client