Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
File:                     C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json)
Hash identifier:          mstWewUOlabAXo3lP4XwQlojJBAnfcUyz5YoVSZ459I=
Subject key identifier:   2C:64:D8:28:A3:49:81:30:4A:9E:50:BC:D2:72:C7:5F:AB:83:73:04
Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
Certificate issuer:       /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Certificate serial:       02A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
Manifest number:          0291
Signing time:             Sat 05 Sep 2026 01:51:24 +0000
Manifest this update:     Sat 05 Sep 2026 01:51:23 +0000
Manifest next update:     Sat 12 Sep 2026 01:51:23 +0000
Files and hashes:         1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: loZY/LvPN9oAJBx85spAbukUjG6kP9j/YWrY9c7lbBY=)
                          2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: yla7D14JuKJpPGHliDBzy+rAx/LALE2tcLnDIveEQL8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl
                          rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 01:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 678 (0x2a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
        Validity
            Not Before: Sep  5 01:51:23 2026 GMT
            Not After : Sep 12 01:51:23 2026 GMT
        Subject: CN=6a9b759b-5ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:a9:dd:cc:88:33:b5:81:bf:7f:dd:6f:28:
                    d5:fc:b3:b8:ac:4b:ec:ca:fb:cb:3a:c6:da:00:be:
                    a4:0d:4c:b8:71:f2:17:4f:54:ad:3f:0a:c9:1d:d0:
                    6c:66:d0:d6:01:3d:0a:24:b4:a3:99:5a:97:81:90:
                    2f:08:2a:13:fd:b7:7b:aa:c4:2c:2c:cc:f0:9c:01:
                    20:70:94:e3:9f:1f:e2:61:49:3e:24:59:ed:8f:a1:
                    38:92:13:f5:10:01:cf:ed:63:ac:a6:d4:28:9d:b0:
                    4f:52:4e:6b:90:c5:49:5d:3f:40:40:7c:a2:27:5c:
                    5b:d0:83:67:6b:59:4a:c2:8b:66:72:7d:05:f8:f1:
                    b6:c7:e1:a6:fd:d0:42:f8:f0:a7:fb:6d:cc:6f:a6:
                    1c:a5:40:3e:a1:b3:e3:4d:d4:0e:f0:5f:22:2b:98:
                    3b:03:59:28:71:0e:1e:dd:05:ac:28:5f:8a:e9:86:
                    b4:26:f1:b9:8b:09:29:f1:7e:08:bd:8a:c0:83:15:
                    c8:3a:71:9c:fa:76:05:6b:84:2e:b9:17:a7:a7:d4:
                    df:dc:1e:f9:39:15:15:8d:fb:6e:74:e9:06:10:4c:
                    1b:65:af:cd:23:bc:06:96:c4:78:65:32:23:af:92:
                    36:3d:9c:a7:a5:7f:30:45:e6:6e:20:8d:4f:19:48:
                    f3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:64:D8:28:A3:49:81:30:4A:9E:50:BC:D2:72:C7:5F:AB:83:73:04
            X509v3 Authority Key Identifier:
                keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ae:6b:b2:eb:d1:97:f5:d5:50:63:ef:3f:ca:17:bd:67:45:
         b1:e3:d7:f5:e6:77:bc:52:ae:8a:fc:33:00:a3:04:77:9a:18:
         fd:21:bf:b9:0e:3e:be:cf:2c:1c:9b:7d:25:77:6a:9c:14:f3:
         3d:31:38:8c:21:df:58:9a:05:6f:1a:f7:98:7e:a5:81:66:8a:
         75:86:bc:da:d3:59:78:f1:6d:49:c6:33:93:6a:9d:57:0f:ca:
         30:db:15:88:2e:09:7e:dd:11:dd:27:de:72:13:ac:b3:8e:ee:
         b8:c1:78:8c:09:7e:1f:fa:31:32:e0:42:4e:fb:ec:4e:25:60:
         77:a6:88:15:45:26:77:24:04:15:76:3b:79:74:01:cc:f7:0a:
         94:58:be:f1:52:cd:66:c9:61:28:f8:ab:d0:43:7f:7a:f5:09:
         70:11:c2:c4:cc:f7:81:d8:7a:2a:a4:29:eb:d0:dc:78:ee:49:
         8e:aa:50:44:6e:a0:eb:49:ab:0f:ed:5d:bd:f4:2c:e5:75:af:
         78:32:a4:dc:fb:96:58:8f:76:17:0b:e2:0e:e7:35:d7:aa:96:
         e2:17:75:e4:7d:74:52:fa:d4:11:a9:09:37:38:2b:2a:f3:a5:
         5a:c4:06:7f:98:2d:ed:95:22:67:86:0b:48:00:5f:80:f1:db:
         92:d6:76:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0IwOTIxMTAvBgNVBAUTKDBCNjFDNDc0ODk2OUE0NEZDODNDODg4MkEwMjU3OUQw
RDU5MjNCNjEwHhcNMjYwOTA1MDE1MTIzWhcNMjYwOTEyMDE1MTIzWjAYMRYwFAYD
VQQDEw02YTliNzU5Yi01ZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr4Cp3cyIM7WBv3/dbyjV/LO4rEvsyvvLOsbaAL6kDUy4cfIXT1StPwrJHdBs
ZtDWAT0KJLSjmVqXgZAvCCoT/bd7qsQsLMzwnAEgcJTjnx/iYUk+JFntj6E4khP1
EAHP7WOsptQonbBPUk5rkMVJXT9AQHyiJ1xb0INna1lKwotmcn0F+PG2x+Gm/dBC
+PCn+23Mb6YcpUA+obPjTdQO8F8iK5g7A1kocQ4e3QWsKF+K6Ya0JvG5iwkp8X4I
vYrAgxXIOnGc+nYFa4QuuRenp9Tf3B75ORUVjftudOkGEEwbZa/NI7wGlsR4ZTIj
r5I2PZynpX8wReZuII1PGUjz+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCxk2Cij
SYEwSp5QvNJyx1+rg3MEMB8GA1UdIwQYMBaAFAthxHSJaaRPyDyIgqAledDVkjth
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjA5Mi8yODIzMDk5NkVF
MjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBFX0lQSWlDb0NWNTBOV1NP
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0MySEVkSWxwcEVfSVBJaUNvQ1Y1ME5XU08yRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjA5Mi8yODIzMDk5NkVFMjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBF
X0lQSWlDb0NWNTBOV1NPMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALq5rsuvRl/XVUGPvP8oXvWdFsePX9eZ3vFKuivwzAKMEd5oY/SG/uQ4+vs8s
HJt9JXdqnBTzPTE4jCHfWJoFbxr3mH6lgWaKdYa82tNZePFtScYzk2qdVw/KMNsV
iC4Jft0R3SfechOss47uuMF4jAl+H/oxMuBCTvvsTiVgd6aIFUUmdyQEFXY7eXQB
zPcKlFi+8VLNZslhKPir0EN/evUJcBHCxMz3gdh6KqQp69DceO5JjqpQRG6g60mr
D+1dvfQs5XWveDKk3PuWWI92FwviDuc116qW4hd15H10UvrUEakJNzgrKvOlWsQG
f5gt7ZUiZ4YLSABfgPHbktZ2qw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:52:51 2026 by rpki-client