Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
File:                     Ak2PFao5dyF1iDou3BZQFOGSiho.mft (raw, json)
Hash identifier:          Qc2RfHkOcnQoXoBEegTx9vFwC7pVdp3PRszUhJNVx8I=
Subject key identifier:   E2:D6:8C:47:91:22:B4:FF:D4:EC:CF:6F:22:41:BC:7E:6A:C2:EA:56
Authority key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A
Certificate issuer:       /CN=A917B520/serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
Manifest number:          AE
Signing time:             Mon 13 Jul 2026 02:23:28 +0000
Manifest this update:     Mon 13 Jul 2026 02:23:27 +0000
Manifest next update:     Mon 20 Jul 2026 02:23:27 +0000
Files and hashes:         1: Ak2PFao5dyF1iDou3BZQFOGSiho.crl (hash: o0hNTO2szjNbEnaEtDSe2R9Rb3BCbtH8NM2JEre9rHk=)
                          2: 007686A0D3DD11F08C79D853C4F9AE02.roa (hash: u0M66qh4o7knuILMykFw4eLMQQ390tee1LvBxu3LBIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Jul 2026 02:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A
        Validity
            Not Before: Jul 13 02:23:27 2026 GMT
            Not After : Jul 20 02:23:27 2026 GMT
        Subject: CN=6a544c1f-4393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:f9:27:8a:0a:a5:91:18:77:f8:dd:f4:b7:
                    17:c9:cb:f9:07:e2:4e:45:9f:1f:4f:e6:77:88:7a:
                    9c:35:7d:01:36:a4:db:33:75:c3:13:0e:63:05:df:
                    0b:55:21:0e:6c:4e:6f:f2:32:63:58:65:06:f1:df:
                    f9:68:4e:8a:76:f2:31:63:75:bb:81:bb:b3:17:ed:
                    89:62:92:6f:67:d6:16:7f:69:1f:58:a1:6f:cb:d5:
                    25:68:b7:d7:d5:1a:0a:0a:f5:9f:9c:43:ea:ca:11:
                    89:60:6c:30:0d:1e:5f:90:d8:27:ae:57:73:c3:c8:
                    16:69:05:27:f8:44:a2:3d:77:6e:3f:dd:81:e3:72:
                    e5:17:ca:62:f7:4e:1c:c7:fd:f2:e5:1c:56:da:05:
                    01:00:2b:d7:1d:ef:3a:53:f6:a1:1c:b5:26:07:55:
                    1c:ff:1e:90:e0:f4:7a:3a:43:eb:c8:7f:29:5b:f8:
                    d3:f5:fd:b0:ed:8d:ed:f0:50:25:9a:66:f3:1a:9e:
                    ed:86:a3:21:d8:14:5e:4f:34:3c:63:ea:7e:d4:71:
                    b3:99:d3:2f:97:cc:16:24:57:35:09:fd:9e:07:b3:
                    f5:3c:15:6c:a2:03:51:68:14:02:c8:93:06:f6:62:
                    af:10:a6:d7:1d:03:82:65:9d:55:c9:3e:0b:1c:8f:
                    59:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D6:8C:47:91:22:B4:FF:D4:EC:CF:6F:22:41:BC:7E:6A:C2:EA:56
            X509v3 Authority Key Identifier:
                keyid:02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:52:3e:87:47:92:c5:a3:07:80:91:df:e5:56:7c:52:bd:db:
         a5:2c:b2:3b:19:c7:c0:26:3a:52:6b:87:16:45:96:e3:a0:95:
         85:b0:6f:aa:c7:2b:26:cd:c9:a3:83:51:ef:ad:27:44:75:88:
         2b:aa:47:0e:6d:63:c7:16:96:59:0d:23:5b:27:05:25:1c:1b:
         8e:73:f4:53:df:43:5c:ab:ea:4c:31:11:b7:d5:4d:b0:6f:ac:
         5a:d2:b4:f2:a0:aa:58:04:92:85:e5:d2:8a:75:b2:3f:3f:55:
         18:58:b0:20:2e:e9:c4:a0:00:96:de:31:9a:67:c1:53:67:de:
         2c:51:e8:42:d8:03:44:21:f3:e7:b7:c4:6c:0a:b7:42:b2:98:
         06:03:b7:cd:20:99:8b:91:fd:70:9e:ea:e0:f7:13:47:25:d0:
         98:fb:67:31:2a:c1:b4:33:5a:1e:5f:d3:06:62:90:0b:fb:45:
         52:bd:85:f7:0a:eb:48:3a:f1:64:c0:12:bd:78:e2:3f:60:9b:
         74:f6:02:25:d6:64:86:24:13:00:f8:2b:40:5d:a7:a4:84:d0:
         d2:20:9e:ba:98:46:c1:aa:9f:80:c3:99:56:f7:8a:c5:00:c8:
         fa:56:9b:6b:79:4b:d3:c1:86:34:6b:51:38:3d:7e:7c:f0:75:
         16:62:05:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 09:35:04 2026 by rpki-client