Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
File:                     2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json)
Hash identifier:          wCtziRzKTNTs9bW4fR+tnm0ZUEzPBJiWFeuVLCm9v6o=
Subject key identifier:   9B:E5:76:0E:C4:77:C4:C0:EF:17:9E:7D:EE:EE:9A:A6:22:31:57:9A
Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
Certificate issuer:       /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Certificate serial:       025F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
Manifest number:          0247
Signing time:             Sat 05 Sep 2026 02:28:12 +0000
Manifest this update:     Sat 05 Sep 2026 02:28:11 +0000
Manifest next update:     Sat 12 Sep 2026 02:28:11 +0000
Files and hashes:         1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: GDCdi8XQL3iEOcm++VCNPH7Y1JQEAFM6mr3256LmF6A=)
                          2: 585745526BC111EEA163E774C4F9AE02.roa (hash: jWFAA3hjLn4/pUtGRdYAlT0inc3UozSJNCSTFiimgaQ=)
                          3: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: k/wrk+71dTC2xpAfXzlheReLA9aT4ZuDhkK6xEFQumE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
                          rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 02:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
        Validity
            Not Before: Sep  5 02:28:11 2026 GMT
            Not After : Sep 12 02:28:11 2026 GMT
        Subject: CN=6a9b7e3c-0520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:49:1d:79:3a:c3:a3:12:71:09:36:2e:b2:d0:
                    68:07:4e:bb:eb:99:25:71:62:8a:e8:97:9c:aa:d3:
                    43:5c:8b:29:8e:a0:2f:46:f7:cc:c8:1a:b2:28:d1:
                    6b:ef:e2:f4:a9:d7:87:e3:d1:8f:87:3a:dc:13:f4:
                    ae:c9:8e:47:5d:6e:cf:d6:76:ae:97:65:52:86:01:
                    44:ea:3b:30:59:74:44:4a:95:d0:03:b7:ce:09:12:
                    8b:8c:80:80:10:95:20:07:ed:3b:81:36:8d:b2:6e:
                    94:0c:6d:b3:ff:63:b1:d8:9e:73:9c:96:ef:25:f7:
                    dc:ac:fb:ba:3d:c9:95:64:a4:c1:05:70:cb:23:de:
                    e4:9d:90:36:68:24:2d:43:57:d0:78:c2:ab:21:1a:
                    f2:cd:cd:d5:97:eb:32:c4:cf:26:f6:09:2a:ed:f3:
                    8a:5b:ec:7c:c9:0d:a0:c4:7f:d9:05:63:36:c6:92:
                    db:f5:3f:a2:b9:33:34:71:6c:7a:c8:50:25:f1:f2:
                    90:c0:c1:c5:ff:0c:60:de:da:6d:bb:5e:da:3b:78:
                    2c:f6:f5:c7:44:e1:59:7e:2f:73:01:51:ec:2a:88:
                    0b:65:a4:73:f5:af:6f:05:f5:a3:0a:29:cc:c7:e0:
                    4f:b7:3a:30:0d:29:1c:4c:5b:b3:1c:e2:69:0d:66:
                    4f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E5:76:0E:C4:77:C4:C0:EF:17:9E:7D:EE:EE:9A:A6:22:31:57:9A
            X509v3 Authority Key Identifier:
                keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:1b:91:d9:b0:63:ba:9f:2f:d8:74:d7:68:69:7e:09:f5:3d:
         09:cd:c9:33:6a:11:0d:db:b2:02:c3:bd:64:fc:99:cc:6b:92:
         a8:6f:76:a2:4a:06:2f:9b:44:4f:20:73:27:16:29:b1:b1:d7:
         4e:86:53:35:39:2b:9b:a2:12:5d:2d:c6:7e:35:55:d9:c4:98:
         f0:c0:ce:54:c9:73:5d:51:ec:44:62:25:4b:87:d0:77:d1:15:
         c7:a7:75:cf:8a:56:5b:02:af:8f:e4:48:8e:43:9c:1a:d2:87:
         ea:a7:43:bf:12:2e:75:83:01:9c:79:02:d8:d0:85:99:4a:1e:
         8c:ce:2b:53:a8:4f:60:5a:12:6f:8c:19:9d:73:f6:d6:a4:66:
         a3:86:50:31:43:f4:43:32:be:45:ed:b4:a8:d1:29:87:d0:0e:
         69:30:5b:23:09:0d:d1:56:88:9d:32:b9:19:45:57:c7:a4:76:
         c4:aa:06:5f:53:ed:8b:04:dd:c6:2a:cc:72:9a:f1:f5:32:b4:
         ac:2f:81:e3:b0:66:26:be:01:be:49:26:39:1d:22:42:d8:4a:
         80:25:11:4d:c3:e2:7d:6c:3b:88:dc:43:ee:92:22:dd:63:79:
         b7:e8:43:6a:f2:47:19:a6:34:8e:8c:b2:0f:73:16:fb:44:db:
         bf:77:20:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:17:20 2026 by rpki-client