Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
File:                     2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json)
Hash identifier:          Cx8sCkF0DCPzilzX2wah1RDReIbsJoixDUHsdSlnJ5s=
Subject key identifier:   C6:E9:7A:0E:6E:65:D9:CA:35:2B:E6:9D:C7:34:1B:DF:EE:BD:53:D1
Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
Certificate issuer:       /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Certificate serial:       0247
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
Manifest number:          022F
Signing time:             Tue 21 Jul 2026 04:07:30 +0000
Manifest this update:     Tue 21 Jul 2026 04:07:30 +0000
Manifest next update:     Tue 28 Jul 2026 04:07:30 +0000
Files and hashes:         1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: r/CoITGcQll3jl0f8GxjRlqzg+buxTrJbCXXo4D9ajQ=)
                          2: 585745526BC111EEA163E774C4F9AE02.roa (hash: jWFAA3hjLn4/pUtGRdYAlT0inc3UozSJNCSTFiimgaQ=)
                          3: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: k/wrk+71dTC2xpAfXzlheReLA9aT4ZuDhkK6xEFQumE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
                          rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 04:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
        Validity
            Not Before: Jul 21 04:07:30 2026 GMT
            Not After : Jul 28 04:07:30 2026 GMT
        Subject: CN=6a5ef082-23a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:00:8a:a9:30:22:5d:85:50:7c:a6:88:a7:
                    59:af:9b:9c:d1:35:90:ca:43:f3:de:1e:fa:64:e8:
                    6f:3b:40:e1:28:d1:26:06:e6:43:c3:f9:72:fc:1b:
                    1e:3c:8b:3b:e6:67:21:2d:3a:34:f6:2a:96:28:5a:
                    44:aa:e0:ba:49:78:ae:4d:1f:3f:d5:17:6b:8e:aa:
                    6e:1f:88:a3:87:53:b3:65:2f:72:f1:c4:8b:9c:b0:
                    f0:c8:3b:22:8f:d8:c1:a5:fd:63:09:12:1d:fc:2a:
                    42:a8:3a:26:27:08:a3:cf:51:53:99:f2:97:a3:30:
                    69:0c:ed:22:51:8b:a7:4d:93:88:d3:fa:34:c0:6e:
                    a3:d2:2f:ba:90:7c:c6:bf:08:5c:2e:da:3b:ae:3e:
                    75:b6:b5:c0:c3:d4:87:ec:ac:25:df:5c:77:04:a1:
                    b4:71:9e:fb:92:c7:5e:84:cf:a7:51:ba:9d:ec:d9:
                    37:05:36:fa:34:59:ae:95:21:fe:5c:0a:b4:2c:65:
                    8b:6e:43:2a:92:60:a4:c1:c1:bf:40:6f:96:68:4c:
                    90:a0:a8:51:fd:5a:1c:2f:1a:64:25:4a:5e:dc:9e:
                    df:b2:2e:e5:b1:6d:91:65:ca:d9:da:78:3d:0b:f8:
                    d9:1e:6a:5a:e8:66:06:6c:e1:83:39:1c:97:25:b0:
                    d9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E9:7A:0E:6E:65:D9:CA:35:2B:E6:9D:C7:34:1B:DF:EE:BD:53:D1
            X509v3 Authority Key Identifier:
                keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:47:cc:2a:85:db:47:78:d4:57:e5:99:c3:0c:8e:b2:b0:80:
         f7:47:8d:6b:14:32:0b:f6:fd:e8:05:2b:55:d1:0d:d9:f4:c3:
         30:08:ab:c4:78:87:fc:79:22:67:85:f9:3d:5e:db:36:4c:92:
         72:f3:68:73:25:cc:95:7b:91:f0:1b:a0:fb:b0:23:46:a0:bd:
         11:30:d4:7a:16:59:76:3d:d9:fe:f2:92:0b:99:7d:fd:9b:51:
         99:59:b7:c2:11:93:95:31:a3:ee:55:27:bf:9c:35:01:a8:63:
         4b:40:fa:d4:8a:c4:e2:d8:ec:d5:32:c7:e7:d8:10:9f:4c:6e:
         bc:b2:f6:57:30:98:d2:25:ed:2b:fa:a6:26:8f:08:3b:17:8e:
         e7:05:f4:35:7c:52:a2:b4:c0:2f:0e:9e:0b:45:9f:4a:ef:ef:
         10:6e:6a:5b:21:df:07:53:3b:f3:2b:bd:2a:93:fc:b1:c2:0c:
         6f:81:10:ef:48:bf:74:4e:b4:ce:80:82:f4:5c:d1:0a:04:fe:
         04:df:c5:e1:ca:a4:e3:80:a6:9e:e9:9b:c5:c2:9a:f7:c5:e7:
         f7:ff:a0:ee:e1:b2:b7:f6:33:32:63:9c:1e:88:9e:cc:1e:ec:
         b0:01:5a:0d:e0:18:cf:a9:c3:93:a2:ae:95:5f:41:ad:06:9f:
         da:dc:f4:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2MjMxMTAvBgNVBAUTKERBNzM2OUI0OTcyMkJBMTM5QjdCNjBGMzlDODhCNDlC
REJCMzVGM0QwHhcNMjYwNzIxMDQwNzMwWhcNMjYwNzI4MDQwNzMwWjAYMRYwFAYD
VQQDEw02YTVlZjA4Mi0yM2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtU8AiqkwIl2FUHymiKdZr5uc0TWQykPz3h76ZOhvO0DhKNEmBuZDw/ly/Bse
PIs75mchLTo09iqWKFpEquC6SXiuTR8/1RdrjqpuH4ijh1OzZS9y8cSLnLDwyDsi
j9jBpf1jCRId/CpCqDomJwijz1FTmfKXozBpDO0iUYunTZOI0/o0wG6j0i+6kHzG
vwhcLto7rj51trXAw9SH7Kwl31x3BKG0cZ77ksdehM+nUbqd7Nk3BTb6NFmulSH+
XAq0LGWLbkMqkmCkwcG/QG+WaEyQoKhR/VocLxpkJUpe3J7fsi7lsW2RZcrZ2ng9
C/jZHmpa6GYGbOGDORyXJbDZlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMbpeg5u
ZdnKNSvmncc0G9/uvVPRMB8GA1UdIwQYMBaAFNpzabSXIroTm3tg85yItJvbs189
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTYyMy9BMjVENDg5RTUw
NDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVoT2JlMkR6bklpMG05dXpY
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTYyMy9BMjVENDg5RTUwNDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVo
T2JlMkR6bklpMG05dXpYejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjUfMKoXbR3jUV+WZwwyOsrCA90eNaxQyC/b96AUrVdEN2fTDMAirxHiH/Hki
Z4X5PV7bNkyScvNocyXMlXuR8Bug+7AjRqC9ETDUehZZdj3Z/vKSC5l9/ZtRmVm3
whGTlTGj7lUnv5w1AahjS0D61IrE4tjs1TLH59gQn0xuvLL2VzCY0iXtK/qmJo8I
OxeO5wX0NXxSorTALw6eC0WfSu/vEG5qWyHfB1M78yu9KpP8scIMb4EQ70i/dE60
zoCC9FzRCgT+BN/F4cqk44CmnumbxcKa98Xn9/+g7uGyt/YzMmOcHoiezB7ssAFa
DeAYz6nDk6KulV9BrQaf2tz0dQ==
-----END CERTIFICATE-----
Generated at Wed Jul 22 03:10:11 2026 by rpki-client