Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
File:                     M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json)
Hash identifier:          aa0As+4mJBhe3ubbweGk01teDCz2lOYSWddBGQZWi0Q=
Subject key identifier:   C6:99:C7:25:06:1D:0E:0F:4B:36:FB:55:40:0B:B3:D5:BD:F1:F6:E9
Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
Certificate issuer:       /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Certificate serial:       029A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
Manifest number:          028E
Signing time:             Fri 21 Aug 2026 01:47:52 +0000
Manifest this update:     Fri 21 Aug 2026 01:47:52 +0000
Manifest next update:     Fri 28 Aug 2026 01:47:52 +0000
Files and hashes:         1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: hlvvwAzxIn+O2WQquV0jtre+qVJZWxyjDGFl4Ybhg4M=)
                          2: B6522520CA6311F09583DE23C4F9AE02.roa (hash: BLKJYKfre7LAbOlIyN9gi1hwCec2KGQoAxw2GSxc1Lk=)
                          3: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: zE41WQieGtPZ6uprujzngfIRBwGKIWd50MUZOTimbRA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
                          rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
        Validity
            Not Before: Aug 21 01:47:52 2026 GMT
            Not After : Aug 28 01:47:52 2026 GMT
        Subject: CN=6a87ae48-94b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ed:5b:cb:98:ab:77:84:c6:32:cc:fd:c0:77:
                    fa:30:07:39:67:b8:e4:66:62:13:40:34:00:a5:29:
                    62:8a:90:cc:45:f3:1a:ac:da:73:04:63:f4:d7:1d:
                    ef:5c:16:fc:84:ba:ad:96:51:7c:7f:dc:68:68:18:
                    80:aa:b1:c6:79:d6:0b:ff:11:f6:30:29:72:2a:59:
                    4d:88:df:32:b1:5d:07:3d:98:da:78:d0:fe:a5:1f:
                    ca:23:8a:aa:ef:01:78:7c:ce:26:30:e4:83:a8:22:
                    56:b7:22:04:bf:2e:f6:87:79:6f:27:ee:26:eb:77:
                    f8:84:f0:7e:dc:78:9f:ce:7a:13:91:10:83:8b:e7:
                    71:85:c6:31:16:6a:cc:db:d9:0a:af:83:66:2e:8b:
                    f7:c2:b5:eb:e8:7e:e9:78:f2:4c:6d:86:3f:f4:5b:
                    a3:6e:6e:90:b0:e3:a9:cd:53:09:72:5b:39:e9:9f:
                    e7:c4:de:81:c4:32:f9:a8:c4:c0:4c:f8:24:b5:11:
                    97:9f:7d:6f:63:35:b9:80:08:a7:20:81:23:07:ad:
                    d5:43:62:1a:a1:4d:c5:14:6b:2c:a1:95:08:0f:3a:
                    a9:10:1b:b3:b3:e6:0e:f6:44:c8:f4:2f:1a:c3:a3:
                    bd:15:53:5b:c6:d8:cf:38:2a:2c:41:53:e6:43:6b:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:99:C7:25:06:1D:0E:0F:4B:36:FB:55:40:0B:B3:D5:BD:F1:F6:E9
            X509v3 Authority Key Identifier:
                keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:1b:3c:54:51:d9:03:70:fa:63:3d:a6:6a:36:de:96:a0:6e:
         27:7d:cd:dd:1b:a5:17:e9:0b:cb:3b:36:3d:94:1a:45:36:6b:
         e0:6b:8b:61:d8:b3:3a:a1:9a:be:ee:7e:fa:b7:4f:09:13:4f:
         74:c5:18:24:8b:d5:e6:00:75:52:fc:9f:e8:f8:65:83:7e:e6:
         7e:5d:ba:25:a7:37:2f:4e:13:3e:67:52:0b:47:40:44:84:04:
         15:a3:72:07:5e:01:ba:66:16:39:fc:c4:bc:17:c0:b7:2b:4c:
         45:37:d2:3b:e3:ca:5f:8e:ac:88:90:f6:2e:71:34:7e:da:d3:
         2a:08:2f:90:fd:b4:23:70:16:3a:9a:ca:7b:7b:2b:9f:55:04:
         2f:9c:7c:24:7f:6d:a5:45:48:ca:e7:41:da:a8:7e:e5:95:d7:
         f3:06:3e:d9:26:ae:cf:99:35:25:b7:1a:6f:32:0a:78:42:8b:
         48:01:cf:d5:d8:98:d4:ac:0e:7c:d7:77:c4:f1:b2:32:fe:d2:
         b4:bb:c7:e3:81:17:c4:0d:71:d0:7f:65:5e:68:92:4c:7d:3b:
         33:88:d8:c6:75:4b:f1:2d:ce:56:01:d5:b8:2f:be:61:9e:b1:
         d0:ef:68:ef:2d:d6:1a:1b:6e:19:99:f9:e6:8c:6c:80:6d:c9:
         ce:ba:9a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:41:37 2026 by rpki-client