Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
File:                     C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json)
Hash identifier:          JbOmIIaEML2TLkngqBr+hNuanuxTxV3CiFMp2PB03gE=
Subject key identifier:   2D:27:3D:53:34:0C:98:D7:D9:85:97:19:7D:5B:5C:E0:AB:16:49:60
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Certificate issuer:       /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial:       06D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
Manifest number:          06A9
Signing time:             Sun 26 Jul 2026 23:18:26 +0000
Manifest this update:     Sun 26 Jul 2026 23:18:25 +0000
Manifest next update:     Sun 02 Aug 2026 23:18:25 +0000
Files and hashes:         1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: 6xnBuW6fMe741zLz71TycRAS1RY9LbV5UzNoLa3N8OQ=)
                          2: 4FF7919CA3AE11F08498344CC4F9AE02.roa (hash: eA6mWyuVV1KikVqgTq4NzwsvdlA+Lo+7hoRNd7wEZiw=)
                          3: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: WtM7Gf9McV4dyBDihaoF7GIKprC8LiyJNTcZV2E7ygM=)
                          4: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (hash: XThbuRDJ9AeBHR2f0+N9y3PVKHkkMbkQnJqbi1dA8dk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1745 (0x6d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
        Validity
            Not Before: Jul 26 23:18:25 2026 GMT
            Not After : Aug  2 23:18:25 2026 GMT
        Subject: CN=6a6695c2-2134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4e:74:40:ec:c4:26:4e:1c:a7:82:82:c1:09:
                    d9:7f:25:da:82:4d:8e:38:67:a8:12:16:87:dc:9b:
                    dd:ca:54:7f:ab:5e:ea:c3:0c:05:a9:2e:93:c5:d1:
                    6b:1a:04:e9:a2:0f:64:f0:84:15:b6:a4:69:67:ee:
                    02:84:2c:40:cc:b6:49:9f:c0:11:70:1d:fc:00:fc:
                    18:51:2f:50:db:cb:58:0d:6b:0f:a3:20:8b:3b:43:
                    51:6e:95:1b:e8:90:8a:b7:7e:c5:dd:dc:05:e3:12:
                    28:bb:45:a7:38:1a:6f:b2:6e:78:4f:17:d7:b2:a5:
                    6b:14:81:d2:88:cb:9b:e6:f4:ef:91:65:36:06:ff:
                    bf:40:f2:c4:52:49:53:3b:fb:fd:31:34:1c:87:84:
                    7d:d2:c8:7a:f2:7c:ee:1b:ac:15:a0:41:3c:1d:86:
                    bb:0a:b1:52:2b:b7:8a:25:a5:2d:54:31:5c:f3:96:
                    5d:36:93:ac:15:3c:f3:da:a8:d1:14:49:70:84:e6:
                    b9:12:c5:da:1e:b5:dd:3d:3c:03:8f:a4:62:a2:21:
                    5b:3b:dc:48:33:df:a8:ea:3b:da:3e:a6:da:b2:5e:
                    40:ff:b9:78:64:60:d2:a2:77:9f:28:86:89:34:50:
                    34:c1:7a:eb:23:45:78:e1:d4:6e:2c:7b:42:18:9b:
                    ea:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:27:3D:53:34:0C:98:D7:D9:85:97:19:7D:5B:5C:E0:AB:16:49:60
            X509v3 Authority Key Identifier:
                keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:3f:ff:9f:b6:49:06:05:89:8a:3e:83:55:77:7c:c9:d4:51:
         ab:ea:95:dd:3d:e1:19:b9:74:3f:eb:b5:b1:fb:41:6f:ef:23:
         bb:8b:f8:8c:d4:b5:63:43:39:20:ba:7f:51:84:f1:c1:ff:10:
         f0:2e:6d:63:84:52:b4:5d:6b:97:58:c0:b4:3c:99:fc:c9:b1:
         de:2a:24:84:5e:e0:c6:0e:f0:56:49:83:e9:06:2b:e8:f5:73:
         7a:21:99:49:09:2e:51:ed:ad:aa:e1:52:de:6f:5f:5c:87:f3:
         a2:73:0c:5b:7f:76:a1:2b:66:36:56:d6:56:df:3f:62:fb:42:
         a0:03:f1:2b:43:af:76:3f:6c:a9:e0:11:c1:61:fc:da:5b:78:
         46:67:95:e4:90:46:b3:b6:6a:85:ba:98:ee:24:cd:c6:45:43:
         d8:f3:18:b6:f2:91:38:82:38:df:71:7c:da:56:71:a8:d3:96:
         31:67:8c:56:9d:93:87:66:2c:b4:87:10:0e:f2:43:12:6d:1a:
         1b:a4:e9:df:7d:e4:de:19:fa:cc:e2:9e:2f:69:f8:1f:c7:6d:
         b6:b8:1a:c8:e5:31:c8:17:7f:4b:8f:30:5a:98:38:7f:6f:89:
         12:1c:6f:b4:1c:d9:e5:81:45:89:50:8c:6b:3b:cc:0a:d4:3b:
         91:2a:98:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 02:23:05 2026 by rpki-client