Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
File:                     2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json)
Hash identifier:          PD6qG4tKT9gTJaWn9E4tngIXBsr1ulLJ9a3ryJ/pWO0=
Subject key identifier:   E2:75:C5:08:3B:5D:FF:F2:60:97:47:96:CE:2D:97:8A:78:F9:8A:57
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       022E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
Manifest number:          021B
Signing time:             Tue 01 Sep 2026 03:02:16 +0000
Manifest this update:     Tue 01 Sep 2026 03:02:16 +0000
Manifest next update:     Tue 08 Sep 2026 03:02:16 +0000
Files and hashes:         1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: EqfxfmulDXkSmrYLoKlyg+ac4rTO8Es9UcS/6YMEZaM=)
                          2: E5502F78772411EE8659D21FC4F9AE02.roa (hash: 55QHoYjeQW2YY84IgZmrw7Bp3j4BU5OniNwUyuBN8Es=)
                          3: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: bdS7OvbOuaz6iTgPtqEV9vUYbciEKGiVTIJ8MXVQT+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Sep 2026 02:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
        Validity
            Not Before: Sep  1 03:02:16 2026 GMT
            Not After : Sep  8 03:02:16 2026 GMT
        Subject: CN=6a964038-de34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f0:54:fb:7e:97:68:fc:fc:f1:35:07:d9:18:
                    04:18:cc:0a:e9:84:85:de:7c:1b:aa:63:1a:e2:a0:
                    6c:2c:54:37:c9:2e:60:aa:fc:a1:f2:15:30:06:1a:
                    7f:28:de:b2:d3:dc:c1:e4:82:77:93:db:2c:9a:06:
                    95:7a:83:3c:29:66:d9:fa:d5:68:af:d5:55:26:92:
                    fb:80:9b:a7:65:31:ae:65:17:5e:68:06:e8:f5:04:
                    01:88:bd:e9:c2:60:1d:79:28:32:7c:bb:d3:9a:65:
                    40:0d:f1:62:47:ea:89:f8:77:09:6f:87:3c:84:be:
                    74:6e:34:a2:8d:1c:aa:cc:47:51:35:b0:f9:9c:b2:
                    19:7e:bb:bb:da:30:d7:ba:42:4c:3e:cc:49:87:79:
                    e0:78:4e:07:fc:44:68:2f:7e:69:29:7f:75:9b:69:
                    06:52:2a:11:61:d3:52:65:64:32:91:90:6b:89:9e:
                    68:35:ed:4e:91:b2:6a:f1:60:41:3b:ad:52:3f:d5:
                    b2:3f:92:ff:be:0d:ca:10:c8:24:71:19:08:b5:76:
                    34:d7:8d:2b:a7:d4:8b:5d:16:cf:09:1f:70:a1:49:
                    37:ec:c6:42:7e:70:ba:3c:74:33:0c:a5:f0:6f:64:
                    3a:16:bf:b8:bd:fd:a7:10:ef:48:de:f3:c5:67:b1:
                    bf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:75:C5:08:3B:5D:FF:F2:60:97:47:96:CE:2D:97:8A:78:F9:8A:57
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3e:e9:3d:5e:8f:e0:5e:09:ca:89:b3:b5:24:d4:3a:c5:8c:
         b8:10:90:4a:81:e2:9a:2a:d7:61:6f:73:ad:ab:29:cd:09:59:
         0c:fe:c7:6f:3f:c8:36:38:2a:86:fd:5b:d5:a7:5c:20:3c:c1:
         19:49:0b:23:5d:0c:e7:7d:a1:9a:8c:36:89:a6:58:f6:cb:87:
         48:39:a9:68:be:2b:c7:f8:5d:69:e7:98:2b:16:32:a4:96:26:
         8e:70:26:1b:7c:78:14:db:12:69:9d:0c:9c:34:5d:29:1a:f3:
         e6:fa:11:65:21:db:b2:86:09:be:fb:bb:8b:ec:21:03:9f:0e:
         38:9b:29:1d:c0:a1:a1:30:38:9d:4a:af:ab:a1:1a:af:16:09:
         9f:60:4c:76:00:de:40:74:14:68:ba:9c:37:ae:38:e9:30:41:
         81:eb:3d:3c:5f:86:c2:93:9e:26:7f:99:75:2d:14:c2:16:e2:
         a2:bd:0d:69:8c:4d:a6:85:5f:88:19:f6:ac:59:92:8a:2e:3b:
         0b:2b:75:0d:c1:c7:f5:5f:16:92:89:a9:47:34:5a:f1:9d:0e:
         e0:d5:d7:7d:51:af:99:56:6d:fe:38:4b:da:35:46:41:b3:f3:
         e3:9b:01:80:93:8d:5a:0e:ff:e1:c9:aa:f1:45:5e:d6:08:98:
         4c:38:68:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:29:57 2026 by rpki-client