Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
File:                     2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json)
Hash identifier:          Ev3MTifxzpJIqRudxjmr837OU0ZYgTIvoXkuRjuIUQ4=
Subject key identifier:   8A:09:18:2F:3A:15:B7:6D:5A:38:1B:21:A8:D1:C0:06:EB:3E:B3:67
Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
Certificate issuer:       /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Certificate serial:       03A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
Manifest number:          0394
Signing time:             Sun 05 Jul 2026 01:08:27 +0000
Manifest this update:     Sun 05 Jul 2026 01:08:26 +0000
Manifest next update:     Sun 12 Jul 2026 01:08:26 +0000
Files and hashes:         1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: h8BMrnVMh9bLx/F8Z3a5aoszUm5pMBaA2o84RPXl/tM=)
                          2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: B+EK2a9s5cpD4dbFXqEBGct1LhuPCRVc5c4XOhND9Sc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
                          rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 01:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 928 (0x3a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B241, serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
        Validity
            Not Before: Jul  5 01:08:26 2026 GMT
            Not After : Jul 12 01:08:26 2026 GMT
        Subject: CN=6a49ae8b-1529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:c9:cb:6d:0b:12:7a:b4:2e:be:7d:0d:2b:
                    bd:16:3a:e8:05:28:d7:83:cd:cc:91:d5:bb:29:67:
                    1d:dd:42:e6:aa:31:cc:3f:00:ab:31:4a:98:a3:91:
                    c1:c2:6d:db:87:95:93:83:6d:29:99:36:64:00:c1:
                    ef:54:c0:20:45:71:3f:22:4b:18:84:5a:70:90:53:
                    97:ba:45:98:3b:4c:e3:33:15:05:d1:4d:c8:e3:85:
                    05:2d:2a:3e:31:32:a0:04:de:c8:58:cf:9e:5a:57:
                    21:97:a2:df:2f:f7:89:cc:ba:23:d0:13:3b:8e:4a:
                    70:9e:a7:92:01:6e:70:71:14:49:26:99:bb:5c:e9:
                    73:9e:6b:34:e2:4f:0e:01:5d:81:ec:26:5b:0b:01:
                    f5:f0:93:0f:ee:c5:90:04:15:aa:2e:f1:9c:a8:ee:
                    8b:d3:46:92:09:0d:15:ef:c3:af:ce:ce:71:22:54:
                    19:e6:c1:c1:4b:8d:75:7e:c2:41:63:ea:27:27:a1:
                    40:26:b9:50:a1:b5:c1:99:f4:df:51:86:80:63:51:
                    dc:22:40:fd:1d:a3:ec:e3:6f:0c:4f:06:0f:bf:9c:
                    08:71:91:6e:2b:6d:e2:52:f6:2e:8d:ca:3c:82:b0:
                    aa:02:80:7e:c0:f4:f0:70:e4:24:57:f8:ec:a0:b2:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:09:18:2F:3A:15:B7:6D:5A:38:1B:21:A8:D1:C0:06:EB:3E:B3:67
            X509v3 Authority Key Identifier:
                keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e1:ee:b7:4b:f8:3c:7c:85:3c:19:44:b3:70:ef:d5:59:68:
         e5:30:35:21:97:25:8b:3e:df:8b:5a:54:d8:aa:1d:7b:e2:96:
         71:05:6c:d5:ce:34:07:72:24:62:b6:5f:39:ce:9a:e8:68:79:
         6e:fd:8d:c1:26:75:74:d6:5b:83:3c:16:cd:16:5e:25:d3:c5:
         dc:70:69:13:6a:2c:d6:a1:35:5c:38:65:bd:fb:b6:88:25:99:
         8e:23:66:5c:28:ba:3c:20:67:8f:fa:ee:56:e4:32:fb:0e:cd:
         91:34:da:1f:56:32:d7:bd:86:bd:e5:6f:8a:a9:75:36:94:3c:
         22:3e:e0:d5:1b:e4:4c:ba:2c:6c:54:01:25:2e:47:99:6a:c8:
         97:38:31:1a:58:62:af:02:d3:43:bb:9e:61:72:ae:be:ef:99:
         9d:46:7f:97:cc:80:75:f6:7f:57:00:94:48:f4:55:67:ef:aa:
         2d:62:40:79:ca:c0:67:d4:e6:b2:18:34:28:df:1b:02:7d:2f:
         7e:3e:47:c3:06:94:42:bd:78:e7:01:6b:1c:1f:5f:c5:41:ea:
         84:f4:ab:f8:11:a6:fd:77:19:bc:26:93:33:eb:14:72:67:ac:
         ef:10:e4:f1:91:b7:bf:0a:69:51:05:84:92:e9:89:fa:ac:0a:
         9f:a3:bb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:43:08 2026 by rpki-client