Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
File:                     2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json)
Hash identifier:          JJpaKVqObhMRzcDY5f14vbX65tfUc2NPb1DpwVEFUdU=
Subject key identifier:   46:A9:78:77:EB:81:E2:89:A2:1A:29:AF:84:DD:E6:41:20:CF:A3:AE
Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
Certificate issuer:       /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Certificate serial:       03B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
Manifest number:          03AB
Signing time:             Wed 19 Aug 2026 01:00:33 +0000
Manifest this update:     Wed 19 Aug 2026 01:00:32 +0000
Manifest next update:     Wed 26 Aug 2026 01:00:32 +0000
Files and hashes:         1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: CfbTVin5PQolCeiVyk1vCSrrkTo1R2xc/YS2o4DvCNk=)
                          2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: B+EK2a9s5cpD4dbFXqEBGct1LhuPCRVc5c4XOhND9Sc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
                          rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951 (0x3b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B241, serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
        Validity
            Not Before: Aug 19 01:00:32 2026 GMT
            Not After : Aug 26 01:00:32 2026 GMT
        Subject: CN=6a850030-f66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7d:b9:9f:22:ae:17:ca:2b:4e:3f:04:08:29:
                    e2:4e:2c:46:94:98:e7:45:7e:76:e4:ac:d3:30:8e:
                    6c:46:6d:65:eb:96:03:f7:95:d4:c1:b1:d4:f2:9b:
                    ee:9f:f6:7e:3c:46:90:de:82:d6:f4:21:ff:c9:33:
                    b7:bf:dc:cf:04:96:75:90:d3:ac:7b:73:e7:28:91:
                    ea:0b:03:3c:1f:4d:41:c7:7f:8a:da:b4:af:df:e9:
                    ed:33:13:a1:de:e1:76:44:3b:0b:10:c5:cd:2a:d1:
                    76:c8:78:9c:ac:f5:64:c3:e0:94:d3:e6:60:74:38:
                    87:9a:8a:87:8e:ea:49:df:e9:8f:bc:dc:42:73:72:
                    22:1c:07:1a:05:6e:41:a8:eb:01:15:42:f6:d9:77:
                    a4:03:6b:cc:b4:ab:a5:0a:c4:b1:37:c8:aa:ae:79:
                    06:0b:98:be:3e:1e:10:e6:ae:58:48:94:5c:8a:fc:
                    25:7a:39:6c:b3:1c:aa:76:af:f7:1e:45:a0:71:85:
                    a8:72:d4:cb:75:6d:b3:b8:8a:22:92:50:b3:f7:a1:
                    84:b1:45:54:57:04:d7:2a:22:31:e8:65:07:e0:de:
                    cd:e6:ba:2a:20:86:ab:d4:a6:9f:80:92:9a:1d:c9:
                    d7:ed:a2:d7:e3:a2:7d:64:79:2b:a7:39:cd:1a:82:
                    e6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A9:78:77:EB:81:E2:89:A2:1A:29:AF:84:DD:E6:41:20:CF:A3:AE
            X509v3 Authority Key Identifier:
                keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:90:1e:2b:24:fb:d1:e4:08:7f:db:25:3b:4c:72:fe:8c:81:
         d0:22:6a:82:0a:06:d0:41:ef:6a:22:2a:5d:b3:4a:a8:7c:cd:
         ec:e6:50:86:1a:02:db:ea:84:65:f3:39:b7:f3:ee:cf:64:16:
         fb:fe:af:61:b0:30:cf:fd:1d:1f:78:d6:64:01:6a:38:ae:97:
         e2:78:59:17:b6:a6:8f:9e:69:d6:27:77:8e:b2:f9:2f:fe:93:
         bf:6a:f0:e2:38:b7:99:69:12:6e:dc:b4:fa:15:fc:74:74:9c:
         ae:79:af:29:4b:fc:4d:56:b4:0f:b8:bd:62:c9:c0:1b:d4:5b:
         f1:b7:6b:a4:e2:7e:83:96:87:8e:2e:3d:bf:a0:2b:3e:b1:10:
         6a:05:3b:20:c0:3e:47:71:e2:b9:4e:27:c5:b1:fc:52:f8:82:
         88:62:8f:5c:79:ba:84:91:e8:77:01:d4:ea:51:36:dd:40:a5:
         40:0c:8a:4b:30:06:a9:a5:3a:5b:28:e9:1a:81:da:9e:33:a5:
         61:54:fe:09:91:af:36:82:e1:4b:d6:69:79:ef:ef:9e:c6:cc:
         4d:d1:fe:6f:7b:be:8a:cb:10:92:c1:76:65:1f:34:fd:98:8b:
         78:b2:b2:fe:16:d2:7a:b0:45:38:74:53:60:77:49:f5:56:8f:
         1b:3c:71:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEIyNDExMTAvBgNVBAUTKERBMDEyNTQyRUE1OTM1NUZFODg0NzhEMjFENzNFMzZD
RUJDREYzQ0IwHhcNMjYwODE5MDEwMDMyWhcNMjYwODI2MDEwMDMyWjAYMRYwFAYD
VQQDEw02YTg1MDAzMC1mNjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjn25nyKuF8orTj8ECCniTixGlJjnRX525KzTMI5sRm1l65YD95XUwbHU8pvu
n/Z+PEaQ3oLW9CH/yTO3v9zPBJZ1kNOse3PnKJHqCwM8H01Bx3+K2rSv3+ntMxOh
3uF2RDsLEMXNKtF2yHicrPVkw+CU0+ZgdDiHmoqHjupJ3+mPvNxCc3IiHAcaBW5B
qOsBFUL22XekA2vMtKulCsSxN8iqrnkGC5i+Ph4Q5q5YSJRcivwlejlssxyqdq/3
HkWgcYWoctTLdW2zuIoiklCz96GEsUVUVwTXKiIx6GUH4N7N5roqIIar1KafgJKa
HcnX7aLX46J9ZHkrpznNGoLmCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEapeHfr
geKJohopr4Td5kEgz6OuMB8GA1UdIwQYMBaAFNoBJULqWTVf6IR40h1z42zrzfPL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjI0MS9CNjQ5Q0E5NkYw
NzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5WX29oSGpTSFhQamJPdk44
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJnRWxRdXBaTlZfb2hIalNIWFBqYk92Tjg4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjI0MS9CNjQ5Q0E5NkYwNzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5W
X29oSGpTSFhQamJPdk44OHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX5AeKyT70eQIf9slO0xy/oyB0CJqggoG0EHvaiIqXbNKqHzN7OZQhhoC2+qE
ZfM5t/Puz2QW+/6vYbAwz/0dH3jWZAFqOK6X4nhZF7amj55p1id3jrL5L/6Tv2rw
4ji3mWkSbty0+hX8dHScrnmvKUv8TVa0D7i9YsnAG9Rb8bdrpOJ+g5aHji49v6Ar
PrEQagU7IMA+R3HiuU4nxbH8UviCiGKPXHm6hJHodwHU6lE23UClQAyKSzAGqaU6
WyjpGoHanjOlYVT+CZGvNoLhS9Zpee/vnsbMTdH+b3u+issQksF2ZR80/ZiLeLKy
/hbSerBFOHRTYHdJ9VaPGzxxOg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:46 2026 by rpki-client