Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
File:                     C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json)
Hash identifier:          X9utVsjxUR+KQK8dWcvq3dlPbB7ax0dnrRk8haEqfOA=
Subject key identifier:   2C:E4:7D:DC:29:D1:86:F2:43:76:98:7B:6E:21:C1:46:F5:0E:A3:C6
Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
Certificate issuer:       /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
Manifest number:          EB
Signing time:             Wed 19 Aug 2026 07:07:34 +0000
Manifest this update:     Wed 19 Aug 2026 07:07:33 +0000
Manifest next update:     Wed 26 Aug 2026 07:07:33 +0000
Files and hashes:         1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: oleZOK4gOhgv65TwG3YjG9ITyL/3FHZ36sE1lvsSHfc=)
                          2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: gIIumWSAkBw+/Kf2c0p6PpwOKZCEtqNskG3XhcLL5aE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl
                          rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
        Validity
            Not Before: Aug 19 07:07:33 2026 GMT
            Not After : Aug 26 07:07:33 2026 GMT
        Subject: CN=6a855636-1263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:44:65:41:5e:e3:aa:87:26:40:3e:c4:6f:35:
                    65:20:b5:fb:1b:6a:49:a8:74:1a:39:eb:55:4c:fc:
                    c6:f6:68:c3:d7:03:ef:e9:8f:3f:a2:45:19:cd:b5:
                    95:bc:e8:9f:0f:df:a0:e1:0a:48:24:e9:73:12:6d:
                    b0:17:86:a4:30:33:7c:8e:f7:d1:bc:5d:f3:6c:9b:
                    ec:cc:3f:0d:b7:55:c1:6c:e3:ce:11:78:b6:c0:cf:
                    0e:35:d1:a9:72:26:cf:85:0c:35:97:db:cc:06:60:
                    91:6b:f8:c5:60:2e:d5:42:04:e1:f0:5f:3c:c1:e0:
                    64:49:9f:6f:3c:97:f5:a3:c1:99:a4:ff:72:19:4d:
                    27:1e:55:8c:23:7a:13:36:6a:bb:bb:c6:a9:1b:1b:
                    91:1e:e2:96:6a:da:95:6c:3e:fb:84:71:71:89:84:
                    93:b6:b3:18:17:d1:4b:77:7f:b3:06:cc:96:19:a1:
                    79:96:d9:ad:dc:c3:a8:5c:71:fc:1c:92:76:de:2e:
                    76:b6:c8:b0:4b:4d:67:2c:df:ee:26:52:ea:e8:fc:
                    63:41:be:55:f7:84:1f:b3:25:09:9b:86:79:62:d3:
                    d8:fe:4d:a9:e0:d8:94:a1:20:9a:1a:d5:c3:a6:d9:
                    64:b5:9c:4a:30:b1:7b:09:86:b6:4c:72:89:a5:9f:
                    54:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E4:7D:DC:29:D1:86:F2:43:76:98:7B:6E:21:C1:46:F5:0E:A3:C6
            X509v3 Authority Key Identifier:
                keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:17:f4:d3:56:a2:ed:73:35:f6:a1:c7:ef:73:25:9c:26:6f:
         26:b3:e7:8f:b8:7c:59:94:f0:30:94:70:52:2c:30:18:d0:6f:
         48:61:56:57:43:c7:87:c9:fe:86:72:52:10:7e:4d:d2:26:84:
         d2:7c:80:57:60:9e:6e:d0:52:00:c8:e7:1c:47:fb:1d:2f:4d:
         4f:2c:ff:f5:08:fe:4a:94:83:9e:3e:06:ee:05:76:2d:ef:4f:
         90:2a:53:49:55:80:ed:7c:99:94:9c:86:6d:10:b8:67:38:cb:
         16:81:08:42:ac:3f:bd:5b:b9:2d:77:99:0a:ae:70:2a:ed:48:
         ba:3d:ba:5b:77:6e:81:9f:21:fe:85:80:5f:7b:4f:72:a9:aa:
         5f:ae:83:fa:77:b8:e6:72:20:2c:ae:6d:cd:a8:d0:90:67:3a:
         4a:cf:f4:4c:39:15:45:ce:6b:64:53:f6:5b:de:1a:7e:85:6a:
         79:9a:cb:5f:02:19:b7:f9:b6:77:d9:d1:36:d4:23:f1:64:4c:
         a0:da:16:3d:ce:2d:f6:87:c9:59:23:d5:ba:13:b2:77:f8:f6:
         51:7d:11:ed:9d:bd:39:a3:ab:a1:58:7d:2c:f9:78:03:4a:92:
         48:d5:4b:87:5b:68:71:46:f4:9d:c1:8c:6d:a4:3a:40:88:bd:
         45:e2:f3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:35 2026 by rpki-client