Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
File:                     2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json)
Hash identifier:          n5+sMY7emYKb7McKhgwRXonnyGsGQXOi9AGayNwvGz0=
Subject key identifier:   00:E6:3F:68:42:72:DC:71:B8:C6:71:AB:81:EE:BC:11:A8:06:43:1E
Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
Certificate issuer:       /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Certificate serial:       056E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
Manifest number:          0556
Signing time:             Thu 10 Sep 2026 23:17:35 +0000
Manifest this update:     Thu 10 Sep 2026 23:17:34 +0000
Manifest next update:     Thu 17 Sep 2026 23:17:34 +0000
Files and hashes:         1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: n8QvqckLC6x8vj79VAG8Aq/whDjoQRoOEYoPVNKvRKk=)
                          2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: /qXHBT4MA1qmjnYwgB6pugXd54FZZQ+3x08eX/UUmSg=)
                          3: 5542C1D66D7E11F1B74F03108747A888.roa (hash: GK+s6oT3MEUn7idrDMZYD/2eUrDgfq7a0JF4Bt8bdJM=)
                          4: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: gyHSwtQl6vEkaJUZPDO/MMRfEGWi04eS/Wu0admRoDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
                          rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 23:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390 (0x56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
        Validity
            Not Before: Sep 10 23:17:34 2026 GMT
            Not After : Sep 17 23:17:34 2026 GMT
        Subject: CN=6aa33a8f-f1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:1f:70:6d:2c:52:44:eb:71:43:38:1d:d8:
                    30:12:7c:a0:d9:7d:3c:d2:82:14:7a:1a:19:26:42:
                    7a:23:b6:d5:65:93:4b:d0:9e:39:7d:08:d0:dd:e1:
                    37:01:83:32:cb:0e:1d:f1:97:f6:60:29:f4:84:b0:
                    41:c1:de:0f:7c:73:5c:14:0f:1d:ec:0c:0e:73:17:
                    b7:2d:b0:1c:15:c9:e9:6b:3b:0c:91:23:ba:71:5f:
                    a7:b2:4f:7c:f7:35:2d:b3:e6:0e:00:9c:d8:3d:fe:
                    5f:cb:0d:36:4c:c3:4e:7b:cd:fa:96:a3:2c:a8:82:
                    be:de:06:1f:84:84:a4:1a:6d:a3:e8:71:79:21:52:
                    7b:cb:da:66:53:07:7c:e0:78:d1:b2:33:9c:ef:2d:
                    99:78:a2:64:2f:ec:1f:8a:0a:6b:43:0e:c4:40:9f:
                    39:4e:d2:03:d8:d3:ad:20:b3:3b:dc:d5:d8:d8:78:
                    44:c4:72:be:74:29:55:74:ab:5b:40:fb:97:3d:87:
                    05:52:ca:82:1b:2c:de:26:2c:03:82:7e:82:25:a8:
                    f5:ec:9b:48:4c:ef:e5:55:cd:f4:22:de:01:51:84:
                    ee:94:18:35:11:d6:89:27:ec:a5:bb:78:0c:92:ab:
                    37:1f:d6:8c:92:d3:56:e7:02:29:8f:1d:ff:e4:75:
                    a8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E6:3F:68:42:72:DC:71:B8:C6:71:AB:81:EE:BC:11:A8:06:43:1E
            X509v3 Authority Key Identifier:
                keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:69:8f:62:29:b3:d3:db:7e:7e:e6:68:1a:33:df:9f:87:be:
         50:9e:d2:7f:3f:77:48:25:07:21:5e:95:0f:ce:ef:e0:83:c1:
         5f:2e:82:f5:ff:99:41:8b:0f:19:80:90:c6:96:b3:ae:98:7a:
         c2:a3:91:26:99:6a:89:93:68:4c:52:4b:68:8b:ca:81:c4:0a:
         4a:83:b5:43:66:e7:f6:6d:e6:98:ed:cc:7e:c1:ed:d8:98:54:
         36:44:0f:5c:96:6e:0f:55:ce:ca:06:ba:d2:d3:97:57:e9:60:
         b4:ba:a2:a8:fa:b1:75:2b:6f:e2:50:e2:20:36:33:be:59:d8:
         58:50:22:ea:d1:76:70:66:b9:09:46:bb:ab:7d:f6:1e:b4:18:
         9a:ff:d7:07:ec:8f:d9:40:1d:78:2f:8b:e7:20:ed:b4:c3:df:
         8e:a7:12:55:21:e4:2d:b6:f5:2e:6d:d8:88:52:68:93:05:88:
         47:aa:59:8b:82:1b:a7:11:5a:8b:fc:1a:2f:3c:2b:86:58:13:
         af:68:8a:a6:f2:e3:46:69:2c:c7:3c:fa:a6:48:6b:60:2e:53:
         f3:df:68:9e:41:ad:f7:d4:cd:b7:46:14:1b:fe:33:cd:15:79:
         d7:8a:2a:fc:9b:59:59:38:99:f0:f0:70:3c:96:28:8d:44:09:
         23:73:ff:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:28:36 2026 by rpki-client