Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
File:                     C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json)
Hash identifier:          gDYuR/8Z6irjn0OV1dA38fFsKuTTDS9JHaJGJMh9apg=
Subject key identifier:   2D:80:C6:3F:E9:B9:C3:C8:1D:0D:CE:A1:BB:28:BE:A1:E6:7E:14:41
Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45
Certificate issuer:       /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
Certificate serial:       258A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
Manifest number:          2572
Signing time:             Mon 20 Jul 2026 15:49:26 +0000
Manifest this update:     Mon 20 Jul 2026 15:49:25 +0000
Manifest next update:     Mon 27 Jul 2026 15:49:25 +0000
Files and hashes:         1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: RD2IgBndFyPK2pcAlpsbF2friJQ3f8BsJSCYM1AFJMk=)
                          2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: kNgeshEQoMHZ0sW+i2npHyw2h62/78Or0q6kxwJMwVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl
                          rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9610 (0x258a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
        Validity
            Not Before: Jul 20 15:49:25 2026 GMT
            Not After : Jul 27 15:49:25 2026 GMT
        Subject: CN=6a5e4385-ce55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:e7:73:7f:e8:a4:70:b6:0a:58:ef:85:68:
                    2f:7b:dc:71:66:1a:75:6b:d7:66:8d:d0:56:a9:5d:
                    3a:6b:0a:9d:ec:ce:e6:a2:59:c4:d1:54:31:55:1d:
                    32:92:f9:1f:7b:bf:7f:63:65:92:b1:f1:9a:13:b6:
                    e3:44:da:57:da:f4:6c:67:59:52:16:c3:a0:4c:14:
                    e5:70:f3:03:aa:a3:7e:a7:32:63:de:0a:b1:33:0f:
                    7d:e2:68:b7:02:c7:70:47:92:d0:8f:03:69:86:45:
                    6a:ef:e0:ee:77:9f:06:22:c1:39:37:c7:94:3a:05:
                    3d:3a:fe:de:01:9d:73:81:9c:cb:8b:64:8e:35:5d:
                    e3:45:50:83:89:fa:ba:56:d7:ba:78:bb:84:c8:99:
                    cc:4d:dd:a4:5d:80:fc:8b:d9:48:8f:d0:b6:f9:a5:
                    a1:27:cd:f6:d8:de:04:ff:9e:86:17:5b:7f:22:83:
                    34:fb:4c:f5:c5:92:3d:e9:3a:bd:d6:0f:42:3e:28:
                    69:89:82:07:a7:e4:3b:ce:d2:90:64:6b:18:ef:63:
                    ec:7f:43:b9:ec:d9:80:a2:ae:a8:0b:1d:a4:2b:b2:
                    8d:2d:57:1f:2c:be:d4:69:38:84:ad:4f:57:49:62:
                    a7:10:dd:ec:42:71:ec:c5:32:03:52:59:76:05:3f:
                    f2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:80:C6:3F:E9:B9:C3:C8:1D:0D:CE:A1:BB:28:BE:A1:E6:7E:14:41
            X509v3 Authority Key Identifier:
                keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ce:42:5d:cb:7b:9e:55:95:88:42:8e:d4:19:ca:97:84:e0:
         4e:8a:22:fd:6b:fc:46:c8:05:be:ff:cd:17:e3:f2:6e:49:1c:
         8d:bc:2c:6e:f8:8d:09:62:10:27:02:78:b8:59:bb:47:78:3f:
         32:4a:81:c3:1f:05:f0:a3:7c:45:82:e5:8f:4f:d3:a4:f9:a9:
         36:82:43:c5:b4:d8:1f:d5:0e:22:98:e3:0e:e8:f6:45:a3:e4:
         97:49:e0:7c:94:48:85:a6:e9:63:b9:21:30:0a:68:53:1f:7d:
         4b:9d:cc:34:d8:09:00:d0:31:31:b4:c3:c9:ae:6d:c0:d8:18:
         f1:7b:ee:bf:c0:39:51:03:d8:37:a6:ae:03:f4:84:0d:4a:5e:
         0e:30:4c:4f:99:4e:b1:77:dc:c4:40:16:58:8f:20:5d:ca:7f:
         f5:64:dc:0d:b8:6e:09:8c:04:f4:a1:a6:a0:bf:40:cc:c8:b3:
         f1:94:18:d0:d3:31:4a:16:b5:a0:e4:19:6a:0f:ff:d2:27:cc:
         91:18:9b:ca:0c:23:5a:ba:42:b9:ef:3e:fc:dd:1d:63:0f:cc:
         a7:e3:9f:2b:7d:5e:47:f9:14:e1:ea:49:12:83:ad:6c:2a:79:
         32:73:5c:35:7a:00:85:89:00:f4:75:78:7d:64:bd:74:90:ae:
         5c:75:d4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:26:39 2026 by rpki-client