Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
File:                     2fwVW2_aEGxpmlabEgOEkJWKoy8.mft (raw, json)
Hash identifier:          HyGRq5H2+AnQdK3rBvPt9cvwHjRCmYt4FqiLuuZubn0=
Subject key identifier:   7A:48:AA:36:B2:11:AC:AB:D1:D4:97:1E:C4:40:65:93:0B:E4:65:C7
Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F
Certificate issuer:       /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F
Certificate serial:       1B3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
Manifest number:          1B1C
Signing time:             Fri 14 Aug 2026 16:16:07 +0000
Manifest this update:     Fri 14 Aug 2026 16:16:06 +0000
Manifest next update:     Fri 21 Aug 2026 16:16:06 +0000
Files and hashes:         1: 2fwVW2_aEGxpmlabEgOEkJWKoy8.crl (hash: YEY98sS3pv8XtCb4xKgrb7SieNou8shnJk2MZXwrWz4=)
                          2: A9286C0E6D4411E7AF539270C4F9AE02.roa (hash: p4+NsJe4a3MSde9nMZiDmlNln2JEYVPGVaWpxC5fnk8=)
                          3: C443D86A55A311E7896BED09C4F9AE02.roa (hash: hkXxeNyW6zU7R/3tjUaDIgOzon4gIXx8opB7l3LzhSA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl
                          rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Aug 2026 16:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6974 (0x1b3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F
        Validity
            Not Before: Aug 14 16:16:06 2026 GMT
            Not After : Aug 21 16:16:06 2026 GMT
        Subject: CN=6a7f3f47-40ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0d:b7:9c:a6:c4:55:c8:35:b7:20:49:c3:9d:
                    88:e8:f3:4f:6d:fa:e6:7d:80:00:a4:05:4b:5c:e4:
                    3b:fa:8a:35:81:d5:dc:f0:10:77:cf:27:d0:a0:ad:
                    84:71:c5:3f:0e:4f:44:1c:1a:5f:1f:99:0d:48:85:
                    3f:13:9c:ab:a4:9b:9c:57:be:a9:8e:81:d4:6e:b3:
                    07:62:c0:7e:1d:6b:e6:71:69:08:85:58:9a:cf:f3:
                    2c:72:4c:e1:fc:a7:37:53:7b:c3:5b:31:ee:9c:6f:
                    dc:f9:a4:5f:aa:0f:30:8d:02:ea:c4:20:66:5e:11:
                    07:77:a7:90:9b:25:c3:00:4d:2c:1a:14:25:2d:21:
                    d2:54:1b:ca:f4:b0:46:0a:48:d1:8a:38:fd:18:04:
                    e3:0c:a0:67:4e:93:18:b4:e6:5d:e5:3a:b1:dc:9e:
                    6d:ae:ce:76:11:bb:2e:ee:cc:23:14:67:71:db:96:
                    76:14:5f:50:b0:9c:97:70:78:10:1e:47:0a:9a:db:
                    f7:54:5c:30:18:3d:8c:4e:c2:5f:81:bd:2a:98:5d:
                    57:18:fc:88:23:a2:c6:2d:2d:70:d9:eb:bf:dd:be:
                    54:f1:88:05:94:55:4d:21:c4:c8:44:aa:a6:1f:9f:
                    75:19:ab:08:79:14:f6:34:b3:1b:13:92:35:34:e9:
                    9b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:48:AA:36:B2:11:AC:AB:D1:D4:97:1E:C4:40:65:93:0B:E4:65:C7
            X509v3 Authority Key Identifier:
                keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:6d:3d:69:c3:8e:ec:08:60:75:a0:e3:1a:fb:d6:e7:e8:ed:
         bf:b3:b4:5f:9c:c3:e5:a2:12:35:b1:c2:f9:37:17:a5:58:7d:
         3a:99:b5:3c:e0:f3:79:20:66:e6:95:47:c6:de:8a:ab:0e:5d:
         18:97:25:7f:fa:72:56:de:95:21:45:7b:48:90:7e:8e:99:3a:
         39:d0:f3:a8:1e:34:5b:6b:68:63:66:c5:ea:05:54:73:5e:98:
         b1:ea:f6:e7:a2:a3:1e:27:8d:b3:da:93:fc:a4:c7:d7:dc:87:
         93:d4:37:df:80:35:87:41:e1:f0:dc:ea:56:88:cf:ca:41:2e:
         78:88:f2:3e:ca:cd:92:76:02:c4:e1:64:19:b8:fd:10:ab:e8:
         37:ef:dc:e0:06:3e:8f:89:55:97:8f:76:22:ba:f3:c8:0c:24:
         67:f5:42:65:c3:f6:5c:84:72:52:28:27:ff:c8:02:98:6f:31:
         1f:33:2a:82:fb:1d:d6:47:29:31:ad:b1:72:1c:e6:8c:94:c8:
         18:ed:fd:3d:68:0d:95:7d:e7:be:4b:ea:fb:a0:34:d8:e6:89:
         7a:3e:b1:f0:95:a5:f1:dc:2e:43:00:c1:ab:a9:c4:ef:c7:fd:
         22:97:71:30:30:ca:76:88:b2:4b:f4:8d:e7:f3:4b:ac:e3:b5:
         7c:e7:f4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:06:42 2026 by rpki-client