Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
File:                     2MZzCV6Cqbfn381GWA94MajRiso.mft (raw, json)
Hash identifier:          MNca2xfutFm1TSy/gX8kCxOd996FdlSkUrr4eA1wRT4=
Subject key identifier:   E8:70:08:BC:BD:4C:9F:C4:5C:93:B9:3A:1E:74:93:0E:57:AB:6F:E7
Authority key identifier: D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
Certificate issuer:       /CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Certificate serial:       1828
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
Manifest number:          1802
Signing time:             Tue 28 Jul 2026 16:38:45 +0000
Manifest this update:     Tue 28 Jul 2026 16:38:44 +0000
Manifest next update:     Tue 04 Aug 2026 16:38:44 +0000
Files and hashes:         1: 2MZzCV6Cqbfn381GWA94MajRiso.crl (hash: jOOZzUUxM8mj0nP+69oVI3nBj/7aX+nqyUDWf1LJ/Xo=)
                          2: EE9AC4A2CF3E11F0BD67F029C4F9AE02.roa (hash: 1ifr0yn5rYOREwHuBa/9PEbXr1t4wQIXYEhnH3YZcdI=)
                          3: 07FF86DACF3F11F0AF94352AC4F9AE02.roa (hash: axL4DxRLdN4w1oidCM91AwY0+Ml6Zzq4wlYIpZ72Alw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
                          rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6184 (0x1828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911862D, serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
        Validity
            Not Before: Jul 28 16:38:44 2026 GMT
            Not After : Aug  4 16:38:44 2026 GMT
        Subject: CN=6a68db15-4736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f4:42:3d:31:b2:a5:4d:87:9b:e4:a3:74:73:
                    a4:7d:79:c0:a8:7d:a8:e4:4c:20:30:7a:e7:ed:2d:
                    c1:4a:c9:ed:33:47:6a:9a:1e:81:4e:f1:0d:a6:b2:
                    cd:a6:15:bc:ab:f6:9a:f5:fb:9b:f2:0a:4e:f4:de:
                    cf:3f:2d:bc:b4:ba:51:24:3b:f0:a9:26:ce:3b:16:
                    9a:0d:45:f8:da:e2:ee:f9:14:84:39:79:01:42:ab:
                    a1:86:10:59:f2:1c:d4:1d:f7:07:69:f8:0d:b3:46:
                    6d:a6:33:0c:84:69:d7:7e:e4:a3:eb:3d:28:3d:35:
                    1f:7d:94:c9:9c:5a:63:8d:99:f7:82:d2:b4:83:cb:
                    e4:27:6c:5b:a3:49:2d:58:c0:9b:2e:9c:56:d0:91:
                    19:01:1b:2e:04:cb:8c:a5:6f:01:27:e5:96:94:00:
                    45:1e:37:a5:14:69:ac:32:57:21:e6:ae:bd:74:63:
                    81:92:22:76:0c:59:3d:63:70:9a:da:bf:42:88:11:
                    0e:6b:8a:2d:e2:8d:43:d2:2c:bc:9a:20:61:d4:fb:
                    1e:38:29:4d:16:ba:ff:5a:47:2c:e9:93:cf:e3:d4:
                    cf:15:59:82:4f:ca:09:8d:3e:62:6e:a6:6d:7a:bd:
                    2a:1a:a6:a5:5c:93:3a:d8:eb:e9:0c:c6:9c:93:f1:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:70:08:BC:BD:4C:9F:C4:5C:93:B9:3A:1E:74:93:0E:57:AB:6F:E7
            X509v3 Authority Key Identifier:
                keyid:D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:51:78:c2:51:0b:db:64:2f:a6:30:b3:1d:94:49:dd:54:19:
         4b:16:c1:b8:79:36:e4:26:d9:dd:b1:7e:8f:ea:1a:f6:f0:6a:
         54:62:70:72:c5:7d:2f:0f:a5:bd:13:1a:e3:de:8b:22:0a:6f:
         3c:fd:b0:42:2d:5c:46:9c:e2:2c:50:f3:3a:f7:37:77:f5:87:
         99:d6:c2:5b:5b:6d:92:55:0e:48:96:91:9c:45:6c:c7:11:8a:
         61:db:f2:02:b8:be:d1:9e:50:3b:f2:38:e0:64:84:0e:48:a8:
         11:6f:70:e7:93:aa:1b:0e:61:89:25:0b:d6:8f:f3:d3:08:70:
         20:36:88:6a:9d:cf:53:3b:1d:a9:9e:a0:ab:cf:ba:5c:47:22:
         a5:fc:71:d6:03:bd:bc:d1:14:62:71:49:96:8c:8a:ba:a5:7b:
         24:8d:d1:ef:61:0f:88:a8:f5:9d:61:d2:c9:b0:cf:61:21:98:
         b0:38:ce:ef:f6:8c:45:4d:63:34:03:a6:96:e6:7e:f2:71:3a:
         02:6a:6c:4e:f7:22:e4:e4:9b:dd:88:72:2e:d9:4b:31:93:e4:
         e5:e3:47:6f:ab:36:7d:a8:d4:82:20:b4:34:fb:cc:fb:f7:7d:
         85:1f:72:93:ab:aa:be:ee:2a:64:48:44:23:f4:1c:3a:ed:6b:
         a6:ed:76:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:47:52 2026 by rpki-client