Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A45D/EC9DDABA7AF411F190D481137CA30FBC/2H7vwei9pDKhIQ84dxk7cV6zmbA.mft
File:                     2H7vwei9pDKhIQ84dxk7cV6zmbA.mft (raw, json)
Hash identifier:          PimxT/GsnSlXfGbhb1E1YmbiV/B2jwY2c8SEKALtnes=
Subject key identifier:   B4:04:5F:83:CC:D9:A5:12:87:84:E9:40:68:0B:C3:74:0F:0D:0B:5C
Authority key identifier: D8:7E:EF:C1:E8:BD:A4:32:A1:21:0F:38:77:19:3B:71:5E:B3:99:B0
Certificate issuer:       /CN=A912A45D/serialNumber=D87EEFC1E8BDA432A1210F3877193B715EB399B0
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H7vwei9pDKhIQ84dxk7cV6zmbA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A45D/EC9DDABA7AF411F190D481137CA30FBC/2H7vwei9pDKhIQ84dxk7cV6zmbA.mft
Manifest number:          0E
Signing time:             Mon 27 Jul 2026 11:33:18 +0000
Manifest this update:     Mon 27 Jul 2026 11:33:17 +0000
Manifest next update:     Mon 03 Aug 2026 11:33:17 +0000
Files and hashes:         1: 2H7vwei9pDKhIQ84dxk7cV6zmbA.crl (hash: Nd1nWZ3TIruX7JLu9SXWYdQX5nljF4k2/1GcKGuBsLE=)
                          2: 730F41927B9F11F186A8876472A30FBC.roa (hash: iwhQrfMzx7dXc+jURYQOTrqOxFZxvuMvS1ulTb489oo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A45D/EC9DDABA7AF411F190D481137CA30FBC/2H7vwei9pDKhIQ84dxk7cV6zmbA.crl
                          rsync://rpki.apnic.net/member_repository/A912A45D/EC9DDABA7AF411F190D481137CA30FBC/2H7vwei9pDKhIQ84dxk7cV6zmbA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H7vwei9pDKhIQ84dxk7cV6zmbA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A45D, serialNumber=D87EEFC1E8BDA432A1210F3877193B715EB399B0
        Validity
            Not Before: Jul 27 11:33:17 2026 GMT
            Not After : Aug  3 11:33:17 2026 GMT
        Subject: CN=6a6741fe-6e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:23:ec:e6:41:af:a4:78:59:c1:e2:17:e1:
                    c2:55:83:87:da:ab:59:b6:f9:b4:af:9a:48:86:dc:
                    24:29:6a:f9:39:c1:c7:dc:64:d0:f2:8e:59:84:89:
                    48:f9:56:55:75:a3:66:72:ed:f0:4d:23:03:67:77:
                    69:91:27:d5:b1:13:cd:91:4c:3a:b7:f1:e3:ce:ca:
                    2e:fc:a9:14:7f:6b:9a:1e:b4:30:b4:5b:a3:d8:96:
                    a3:3f:3b:80:4f:09:cf:4f:70:7e:a4:10:17:48:69:
                    3e:70:35:a9:7c:09:fe:c1:d3:22:b5:10:ee:3a:d6:
                    ce:87:6e:26:0b:9f:1a:f3:cc:1c:3b:85:14:9e:37:
                    4d:2d:81:22:65:4a:7c:a6:49:a4:1a:38:14:6c:a4:
                    2a:b6:95:93:cd:a8:8b:92:d5:bf:30:37:f4:36:30:
                    fe:af:02:8f:d9:a6:18:fc:0e:2f:6c:d8:1e:3d:f6:
                    30:35:f8:62:33:7f:7d:78:ca:1b:c1:c3:6e:57:da:
                    df:6a:06:54:51:4c:d0:ea:fc:fa:b3:b5:c3:c1:fd:
                    9e:92:7e:15:58:b1:1a:6d:50:04:d7:f3:f3:8c:b4:
                    fb:c9:c7:d5:c0:32:b8:83:5a:c6:26:39:cb:83:f1:
                    06:51:7d:0b:b1:a3:e1:69:5d:20:88:0a:e9:91:37:
                    a7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:04:5F:83:CC:D9:A5:12:87:84:E9:40:68:0B:C3:74:0F:0D:0B:5C
            X509v3 Authority Key Identifier:
                keyid:D8:7E:EF:C1:E8:BD:A4:32:A1:21:0F:38:77:19:3B:71:5E:B3:99:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A45D/EC9DDABA7AF411F190D481137CA30FBC/2H7vwei9pDKhIQ84dxk7cV6zmbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H7vwei9pDKhIQ84dxk7cV6zmbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A45D/EC9DDABA7AF411F190D481137CA30FBC/2H7vwei9pDKhIQ84dxk7cV6zmbA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6d:01:21:e5:ff:4a:15:0a:fb:18:53:53:9c:26:c1:97:29:
         c6:37:c9:51:17:36:5b:49:46:f5:97:f2:89:cd:ab:13:23:0c:
         d9:4e:66:ff:17:5d:9f:5e:60:d9:1c:a3:8c:f1:ce:b9:cd:2b:
         71:0e:7a:a4:84:8b:26:5d:b9:d6:29:1e:a5:da:ff:3a:0e:a8:
         cc:6a:a4:15:a0:ab:43:b0:28:d7:4e:dc:6f:4c:61:10:c7:8c:
         a6:b2:56:6d:63:6a:e3:9b:5e:28:e6:03:34:b9:d8:84:1a:91:
         a1:88:3e:29:d7:f9:94:72:46:0a:e4:c5:8e:c9:96:92:77:c0:
         01:46:8c:08:96:8d:e2:04:0d:9b:fa:60:32:18:84:3d:72:e0:
         f4:36:c4:0e:a4:9d:c6:49:7e:88:f0:0c:5d:df:43:3c:b3:f4:
         cb:99:d9:51:cf:a1:7b:cb:c5:75:c3:10:ce:0a:7c:ef:bc:41:
         21:45:b9:45:ee:85:b0:f0:6b:4b:29:05:6c:2e:d5:89:5d:1b:
         20:49:70:df:20:97:f9:86:9d:36:56:8c:91:50:4f:94:eb:a7:
         b6:c0:b8:68:2d:b9:80:e9:e8:6b:40:84:6f:fa:a4:04:89:2a:
         e2:a1:b9:a8:88:6a:5b:57:5d:df:00:55:ce:a4:06:e7:fe:9e:
         45:d2:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:44 2026 by rpki-client