Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft
File:                     SC2tuZLeLPG_mQg2R44ZlEmVseA.mft (raw, json)
Hash identifier:          FhA0G+5uU8xRb/Ls5aWzyTpIx99i8uGl/GVmUOD3Suw=
Subject key identifier:   11:F2:45:85:E0:E0:6E:DD:7F:4F:B3:FE:64:0A:A1:95:52:FB:5F:C4
Authority key identifier: 48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0
Certificate issuer:       /CN=A912E898/serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0
Certificate serial:       0F94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft
Manifest number:          0F88
Signing time:             Tue 28 Jul 2026 17:37:37 +0000
Manifest this update:     Tue 28 Jul 2026 17:37:37 +0000
Manifest next update:     Tue 04 Aug 2026 17:37:37 +0000
Files and hashes:         1: SC2tuZLeLPG_mQg2R44ZlEmVseA.crl (hash: dFNrYebOzjXTjqzOkIiaPtyEqUnLxDD/+XCS5Yhxan8=)
                          2: 6E37C53C72CA11EC8CE7244BC4F9AE02.roa (hash: ZBqiSC8MaIqiFY8A4SYJFOCWnc1AAvTaOuaU1W8aPeo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl
                          rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3988 (0xf94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E898, serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0
        Validity
            Not Before: Jul 28 17:37:37 2026 GMT
            Not After : Aug  4 17:37:37 2026 GMT
        Subject: CN=6a68e8e1-3536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f9:03:10:b0:81:0c:27:4f:28:b3:e3:01:f2:
                    77:55:c4:dd:a4:5e:b0:12:26:b8:66:8b:28:72:cd:
                    15:87:c0:f3:bd:03:00:49:f2:cd:f4:86:82:c4:8c:
                    38:db:ea:17:ee:93:2f:c8:12:44:de:b3:7a:5b:a0:
                    63:96:a7:ce:97:a8:92:57:92:67:28:b6:e6:cd:7a:
                    a7:72:e6:18:dd:83:ec:6f:d0:19:b9:2e:26:8a:48:
                    82:bb:1e:b6:14:af:7b:18:ba:9e:5a:66:3c:af:15:
                    22:5f:c4:d7:62:36:e9:00:fd:90:70:a5:1f:c3:c2:
                    6d:46:6f:63:80:d1:4a:fc:f8:9d:f7:b0:82:c4:40:
                    d3:61:ac:a3:d1:77:f3:5b:c7:1a:30:9b:39:af:4b:
                    79:3a:c0:15:be:8a:ce:ba:30:d9:eb:8f:9c:d6:d9:
                    c4:48:ce:2f:f5:7b:9d:b8:8d:e2:2a:51:75:c3:2a:
                    25:19:0a:bf:e2:8f:c9:4f:07:b9:02:ec:44:24:b6:
                    b4:9e:13:2f:6a:a0:6a:72:00:40:e3:f0:28:3d:dc:
                    a9:e2:d8:5f:fe:82:93:84:72:d5:b1:df:ed:03:06:
                    bf:0a:5f:1f:05:18:1e:b3:3d:57:b2:09:36:d3:8c:
                    bc:84:4d:04:b2:f1:05:09:7c:79:c1:08:58:0e:39:
                    2f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F2:45:85:E0:E0:6E:DD:7F:4F:B3:FE:64:0A:A1:95:52:FB:5F:C4
            X509v3 Authority Key Identifier:
                keyid:48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:40:26:3f:55:ad:8c:91:28:3f:cd:59:ca:a9:c3:bc:4c:7e:
         86:68:95:13:76:4f:93:83:5b:5c:7b:b6:ca:47:4d:3b:7c:c5:
         89:37:d4:04:e3:61:a1:6b:62:73:c9:84:fe:63:3f:b4:a5:db:
         e1:01:f3:1f:4e:93:cc:44:72:13:74:6b:83:f8:14:da:47:6f:
         74:95:45:b8:d0:84:15:fd:a4:31:30:9a:57:6a:24:07:b0:fa:
         04:d7:37:b6:72:d8:5e:3b:3d:88:60:aa:9c:94:f0:be:20:d2:
         a5:b7:19:88:ec:34:91:e0:08:89:33:01:21:d0:ee:6a:18:2a:
         33:91:53:40:81:67:22:9f:4d:31:43:ea:54:38:cd:7f:06:7c:
         ab:3e:75:92:02:66:a8:ce:a1:a1:f9:19:10:b7:7c:a7:31:f3:
         80:cb:a1:6f:ed:39:8c:59:60:d4:5a:f9:fb:50:5b:e6:44:78:
         84:8d:fc:ec:85:7b:5a:0c:f0:a2:91:5a:41:37:fa:9b:aa:58:
         1b:22:2f:4e:df:db:d4:4b:33:ca:81:83:c7:b0:1f:f2:fc:1b:
         2b:e0:63:d6:b3:63:6b:4b:f8:e7:8e:80:04:b5:b1:66:e1:96:
         2c:59:6d:ec:3a:a4:04:5b:77:b5:08:6d:34:fb:ed:ea:f5:d2:
         49:2b:6a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:19 2026 by rpki-client