Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
File:                     2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft (raw, json)
Hash identifier:          vAk/fkdai0j0CL03lhBlcvsxdhxa3LZwtls2D/rxyUM=
Subject key identifier:   FD:E2:01:8A:4F:84:67:F5:DE:94:81:58:F7:18:B3:BB:36:F7:E9:85
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Certificate issuer:       /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial:       0282
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
Manifest number:          026C
Signing time:             Mon 27 Jul 2026 03:34:29 +0000
Manifest this update:     Mon 27 Jul 2026 03:34:28 +0000
Manifest next update:     Mon 03 Aug 2026 03:34:28 +0000
Files and hashes:         1: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl (hash: hfoPt/C+p7f1oUUQTDOkqy8JEzVNIx0GIn6CGOQDzvw=)
                          2: D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (hash: uq6cUAp8aWstgVcfNAAsf2DmlkVgoELMDbHxDJXHEOY=)
                          3: B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (hash: didvJhI7x6rWco2OGYAbxDlObbw/3Pq6tRwgusbYWYA=)
                          4: D2677928DD9811EDB2BBBA09C4F9AE02.roa (hash: oTWb+bgInuA40lVE9MU0fw0Ps1nvcZEIkiY5rAEAf1M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
                          rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
        Validity
            Not Before: Jul 27 03:34:28 2026 GMT
            Not After : Aug  3 03:34:28 2026 GMT
        Subject: CN=6a66d1c5-e938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6b:e4:0f:9d:c9:c3:7d:52:4e:84:0c:29:51:
                    7f:ce:0d:35:a2:e0:05:14:6f:a4:9c:8e:00:e5:73:
                    12:71:2a:e5:00:14:f6:bf:40:fe:6c:ce:10:b4:d2:
                    71:52:9d:99:a4:33:49:5a:17:c5:73:62:4b:99:d9:
                    55:66:80:2f:a4:a8:ef:70:e0:85:b7:ac:51:ab:18:
                    70:47:2d:37:ab:59:fb:68:e9:ca:fd:57:51:ec:e5:
                    96:0b:8b:c2:8d:1d:1c:fd:4e:95:95:c3:5e:73:b5:
                    3c:7b:56:94:8d:cc:8e:a9:79:42:e8:f7:49:36:bc:
                    67:8e:ae:65:fc:11:59:1b:6e:12:0a:6b:da:0e:d8:
                    dc:0a:12:ec:28:0b:5b:98:38:9d:6c:0f:18:d9:77:
                    ed:c7:58:fd:74:0c:79:96:40:5e:b6:08:eb:8e:be:
                    85:61:b2:04:13:a7:39:55:06:8e:01:3b:a7:60:0e:
                    e4:c9:18:5c:46:b7:aa:79:89:03:16:21:29:42:d1:
                    99:df:be:b9:32:5c:06:ab:03:83:2e:34:d0:88:7b:
                    3d:2d:93:1a:56:92:b2:13:a3:14:10:5f:86:16:e8:
                    64:6e:0f:db:e2:ba:1c:0a:cf:eb:7d:71:f7:83:3d:
                    77:20:c5:1f:5c:4b:f4:89:68:a7:c5:0f:6e:46:90:
                    14:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E2:01:8A:4F:84:67:F5:DE:94:81:58:F7:18:B3:BB:36:F7:E9:85
            X509v3 Authority Key Identifier:
                keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9e:ee:cc:4b:f7:3c:f1:4c:68:4f:1e:52:05:11:af:49:68:
         cf:17:80:2a:b3:1d:86:39:59:82:7a:8d:a6:26:7a:c9:7d:4e:
         98:0e:4e:50:1e:d3:14:4f:a6:cc:65:8b:eb:25:72:e2:63:67:
         cf:5a:83:a3:bb:5d:c4:7b:4b:bd:92:44:ff:d2:5f:55:b1:c7:
         c3:25:df:8d:2c:d4:26:f6:e5:5d:4d:9b:44:e0:c5:c3:8e:be:
         cd:12:00:42:41:84:dc:5b:f5:ac:af:be:50:36:fc:83:e4:49:
         ab:02:ab:c5:9c:a9:f0:e8:b8:16:e0:dc:60:ef:f1:ca:fa:88:
         e6:45:3a:b0:3f:13:1f:46:c5:14:56:8c:f0:a8:4e:35:80:a7:
         08:46:5e:6f:85:7e:d3:46:f4:30:41:e1:d7:b4:b1:95:73:a9:
         bb:dc:02:c8:67:6b:ca:af:2c:b5:40:0f:75:f8:14:94:73:e6:
         4d:34:a9:04:75:d5:6e:66:e2:c2:e5:95:41:16:a0:e6:72:ea:
         0d:ba:0d:96:a1:82:0e:bb:dd:33:75:f5:9c:26:e2:5d:2f:f3:
         3c:81:a5:16:dc:db:20:1f:2f:f9:f7:07:fe:a1:67:f8:0b:93:
         bf:22:b2:df:b3:3a:91:0d:10:7b:40:a5:a5:2d:8f:39:bf:b6:
         82:05:dc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:02:56 2026 by rpki-client