Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
File:                     n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json)
Hash identifier:          i/irQpQrPLtPWwIF9bo0Riu1+Pm4AGKRB5eFYWEH1iU=
Subject key identifier:   0A:86:85:B4:23:32:08:8E:EB:01:E7:4A:F6:24:AB:CE:6E:57:1D:EB
Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
Certificate issuer:       /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Certificate serial:       2C16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
Manifest number:          2BC0
Signing time:             Tue 28 Jul 2026 15:37:45 +0000
Manifest this update:     Tue 28 Jul 2026 15:37:45 +0000
Manifest next update:     Tue 04 Aug 2026 15:37:45 +0000
Files and hashes:         1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: D6J+fL9C+NWhcnh/J5mTQ5EH3DRcbqEbXtwKwzSx+M4=)
                          2: BB799DA8844011F09054B049C4F9AE02.roa (hash: VrRFOlut3uTJjQcCOu3xElVoNRFtaOUQQFsO7k9dNnQ=)
                          3: 2AAD212086FE11F194514C90ABEE528E.roa (hash: STwQSq8DQE2VS7puIC3LaYb71CLa0EpjXHWsARHQLwU=)
                          4: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: 25oLu27CZ0gv2qJnkcUs4150C/CVxdIojsajwReLNXs=)
                          5: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: RaV0EBH4fa+l9u1AYk3sjgFpJfu7SSd3dDIQo14KDEs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
                          rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11286 (0x2c16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
        Validity
            Not Before: Jul 28 15:37:45 2026 GMT
            Not After : Aug  4 15:37:45 2026 GMT
        Subject: CN=6a68ccc9-ed39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:26:67:03:02:db:35:a9:85:e3:23:86:f6:a7:
                    23:0a:3a:a6:a0:17:2c:28:4d:a2:f6:9b:88:8e:a9:
                    b6:f8:33:54:b9:e9:5d:98:b0:7a:c5:bc:ec:6a:1b:
                    ec:c4:78:a3:00:26:2b:fa:6f:1d:75:ba:95:09:cf:
                    a9:07:d1:b7:d3:cd:05:ef:a0:34:11:bf:3c:ae:9b:
                    a9:c0:cc:36:7a:67:43:a6:3f:e2:e0:35:f2:0b:60:
                    77:6f:21:6a:68:60:66:97:c0:c5:a9:bf:89:00:0e:
                    35:cf:27:49:e5:9c:d9:24:5d:7b:74:f8:e4:60:f9:
                    d9:bc:3e:48:8e:73:4f:42:c8:69:fa:c0:f9:cd:95:
                    d4:05:aa:3a:d4:b5:63:f2:07:02:07:86:eb:5c:89:
                    46:1b:af:73:d0:75:b3:25:66:8b:53:40:f6:1a:e2:
                    fc:06:73:93:27:86:9b:85:06:e5:92:ae:be:9f:b3:
                    06:8b:13:0e:ae:ef:07:1d:f8:1b:d4:29:df:65:0b:
                    d9:1e:51:98:97:1e:7b:b0:83:be:df:d4:4a:bf:5f:
                    24:1e:6b:7a:d9:80:7d:a3:60:48:5f:fe:15:31:96:
                    97:78:24:7e:10:71:fd:91:60:c4:41:b2:8c:4e:10:
                    64:f4:b5:53:70:e6:62:ae:9f:73:22:db:a0:80:f9:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:86:85:B4:23:32:08:8E:EB:01:E7:4A:F6:24:AB:CE:6E:57:1D:EB
            X509v3 Authority Key Identifier:
                keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b3:b8:4d:2b:6b:d2:83:b3:8d:95:13:c7:76:57:62:68:dc:
         ac:ee:c2:0b:c3:d3:db:b4:27:5b:71:ec:5d:ff:9b:d8:2e:e3:
         1b:d5:0c:6d:1a:2c:af:b0:26:68:ab:3d:9b:54:15:ca:9c:e5:
         af:8f:78:37:f5:e7:c0:9e:56:39:63:e4:b5:71:3c:d2:0b:47:
         cb:c9:eb:e1:0c:4f:7c:5c:67:10:9a:d0:6c:dd:8c:e0:1e:d4:
         d6:72:a6:7a:b4:e7:e8:2b:b5:ea:e6:95:65:32:ff:08:fa:3b:
         17:99:a1:f8:4c:b6:41:08:a8:bf:9a:98:43:d7:23:90:58:ce:
         2e:93:d2:4b:ff:a2:49:4f:53:44:38:52:55:93:92:18:41:da:
         67:aa:b5:b9:1c:fb:de:67:fd:22:25:a3:21:05:91:f2:1e:06:
         33:3f:ef:1b:0a:27:88:5e:63:9e:4d:99:fd:65:bb:1a:0c:16:
         9d:cd:94:93:bf:51:8d:64:f3:95:06:30:ef:a9:95:45:75:e0:
         52:fc:1c:69:23:fa:61:97:74:ae:63:a9:84:48:9f:dd:14:42:
         83:ce:b8:68:cc:04:7b:ca:c4:9b:82:bd:f3:02:ce:15:30:94:
         11:60:d9:29:3c:c9:ab:4c:a5:8a:3a:16:2f:88:3c:c7:d9:0c:
         d5:90:aa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:06:13 2026 by rpki-client