Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
File:                     Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json)
Hash identifier:          SGbUEAis44SMuG7heGjzlLuOXk5iR3wd9wfl3Y2pI88=
Subject key identifier:   02:A4:C6:47:FD:E9:D2:AB:CE:C5:B5:85:9C:58:67:70:77:3D:D3:0D
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Certificate issuer:       /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial:       1117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
Manifest number:          10C6
Signing time:             Tue 28 Jul 2026 17:29:20 +0000
Manifest this update:     Tue 28 Jul 2026 17:29:20 +0000
Manifest next update:     Tue 04 Aug 2026 17:29:20 +0000
Files and hashes:         1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: Sd9zvBjyZ4cnWXnLxhHYoqALwGIXm64gu9+maDt5wZ0=)
                          2: 8030E8628FD211F0924FE573C4F9AE02.roa (hash: il/kmW0rv4WkXUzYTcnISQd0Jgpc6E05Nk8GNzFNspg=)
                          3: 390C84E8CD3811F09B08A83DC4F9AE02.roa (hash: ONdY2CZEUdO0aLtdVqoMR3OFB/28D3pRcCa7aGvaDQ4=)
                          4: C1313974CD3611F0AF85B537C4F9AE02.roa (hash: tAogpPNnp8t118nb+CaaJXwXD5RiVxazMRc6z7dCh0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
                          rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4375 (0x1117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
        Validity
            Not Before: Jul 28 17:29:20 2026 GMT
            Not After : Aug  4 17:29:20 2026 GMT
        Subject: CN=6a68e6f0-36b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:99:f5:a9:2d:a4:39:65:71:91:59:bb:8e:
                    63:0a:9c:dc:57:56:62:8a:d1:e2:19:0e:b9:20:ea:
                    40:84:02:d3:7e:dc:90:6c:5e:27:f4:ca:4e:bb:03:
                    ba:ce:a0:19:9e:5a:92:d4:c4:08:3b:20:47:d6:dc:
                    13:a3:88:4a:9c:22:fb:37:b4:de:34:e6:28:d9:d1:
                    b7:55:93:45:d5:07:7d:72:77:86:79:2f:bb:ef:5d:
                    c2:78:d0:a3:cc:2f:3d:29:d5:89:f2:ce:04:eb:c1:
                    03:2d:1b:d4:d4:80:d9:c0:dc:b6:44:79:16:93:74:
                    bf:9d:f6:40:2b:51:6e:35:4c:77:f8:79:d8:f7:84:
                    3b:cc:23:92:0b:eb:2d:40:64:2c:a3:c8:9b:dd:3a:
                    02:71:38:ab:f6:08:0f:b7:a7:89:96:7b:48:19:8b:
                    de:ba:16:45:e9:44:cb:f1:f8:b8:d8:87:e3:10:21:
                    e1:41:24:5b:48:f2:18:d4:82:1d:5e:b4:4c:04:c5:
                    24:60:f3:df:c0:1e:93:54:93:69:8b:3d:14:34:fa:
                    b0:d6:ba:f2:ac:4a:47:30:75:2b:20:21:48:da:a2:
                    ed:7e:3f:6e:3d:17:b4:2e:32:47:d7:12:57:8c:1e:
                    90:1e:aa:f9:32:9a:6f:40:f7:e9:48:02:94:dc:d5:
                    14:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A4:C6:47:FD:E9:D2:AB:CE:C5:B5:85:9C:58:67:70:77:3D:D3:0D
            X509v3 Authority Key Identifier:
                keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4b:d5:08:a2:63:b0:52:f1:26:44:fc:38:53:ff:29:d4:77:
         6f:64:9d:d5:d7:ad:2c:78:c8:3b:38:fc:5c:10:ad:2e:9d:69:
         f1:b0:ea:11:16:03:78:37:a1:d1:0c:71:02:a1:ab:9b:9e:80:
         21:ab:43:3d:d2:cc:ef:fd:42:f2:b5:96:a1:a1:0e:6a:dc:3f:
         f2:3a:58:93:22:e4:46:ca:bc:b9:1b:af:f6:c4:a3:15:f8:93:
         02:a1:fc:63:26:a2:12:be:e1:8b:44:ad:c8:ac:6f:01:21:39:
         3c:91:0a:a8:89:6a:18:13:89:93:98:c6:6f:9e:e4:ca:93:e0:
         58:fe:ae:97:a6:49:97:4d:8d:14:8c:10:93:6e:79:d4:df:c0:
         c2:e3:b1:4a:9c:5c:a4:9f:c0:7b:81:36:b1:40:c1:a5:79:9e:
         3d:cd:60:40:af:56:94:97:67:92:5a:d1:0d:f9:18:f6:c9:24:
         71:06:b8:6f:3c:c5:0e:3c:8e:17:71:47:47:31:73:60:59:f8:
         97:46:47:3b:63:65:03:54:3d:ea:9e:5e:92:cc:0e:0b:90:00:
         49:ff:c6:a9:ff:2a:25:25:44:ff:8e:58:89:00:5f:c8:6e:51:
         0b:89:89:ad:3c:90:93:dd:05:a5:c8:e0:cc:99:9e:12:e7:87:
         3a:0a:25:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:52:25 2026 by rpki-client