Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
File:                     AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json)
Hash identifier:          MsBo6y9uvbX3zGQ9og81ECy+VckeSo0txCdsDRnkq4k=
Subject key identifier:   3A:FB:BB:6B:9A:71:03:A9:26:E3:AC:96:8E:CD:9D:B7:8E:56:C7:C1
Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9
Certificate issuer:       /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
Certificate serial:       02E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
Manifest number:          02DE
Signing time:             Mon 27 Jul 2026 02:27:52 +0000
Manifest this update:     Mon 27 Jul 2026 02:27:52 +0000
Manifest next update:     Mon 03 Aug 2026 02:27:52 +0000
Files and hashes:         1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: VExKitDJYe2gmglQhaU00O3gcCnBdFOmHOHxJaivZ/U=)
                          2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: C71NkIxWTn02peTNoMZAdVFU3QCiSYWoByajT9agFuU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl
                          rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 745 (0x2e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
        Validity
            Not Before: Jul 27 02:27:52 2026 GMT
            Not After : Aug  3 02:27:52 2026 GMT
        Subject: CN=6a66c228-672d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:ce:d6:ab:f4:c1:74:d0:1d:42:26:cd:88:
                    64:f7:61:6e:e3:83:e3:01:93:de:25:d7:40:9e:24:
                    74:d9:70:2c:43:56:ea:f7:86:3b:7f:db:80:10:68:
                    1f:d3:39:b5:fd:f5:0c:41:66:1c:f3:61:2d:85:6a:
                    a8:2b:ce:87:65:4e:17:f6:93:c8:aa:1e:7b:30:49:
                    60:78:22:4e:94:0e:86:23:7b:cc:a6:f1:2a:bd:19:
                    0c:fd:fe:96:b1:09:eb:c0:32:73:2a:3c:1d:2d:79:
                    c5:46:6b:4e:d6:b3:5a:02:83:98:d2:5b:76:b4:72:
                    e5:fb:d9:f7:d2:9c:d6:a0:32:7b:ef:35:53:52:bf:
                    2b:53:7d:8e:01:4e:2a:2d:3d:b6:da:44:b9:6c:6d:
                    3e:be:ea:a6:77:52:6a:5f:ab:f3:65:de:25:8b:78:
                    8c:59:6a:6d:b3:fe:cd:54:f3:59:96:00:72:7a:e4:
                    57:e8:90:f9:df:e1:73:a3:65:5a:ed:1c:92:76:5b:
                    d1:43:99:fc:ab:b2:08:72:92:b5:68:22:dd:6c:f7:
                    72:50:4e:92:f4:96:05:13:d4:6e:c6:51:ec:f4:c4:
                    42:9d:05:a1:a3:73:26:93:ff:b6:9c:8f:ed:ba:05:
                    b9:61:e7:ba:4f:bf:81:9d:76:5a:68:df:be:c0:98:
                    12:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FB:BB:6B:9A:71:03:A9:26:E3:AC:96:8E:CD:9D:B7:8E:56:C7:C1
            X509v3 Authority Key Identifier:
                keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:bb:e5:4e:b8:ae:e4:e1:7d:1f:55:c8:46:5a:70:ab:cc:f6:
         42:12:03:03:d1:35:f2:04:73:16:ad:2b:1c:ad:02:9a:b7:bf:
         b9:06:54:35:0e:39:dd:9c:45:e7:23:04:5d:05:61:85:2a:f5:
         4b:2a:62:b0:c0:92:bd:1a:bd:13:14:80:12:c5:96:60:9d:00:
         0d:c1:b9:7d:4c:7b:7d:22:e6:01:64:db:fe:f3:09:a3:22:b3:
         3b:53:cf:e7:7d:40:56:4c:8e:38:22:0f:d1:b9:a5:c5:26:fb:
         21:82:5e:9a:56:f6:64:cd:3b:c6:e3:21:56:d4:1d:d4:aa:87:
         9b:49:09:ca:c1:c0:5a:a2:13:1f:fa:9c:7f:c8:a2:9f:4a:65:
         b2:99:c7:c4:bd:88:59:c6:fe:db:5d:24:1a:8e:0d:80:87:4f:
         d5:6c:b9:59:2f:ad:e3:f3:78:bc:9b:23:9d:e6:e4:b2:b5:b9:
         94:5d:6c:3f:d8:40:7e:4e:0d:cf:ad:6a:89:47:b0:98:8a:85:
         e9:68:96:91:f4:ad:a8:d7:6a:e5:e1:29:33:b4:bb:82:87:63:
         0a:c3:a0:2a:c7:3e:07:00:04:af:ca:c3:90:a7:2e:91:e6:dc:
         a8:e9:f7:69:78:8a:cd:2f:d9:4c:d9:14:42:b8:10:2c:35:20:
         03:3e:21:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:03 2026 by rpki-client