Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft
File:                     2zfNKCxsfbw6kLEDt6I53NFY_2A.mft (raw, json)
Hash identifier:          xudjkjtL8OPFdKzWHi2oa2SLMHo4axxe2YL/2em6n38=
Subject key identifier:   C9:55:03:03:42:42:D0:6E:B0:1F:DA:60:CF:38:DA:F8:82:86:FA:68
Authority key identifier: DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60
Certificate issuer:       /CN=A913E652/serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60
Certificate serial:       09B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft
Manifest number:          09A6
Signing time:             Tue 28 Jul 2026 20:19:22 +0000
Manifest this update:     Tue 28 Jul 2026 20:19:22 +0000
Manifest next update:     Tue 04 Aug 2026 20:19:22 +0000
Files and hashes:         1: 2zfNKCxsfbw6kLEDt6I53NFY_2A.crl (hash: Wo7rOm0uwCzFDTTBcjuoN5gUXsfPL6i67yIcIsOMUF8=)
                          2: 6154A3B0B2B611EAA5884016C4F9AE02.roa (hash: 0ne4K9JoSK2WlX9JqXTzRcGcBBHfVYU04ULkoNhTDPk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl
                          rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2480 (0x9b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E652, serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60
        Validity
            Not Before: Jul 28 20:19:22 2026 GMT
            Not After : Aug  4 20:19:22 2026 GMT
        Subject: CN=6a690eca-af4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:dd:20:2c:d7:53:05:23:5c:b5:3d:4b:63:b1:
                    eb:40:3a:bf:1c:4d:cc:82:a8:43:2e:20:4c:45:c8:
                    60:53:f7:9c:e3:ad:32:cd:15:59:a9:d0:62:6e:8c:
                    b4:43:4b:58:13:5c:a3:bc:84:75:56:7c:5c:dc:67:
                    ce:94:af:0d:e9:08:92:53:79:a5:b9:fd:4c:88:61:
                    e6:8f:10:87:50:97:f4:fc:f8:b6:03:46:92:05:b1:
                    03:d0:94:79:b4:3c:f5:32:19:0a:46:20:2f:d9:9f:
                    c4:ed:af:b0:11:cf:d8:50:6f:db:f4:bd:cc:ef:56:
                    62:a6:86:af:96:1f:8f:af:f2:00:45:9b:10:63:72:
                    01:08:a5:55:d1:66:8d:c4:81:a9:2a:81:d6:1b:63:
                    84:18:02:38:19:b7:67:00:32:dd:38:a1:5f:be:43:
                    3f:83:54:aa:da:b8:82:2b:fc:c6:e5:8e:77:e3:5c:
                    97:ca:b4:5b:2d:7e:ce:aa:93:cb:7e:d2:0a:97:1f:
                    2c:fa:9b:e9:f8:b1:6a:3a:76:82:e8:ad:64:da:2b:
                    00:a4:10:45:df:e7:bf:d7:ad:10:7e:9d:9f:d1:a3:
                    a1:fe:10:cb:1c:26:6a:5a:56:c4:1f:51:8c:e2:a6:
                    c8:1b:ab:60:a7:23:9c:b4:d5:c6:a8:5d:05:10:cc:
                    4b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:55:03:03:42:42:D0:6E:B0:1F:DA:60:CF:38:DA:F8:82:86:FA:68
            X509v3 Authority Key Identifier:
                keyid:DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c9:2a:20:86:ad:8d:6a:80:1f:f8:76:97:09:dd:83:20:87:
         2e:6a:0b:49:ba:15:06:a8:40:d2:87:78:03:28:c4:c5:f3:68:
         77:33:3a:f3:31:ad:26:54:09:2e:05:78:5f:99:ae:5f:83:3e:
         6a:61:cd:2b:e1:93:ed:e2:0b:d5:8a:f7:af:33:07:24:38:fb:
         23:bd:51:ef:03:0c:aa:fc:3c:cb:82:c5:3b:1d:5b:dc:a9:59:
         0d:4c:a4:80:37:6f:a8:a5:ad:71:d2:d3:7f:48:ba:ca:fa:c5:
         15:a6:d0:39:4f:27:63:93:c5:19:c5:59:f4:3b:d4:57:90:40:
         7a:cc:a1:28:28:2a:2c:9f:18:bd:1b:ae:4b:7c:b4:4d:c4:a0:
         a0:62:72:e5:a2:e8:5e:ad:bb:42:17:93:7c:b9:45:fc:cd:df:
         00:78:50:51:0f:15:dc:26:e8:32:05:de:2f:fd:a0:9c:14:09:
         9a:d6:28:69:df:4f:ef:49:74:13:73:f1:e5:5d:a4:db:28:96:
         9e:c8:e6:0f:8b:2b:e7:5c:67:4c:93:8d:b8:3c:d3:ef:ad:43:
         21:4b:7a:48:bd:ba:57:b9:2a:ed:b7:18:57:94:2a:d7:c8:ca:
         a3:8d:f7:ba:60:80:d8:50:79:07:a4:01:f5:65:28:96:3b:12:
         a6:13:9e:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0U2NTIxMTAvBgNVBAUTKERCMzdDRDI4MkM2QzdEQkMzQTkwQjEwM0I3QTIzOURD
RDE1OEZGNjAwHhcNMjYwNzI4MjAxOTIyWhcNMjYwODA0MjAxOTIyWjAYMRYwFAYD
VQQDEw02YTY5MGVjYS1hZjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2d0gLNdTBSNctT1LY7HrQDq/HE3MgqhDLiBMRchgU/ec460yzRVZqdBiboy0
Q0tYE1yjvIR1Vnxc3GfOlK8N6QiSU3mluf1MiGHmjxCHUJf0/Pi2A0aSBbED0JR5
tDz1MhkKRiAv2Z/E7a+wEc/YUG/b9L3M71Zipoavlh+Pr/IARZsQY3IBCKVV0WaN
xIGpKoHWG2OEGAI4GbdnADLdOKFfvkM/g1Sq2riCK/zG5Y5341yXyrRbLX7OqpPL
ftIKlx8s+pvp+LFqOnaC6K1k2isApBBF3+e/160Qfp2f0aOh/hDLHCZqWlbEH1GM
4qbIG6tgpyOctNXGqF0FEMxLuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMlVAwNC
QtBusB/aYM842viChvpoMB8GA1UdIwQYMBaAFNs3zSgsbH28OpCxA7eiOdzRWP9g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTY1Mi82MDBBQjQ2NEIy
QjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2ZidzZrTEVEdDZJNTNORllf
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ6Zk5LQ3hzZmJ3NmtMRUR0Nkk1M05GWV8yQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTY1Mi82MDBBQjQ2NEIyQjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2Zi
dzZrTEVEdDZJNTNORllfMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdckqIIatjWqAH/h2lwndgyCHLmoLSboVBqhA0od4AyjExfNodzM68zGtJlQJ
LgV4X5muX4M+amHNK+GT7eIL1Yr3rzMHJDj7I71R7wMMqvw8y4LFOx1b3KlZDUyk
gDdvqKWtcdLTf0i6yvrFFabQOU8nY5PFGcVZ9DvUV5BAesyhKCgqLJ8YvRuuS3y0
TcSgoGJy5aLoXq27QheTfLlF/M3fAHhQUQ8V3CboMgXeL/2gnBQJmtYoad9P70l0
E3Px5V2k2yiWnsjmD4sr51xnTJONuDzT761DIUt6SL26V7kq7bcYV5Qq18jKo433
umCA2FB5B6QB9WUoljsSphOevA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:35:57 2026 by rpki-client