Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
File:                     A2aKIfDwHwaydP2IzJ4KboPVX4U.mft (raw, json)
Hash identifier:          xdvX5koI/iJpeRqMJxfrHhda266sdDdbmemdjWWAoiI=
Subject key identifier:   9D:66:39:CA:83:0F:FC:D9:E9:91:E9:7F:D3:F1:70:FA:10:B8:99:69
Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
Certificate issuer:       /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Certificate serial:       0836
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
Manifest number:          0828
Signing time:             Tue 28 Jul 2026 21:33:24 +0000
Manifest this update:     Tue 28 Jul 2026 21:33:24 +0000
Manifest next update:     Tue 04 Aug 2026 21:33:24 +0000
Files and hashes:         1: A2aKIfDwHwaydP2IzJ4KboPVX4U.crl (hash: HrlcgDO7NXnB/SY8hbmGnXEDRb+hi/cwLZJlj0imbt4=)
                          2: 2C0DD994525511F0A544424DC4F9AE02.roa (hash: r04Ye74EEDh36FeBnIWb59XMMU9Mx+tkFNipeNmkuAg=)
                          3: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (hash: +AUVvwTT7ST+BeSrArm8ZmuI1OzsiyoIqJ3c0xzwnVs=)
                          4: CE899F0A66C311F08BE17B42C4F9AE02.roa (hash: /8KsOuQDF6YCKq+9HViCWxyMxMdtmN7AwyTJXtJg/FU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
                          rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102 (0x836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
        Validity
            Not Before: Jul 28 21:33:24 2026 GMT
            Not After : Aug  4 21:33:24 2026 GMT
        Subject: CN=6a692024-d399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:bd:34:04:87:01:85:ce:d0:3f:eb:bd:3a:
                    95:27:d9:fa:7f:06:4c:01:95:89:68:70:6e:32:86:
                    20:f4:37:d8:ed:87:d7:3c:09:a9:c1:c5:ee:60:07:
                    dd:39:e6:5f:ea:b3:0a:d3:c2:0f:77:24:b8:6c:ef:
                    2f:0c:b1:2a:4f:32:bd:32:40:f9:00:9d:b6:f8:1d:
                    ab:0e:4d:58:43:f6:75:e2:b0:9c:de:86:b9:b6:42:
                    b7:c9:c9:42:df:3e:e1:ba:b9:ee:40:2d:a0:d3:80:
                    89:81:a8:f2:37:56:01:9f:e2:01:4f:29:67:f9:0d:
                    ec:26:24:4b:d2:cf:8c:75:b6:29:c6:55:0f:ba:48:
                    09:49:4a:45:87:ac:3e:eb:dc:67:79:fe:2d:86:81:
                    05:47:2e:6d:f9:b1:8c:59:63:ad:bf:83:49:08:97:
                    be:5a:26:bf:21:ea:10:57:d0:ce:dc:98:7c:23:ce:
                    3e:f9:6f:bf:c6:b3:c6:88:4e:a6:fb:b9:56:57:d4:
                    a0:a7:a9:8f:e8:59:f4:a5:8b:4e:0a:b1:78:3f:ef:
                    81:87:0b:f7:ce:10:06:21:de:59:9d:ce:e2:f1:0c:
                    02:3f:65:70:b8:dd:33:ca:6d:49:43:f7:67:7c:e9:
                    6f:f7:2f:f1:f0:f5:7d:3e:b7:37:5c:7d:ea:c0:5b:
                    e3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:66:39:CA:83:0F:FC:D9:E9:91:E9:7F:D3:F1:70:FA:10:B8:99:69
            X509v3 Authority Key Identifier:
                keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c0:ae:80:e2:63:bc:30:64:50:15:c6:f8:56:fa:00:fc:ab:
         1e:29:10:34:1f:c6:5c:0e:b9:b0:94:11:b5:23:91:ab:08:9a:
         7c:0e:9f:92:2a:3b:19:4d:1f:e6:32:ed:79:4a:5b:b6:be:c6:
         33:e3:80:7a:1e:c4:03:a3:6f:e7:a0:78:c4:72:37:00:27:e0:
         93:95:99:9d:75:5a:0e:a8:43:f1:41:aa:a6:62:2a:99:50:0f:
         72:5a:5a:ba:15:a9:97:30:24:f6:28:26:2e:8f:c5:8b:e7:d3:
         bb:67:e9:96:47:ec:08:da:e3:4a:ac:59:21:b7:dc:52:74:64:
         c8:e7:74:3f:9e:c6:30:ba:7d:7a:16:12:83:57:38:93:4f:f5:
         fd:7e:83:39:36:74:d3:f4:42:86:a2:4c:1a:75:6b:49:3b:3c:
         26:17:68:1c:b1:e1:fb:84:c0:e7:5e:19:79:68:2c:ef:20:ac:
         ef:d3:3d:00:99:21:4d:9b:a6:9f:86:4e:fe:2d:81:d7:bc:c2:
         37:3f:f7:17:68:b1:da:71:0b:4b:ef:22:06:8e:5f:53:92:37:
         28:6b:57:c4:c2:9c:78:ba:ac:fb:88:cd:cc:31:38:d7:a6:bd:
         72:2e:f1:f4:40:7e:29:7a:14:cb:0a:bd:4d:23:59:f0:05:17:
         4d:31:60:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:23 2026 by rpki-client