Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
File:                     2leiQgcEcAjXOmXWgiSke5oD2qo.mft (raw, json)
Hash identifier:          SVIPbixYqilIWfoCIr10ecVIbQ/nFPbCzLIEnYCRwE0=
Subject key identifier:   76:34:F0:8C:16:3E:4E:90:C1:98:B2:D3:6C:8A:44:61:BA:7C:FE:12
Authority key identifier: DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA
Certificate issuer:       /CN=A914573E/serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA
Certificate serial:       06F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
Manifest number:          06E7
Signing time:             Sun 26 Jul 2026 23:01:44 +0000
Manifest this update:     Sun 26 Jul 2026 23:01:43 +0000
Manifest next update:     Sun 02 Aug 2026 23:01:43 +0000
Files and hashes:         1: 2leiQgcEcAjXOmXWgiSke5oD2qo.crl (hash: BTJUQiPK00zIG21SPZpPj2zLTPrpadlhEQtw8DuzXcQ=)
                          2: B67E0BB4A5A511EB94C0DE0FC4F9AE02.roa (hash: +i5uHJyJF9AnTEDT4nux2xnB0e7UDjY1PtVm2KqOSJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl
                          rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1776 (0x6f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914573E, serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA
        Validity
            Not Before: Jul 26 23:01:43 2026 GMT
            Not After : Aug  2 23:01:43 2026 GMT
        Subject: CN=6a6691d7-6e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f1:3c:2a:1b:49:0c:ce:e0:42:4f:3f:6f:3c:
                    1d:d4:06:10:b0:8a:53:38:1e:5b:c8:27:b0:5b:da:
                    fa:9e:04:d2:d8:e4:77:38:27:98:9d:0f:bd:c2:bc:
                    7e:c9:b9:52:99:62:fc:b5:7e:f4:98:1c:8a:0d:f5:
                    fa:a2:7d:e0:f0:ae:58:ae:43:70:83:f9:ed:3e:8a:
                    d1:e4:82:84:24:06:9f:91:b2:b4:3b:39:fd:33:6d:
                    b5:a7:57:8e:1c:d1:10:aa:81:82:22:0f:0a:81:fb:
                    b6:3a:56:a6:62:bc:32:b1:35:82:93:ab:0a:b3:0d:
                    3d:f1:f6:b4:0f:20:fa:52:60:65:14:58:2b:57:2f:
                    1a:b3:18:89:b2:44:36:91:ea:9b:6d:ec:bd:1b:df:
                    69:67:c4:b5:04:bc:2a:fc:a8:81:8f:32:e7:7a:bb:
                    74:a9:39:e0:96:0e:cf:fa:d5:ad:10:3e:de:35:d9:
                    00:95:3b:58:12:67:3e:15:e4:9f:7d:c3:bc:92:29:
                    12:d7:da:88:7b:2e:1e:f5:40:6f:31:97:29:ca:c0:
                    21:56:f6:80:75:d7:37:44:64:5a:43:92:1d:6e:32:
                    e2:bf:95:59:39:7b:bd:2c:1a:be:07:ab:3f:47:b8:
                    8d:a9:b8:d7:65:3a:39:96:30:c0:2b:06:a5:13:2c:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:34:F0:8C:16:3E:4E:90:C1:98:B2:D3:6C:8A:44:61:BA:7C:FE:12
            X509v3 Authority Key Identifier:
                keyid:DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:8f:bb:1c:42:91:fa:e7:00:a3:50:df:65:1d:39:7f:65:c1:
         bc:20:cb:2f:76:4a:13:5f:5f:4d:b8:6c:99:96:4e:84:38:c8:
         00:08:1d:3c:12:6f:a7:0a:74:da:8b:c5:70:bf:10:a4:c6:a3:
         c3:6b:f8:a5:1a:91:ba:84:fe:24:60:8d:f1:d6:72:f3:19:90:
         35:f9:f9:0f:8b:30:3d:05:44:c6:88:4c:1a:4b:59:7e:eb:b1:
         f6:73:b5:e7:1f:ae:fc:a9:e7:01:9e:95:24:50:a6:24:bc:69:
         2d:09:77:b8:a2:c0:6c:0d:93:2f:f4:b6:0a:8c:9d:3b:24:48:
         2f:cc:97:dd:f2:1b:e2:2c:b0:fa:62:46:db:95:80:d4:28:99:
         90:29:1a:6e:d6:bc:66:c2:ff:41:a6:14:fc:72:40:45:40:ad:
         61:3a:59:aa:b6:22:ca:72:29:b5:13:d7:5a:35:54:76:87:32:
         ab:23:83:4d:3d:3a:b6:c5:06:72:b8:89:a5:81:79:b3:08:e2:
         43:ff:be:f8:82:cd:1d:aa:29:b8:bf:16:b4:f5:f3:3b:53:04:
         bd:ca:8d:f1:4e:74:b8:52:9c:75:d6:6a:81:af:91:81:dc:59:
         31:e8:25:66:25:20:5a:0f:01:3f:bc:88:5b:21:cf:1e:7f:32:
         49:0f:f1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:48 2026 by rpki-client