Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
File:                     2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json)
Hash identifier:          TXGCncHE4+7cjF595Gv/AaK+SMMLyF0zzDqEc3PuOUM=
Subject key identifier:   66:18:E3:F0:F3:DC:B3:B4:DD:58:76:4D:97:C6:99:A2:A1:30:91:8E
Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E
Certificate issuer:       /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E
Certificate serial:       E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
Manifest number:          E3
Signing time:             Mon 27 Jul 2026 08:35:42 +0000
Manifest this update:     Mon 27 Jul 2026 08:35:42 +0000
Manifest next update:     Mon 03 Aug 2026 08:35:42 +0000
Files and hashes:         1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: DF2vMYE5WeA72hFEd7Uelty6lZ4qNNnn3PGg0d0Ijz4=)
                          2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: /aTSxcHxRkOfKrRCHUaeDVdu5n6tqyMBf2gXf3ZAFRk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl
                          rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E
        Validity
            Not Before: Jul 27 08:35:42 2026 GMT
            Not After : Aug  3 08:35:42 2026 GMT
        Subject: CN=6a67185e-1bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:85:83:48:57:86:8a:92:99:c3:d9:d6:7d:14:
                    db:e5:7d:53:c8:d1:5a:b9:6b:32:15:64:21:7c:ca:
                    d4:af:9e:35:0a:c5:21:03:ff:5a:79:24:00:b6:38:
                    b3:84:61:00:f1:41:b0:d4:ab:9c:5c:3f:42:53:f1:
                    84:8b:75:a7:0a:08:8d:f2:1e:68:eb:ca:cf:b9:e4:
                    ec:91:ba:0b:a6:aa:d2:7f:74:cf:60:1d:d2:9c:c3:
                    d1:79:dc:20:50:cc:f6:03:35:00:b1:e6:f0:05:b4:
                    92:e0:e7:e1:0c:b9:ff:b0:a9:8e:c8:b0:84:bd:a4:
                    3d:e0:7f:af:41:d4:00:cf:f2:0d:16:de:b3:03:b7:
                    81:ba:86:44:20:32:2b:7e:93:90:ee:71:9d:92:ec:
                    82:52:63:c9:0c:e1:7d:17:f9:9d:75:a4:0b:7f:cd:
                    23:66:42:4f:d9:9c:96:cc:51:e1:60:60:18:b7:31:
                    8a:0b:a1:31:6b:cf:b3:8a:1e:8d:64:ff:0b:2e:c4:
                    01:80:a4:43:7e:fe:a5:77:36:06:4b:36:e3:6d:a3:
                    ae:07:50:58:b9:8a:30:51:90:f3:e7:b3:19:96:9f:
                    3e:7c:6c:eb:44:09:b9:af:f1:28:97:0b:12:1f:c8:
                    f6:ec:4d:cb:a0:29:85:bd:cc:be:2a:d6:95:c8:3c:
                    c7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:18:E3:F0:F3:DC:B3:B4:DD:58:76:4D:97:C6:99:A2:A1:30:91:8E
            X509v3 Authority Key Identifier:
                keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:46:a4:f5:db:e1:25:35:97:d3:54:80:74:49:04:68:b2:14:
         71:8c:30:8d:29:0e:4c:ff:71:ed:35:c1:36:42:35:68:58:67:
         16:74:98:07:de:91:a8:71:a3:11:3d:4b:83:04:d0:ad:79:c3:
         19:57:a6:ac:3f:94:5c:d3:c0:3d:b3:b4:b0:6b:7f:67:ee:0e:
         e9:b4:f9:f8:e5:f4:38:8b:df:88:50:d4:1b:b6:79:b7:c0:ed:
         b8:e1:bc:43:5e:24:33:47:06:42:bb:c0:d9:d0:07:fc:a1:39:
         51:06:d3:08:dd:f7:a6:72:f2:3c:15:3a:e0:d7:d2:2c:4d:33:
         69:48:5a:39:66:57:73:3b:fa:1f:d9:ec:d2:37:f0:0b:ce:94:
         31:52:0e:1f:c7:56:c4:c5:37:4f:36:c1:2d:5a:d2:3f:5c:85:
         14:e2:9a:30:51:a2:d0:11:86:17:01:93:f2:dd:21:be:10:1c:
         c3:76:e4:49:b3:a9:66:19:7c:d3:87:83:56:b2:a5:b2:ad:19:
         eb:4a:d9:75:7c:e4:00:6b:07:2a:c1:09:98:75:2f:43:be:2b:
         0a:cd:59:47:84:e9:54:33:8b:ec:38:56:47:ef:07:05:d2:25:
         5c:2e:db:c4:bf:54:a4:28:f2:0b:d4:d6:ab:d7:ff:57:7d:6b:
         9a:11:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:24:17 2026 by rpki-client