Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
File:                     2nLQztquGaHsPtugRn1ZjrmRVlY.mft (raw, json)
Hash identifier:          AhxtJh3dDOdFosEkGs0YBbVvNKf2k+MTdP1xAINoDro=
Subject key identifier:   58:CC:DF:E8:99:4E:B7:A7:10:64:32:1C:A1:C9:29:9D:16:5D:11:D1
Authority key identifier: DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56
Certificate issuer:       /CN=A915E131/serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
Manifest number:          89
Signing time:             Mon 27 Jul 2026 09:44:55 +0000
Manifest this update:     Mon 27 Jul 2026 09:44:55 +0000
Manifest next update:     Mon 03 Aug 2026 09:44:55 +0000
Files and hashes:         1: 2nLQztquGaHsPtugRn1ZjrmRVlY.crl (hash: D7cmbnW5qXndof/2jCYZ55TkpfSE2FV13dQGee5YKUU=)
                          2: 7D4302A0BEC811F0AE45220FC4F9AE02.roa (hash: DdCOIo33v4IDMQPtkKtDFsOxid92dMxNzutXTG46zeE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl
                          rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E131, serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
        Validity
            Not Before: Jul 27 09:44:55 2026 GMT
            Not After : Aug  3 09:44:55 2026 GMT
        Subject: CN=6a672897-1e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4b:47:09:cc:3d:d9:c3:c8:5b:f9:43:1d:7c:
                    56:06:fe:61:c1:19:e9:1f:15:62:56:61:c6:85:c3:
                    28:73:a7:66:a3:ad:60:3f:45:0c:f3:4e:6e:57:c2:
                    ae:2d:02:50:92:2c:d2:30:35:88:85:a7:16:ab:b3:
                    3a:4e:ea:52:22:d3:88:e7:31:51:e6:fa:c8:54:a2:
                    95:d2:43:c5:a4:34:bc:5a:79:b1:cd:af:aa:1a:66:
                    d0:a9:a0:54:e3:af:85:55:75:c1:b7:d8:56:02:3a:
                    88:1e:52:81:f3:9e:ac:20:77:70:db:6a:12:27:be:
                    84:da:e3:6a:ef:c0:e8:a7:34:80:97:0e:f0:6e:5e:
                    74:9d:73:be:c6:fb:ff:2a:ec:42:6f:0a:d8:dc:b8:
                    e8:ed:5d:54:77:36:2f:ca:7a:76:d5:1d:6c:93:8c:
                    eb:a9:c0:b3:7c:2c:98:82:b7:db:33:28:fe:8b:6f:
                    9a:c9:5d:a3:b5:7b:5e:67:46:f8:5c:48:27:33:45:
                    f1:aa:6d:22:37:c9:b8:30:38:7a:48:83:c8:10:ae:
                    82:fe:23:79:9f:5d:b5:a8:63:da:47:9d:d4:a0:0e:
                    d9:32:6e:7d:6f:02:0a:b5:fb:70:a3:9c:75:5d:2e:
                    e9:7d:43:a5:f4:30:37:da:ff:30:a8:ca:39:9f:c7:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CC:DF:E8:99:4E:B7:A7:10:64:32:1C:A1:C9:29:9D:16:5D:11:D1
            X509v3 Authority Key Identifier:
                keyid:DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:3f:76:d4:d7:71:af:d2:5d:0e:f1:22:94:ce:3d:96:53:b6:
         49:4a:0c:2c:f8:72:36:c8:53:6b:6b:fa:6e:50:6f:26:fb:0c:
         8e:33:85:b3:53:a1:da:41:65:82:fd:b7:f3:6a:50:6d:1c:fd:
         a2:34:f7:58:8b:c6:8d:3e:12:a8:2b:56:21:17:fa:09:83:dd:
         4d:34:ae:c2:f5:96:45:7f:1f:22:d7:0e:be:b4:e9:95:c4:98:
         3e:15:d9:1b:b4:18:de:0c:19:ba:e4:ef:19:d1:ae:29:e2:6e:
         4f:b2:d7:eb:7a:53:e6:c7:de:b4:08:08:aa:3b:23:69:45:31:
         be:a2:49:a3:fb:67:f7:4d:b1:b1:87:e8:8c:eb:57:53:a7:ea:
         30:f5:a5:29:e3:06:8b:c9:0f:68:dd:bf:1e:d5:38:91:df:66:
         52:4f:60:15:5b:82:75:5b:ac:de:67:91:bd:0f:e0:5c:4c:4c:
         a1:9a:00:b7:2d:3d:94:77:24:2f:b0:da:0c:96:b9:a5:0f:19:
         b1:1d:eb:23:76:02:74:61:76:3d:a8:90:3f:1d:3b:5e:1f:b0:
         c2:32:cc:5a:97:63:36:ab:28:0c:9b:eb:50:91:d2:74:b3:8a:
         60:c2:17:ed:ef:ff:93:d6:81:18:fe:68:03:f0:66:a9:c8:4c:
         71:e7:13:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:01 2026 by rpki-client