Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft
File:                     2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft (raw, json)
Hash identifier:          sjaJLLSWt5kGF3KbIu2OJKkx7DJpsEJMZM3dZdcie2g=
Subject key identifier:   6F:36:A1:1A:EE:7A:84:FE:08:11:93:D7:53:22:0A:92:3E:CA:B8:22
Authority key identifier: D8:69:DB:EA:26:30:64:3C:D6:D1:D4:B6:38:D4:6E:53:4D:3F:6E:AE
Certificate issuer:       /CN=A91689B9/serialNumber=D869DBEA2630643CD6D1D4B638D46E534D3F6EAE
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft
Manifest number:          0D
Signing time:             Mon 27 Jul 2026 11:31:11 +0000
Manifest this update:     Mon 27 Jul 2026 11:31:10 +0000
Manifest next update:     Mon 03 Aug 2026 11:31:10 +0000
Files and hashes:         1: 2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl (hash: rdtTpoOPJPA49sXIaGJ5vDN17j//8Kjyts6T/QGCLPI=)
                          2: 9D1E103C79BD11F1A56111AD5AA30FBC.roa (hash: v5LCMSJ7unsotsj1CUAFikFHoJMXhj0hIvgSsrnsLqo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl
                          rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91689B9, serialNumber=D869DBEA2630643CD6D1D4B638D46E534D3F6EAE
        Validity
            Not Before: Jul 27 11:31:10 2026 GMT
            Not After : Aug  3 11:31:10 2026 GMT
        Subject: CN=6a67417f-2e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d1:a2:91:7b:52:af:ab:75:84:a1:9a:9f:01:
                    32:b1:a5:5c:4f:b1:7a:57:91:80:64:23:62:64:1b:
                    14:fd:76:3c:51:78:62:2c:a9:cb:f5:b9:5a:53:6c:
                    72:87:d9:4c:d9:e2:17:e8:f9:3e:70:50:f0:a5:16:
                    13:be:6d:90:07:67:ae:e6:60:23:bd:21:4d:5d:06:
                    54:b2:e0:d3:c6:ac:24:52:c6:8b:03:63:82:b6:bc:
                    b9:a1:0b:fa:5b:89:cc:8a:97:b3:e0:c7:61:99:cc:
                    3e:02:57:57:52:37:12:59:4b:db:e0:c0:82:ef:ff:
                    48:4b:31:43:74:57:23:8b:a3:64:cc:4d:31:36:4b:
                    c5:f7:24:d1:73:a9:04:2c:98:86:1c:ca:01:0f:88:
                    d7:5b:5e:62:82:3f:e0:29:fc:fe:3d:a8:49:dd:0e:
                    15:37:e6:68:74:25:35:46:60:a8:5b:fc:a2:c3:ee:
                    53:f5:e8:75:f7:41:b7:3d:09:f7:69:c9:61:0c:82:
                    e9:30:42:47:40:2f:f4:7a:27:fc:0f:de:de:51:a1:
                    32:2e:4c:e9:79:22:1f:29:d1:cb:fb:4b:79:20:f0:
                    68:9f:45:c7:65:ed:eb:24:3c:20:62:c6:45:5f:40:
                    3a:e4:ea:43:fa:ac:68:62:e0:0a:19:37:75:e1:42:
                    76:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:36:A1:1A:EE:7A:84:FE:08:11:93:D7:53:22:0A:92:3E:CA:B8:22
            X509v3 Authority Key Identifier:
                keyid:D8:69:DB:EA:26:30:64:3C:D6:D1:D4:B6:38:D4:6E:53:4D:3F:6E:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:35:1d:a6:4b:0b:30:3d:8d:93:18:f2:90:b2:45:32:30:5c:
         cd:e3:5e:d0:fa:39:7e:75:11:aa:8f:36:b0:49:78:c1:45:9f:
         3c:7e:87:04:e4:45:a3:75:a3:10:84:dd:20:35:6f:68:98:60:
         f3:9c:0f:6f:6e:20:a1:a1:41:7e:32:6e:ae:be:5d:30:06:45:
         58:11:68:70:e9:02:3c:20:eb:78:78:f9:85:ab:9b:e6:6b:c9:
         d9:d8:88:9a:2e:71:13:3a:8a:3a:22:68:82:48:5c:d8:41:3b:
         24:78:39:7e:2a:d0:83:fb:c9:f0:8b:2c:43:1e:6f:b0:ba:69:
         15:29:26:d9:59:cf:30:cd:7d:14:66:72:6c:61:93:dd:e6:f7:
         9d:d7:16:dc:50:f3:1e:09:f4:23:50:d0:9f:3d:78:b2:88:98:
         4b:04:e8:40:4d:93:ef:7d:52:af:df:6f:0d:de:f7:79:cd:30:
         48:04:3c:65:69:ac:22:30:16:55:54:8e:ea:5a:54:0a:4a:4d:
         df:21:39:41:94:28:91:fe:30:b8:ee:eb:21:af:77:69:70:54:
         4b:58:76:4e:a4:1a:67:75:7c:10:2b:81:a9:bb:77:5c:a4:9e:
         55:83:4a:13:dc:e6:b1:9c:b3:b7:fd:09:ca:4c:6f:5d:10:62:
         6f:d5:a0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:00:52 2026 by rpki-client