Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft
File:                     2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json)
Hash identifier:          apAQ6xO9MZ2vbY69W5dSA3dbEny7UsHcyGv7X6T1k6E=
Subject key identifier:   F3:CD:26:5A:66:1C:5D:A1:F1:91:E7:09:F6:8A:9F:0E:9E:9D:BC:3D
Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62
Certificate issuer:       /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62
Certificate serial:       0A1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft
Manifest number:          0A0F
Signing time:             Tue 28 Jul 2026 20:06:45 +0000
Manifest this update:     Tue 28 Jul 2026 20:06:44 +0000
Manifest next update:     Tue 04 Aug 2026 20:06:44 +0000
Files and hashes:         1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: EqC3BSDYsxXnaMcNO9r+BA3984Kplvw3d1FbqX74F7Q=)
                          2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: 1jaabUICJy48DuW6hLSy4F/Zdui5Uq8G26iJUdGW7X0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl
                          rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2587 (0xa1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D687, serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62
        Validity
            Not Before: Jul 28 20:06:44 2026 GMT
            Not After : Aug  4 20:06:44 2026 GMT
        Subject: CN=6a690bd5-9cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0b:f3:c7:65:76:10:5e:4f:49:ce:3a:24:88:
                    40:70:87:40:80:f3:cd:cd:9a:5d:f3:67:fb:e5:ec:
                    48:c6:2b:85:50:63:ba:b8:b6:c1:9e:60:eb:27:f5:
                    3b:ed:e4:77:28:97:b1:b8:76:8f:ba:d1:57:b0:7b:
                    b6:42:4d:e4:9a:0e:10:a9:0f:e6:99:d9:a8:d0:e1:
                    73:83:68:05:a8:0c:5d:f2:fd:f1:c8:a4:f8:87:a4:
                    cd:11:25:10:29:a1:59:7d:f4:3e:15:b8:18:b8:4a:
                    fa:0d:c7:8e:17:2e:9a:00:e7:a4:db:8e:42:eb:c7:
                    9c:7b:f2:2c:15:26:46:e4:b0:76:01:1d:6b:e4:74:
                    ff:b3:c6:ee:91:63:76:0a:92:b4:e8:8c:2a:9d:04:
                    76:ba:df:32:b5:53:24:76:7d:ab:af:6b:97:65:7d:
                    7c:a0:88:83:3e:f1:fd:2b:d4:1d:30:fe:73:45:2d:
                    59:30:44:9c:c6:0c:ce:bc:34:dd:55:db:9f:05:8d:
                    37:cb:29:05:7b:6a:0d:3e:26:c4:1c:fa:aa:1a:f0:
                    21:f5:55:26:4f:3d:55:74:0e:59:42:c6:ba:ba:89:
                    13:ff:ad:a6:fd:5a:c6:31:e8:08:16:f6:a2:93:da:
                    7c:76:6e:40:48:89:cb:f8:ef:c0:b1:b0:14:4c:07:
                    2f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CD:26:5A:66:1C:5D:A1:F1:91:E7:09:F6:8A:9F:0E:9E:9D:BC:3D
            X509v3 Authority Key Identifier:
                keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0f:e3:33:6c:0a:2d:5a:a5:47:99:9a:31:25:c5:fd:9a:a0:
         3c:f2:02:17:49:4b:b1:12:d6:bd:be:b4:ce:14:5e:fe:15:a9:
         a2:89:3a:ae:70:a7:d3:e7:23:58:37:06:c7:f6:a6:2e:69:cf:
         e8:f9:01:19:b6:91:d8:af:7c:ce:78:50:48:1d:67:9d:8f:c3:
         92:83:76:b2:b8:2f:85:0c:29:49:d2:48:f9:53:6c:ac:20:41:
         40:ef:7d:02:64:27:27:3b:8a:d0:43:be:47:6a:37:6c:87:69:
         af:8d:57:0c:91:b7:40:50:7c:de:f8:85:e3:ab:f6:6b:c5:62:
         54:c7:f1:73:fe:60:c5:56:71:92:73:ed:15:27:ab:97:0d:2a:
         a3:d1:1e:79:b4:4a:2c:55:cd:3d:29:1d:72:a1:c4:ec:bc:59:
         05:f7:4d:0b:ca:e8:c5:95:19:29:f9:3d:60:e5:80:ab:a5:35:
         08:c0:1a:94:73:45:3d:49:a6:0e:40:f2:95:7e:6a:b5:9f:cf:
         5f:41:5b:2a:7c:1a:e2:18:58:11:c6:63:fb:8c:99:76:aa:a9:
         48:93:3c:fc:4f:a8:07:38:23:36:b8:3d:3c:0e:fc:62:cb:df:
         6c:7f:a8:69:d1:40:7f:67:58:07:d3:b2:f2:db:ba:d4:1f:31:
         ae:0d:26:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:20:08 2026 by rpki-client