Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft
File:                     2CVmixrBt_OBXwe82lfnSMSWSpo.mft (raw, json)
Hash identifier:          ruLexZ8+eUBegsyKA+rZazudLlirRquSJ8Xiejd9Ht8=
Subject key identifier:   E5:2F:B8:7A:4B:A4:DE:0C:43:D5:FA:AF:02:8E:8B:AF:7C:25:A4:12
Authority key identifier: D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A
Certificate issuer:       /CN=A91756C3/serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft
Manifest number:          0116
Signing time:             Mon 27 Jul 2026 07:56:10 +0000
Manifest this update:     Mon 27 Jul 2026 07:56:09 +0000
Manifest next update:     Mon 03 Aug 2026 07:56:09 +0000
Files and hashes:         1: 2CVmixrBt_OBXwe82lfnSMSWSpo.crl (hash: FeFbGscsEHH4urYm7i9V68Bh2yKELKsDGACNt/4/c10=)
                          2: 00078764E06811EF8716401DC4F9AE02.roa (hash: jAgpnq1+lwtrym5arlQne7Jb3Wult1dG/3ZGpOPdDZo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl
                          rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91756C3, serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A
        Validity
            Not Before: Jul 27 07:56:09 2026 GMT
            Not After : Aug  3 07:56:09 2026 GMT
        Subject: CN=6a670f1a-3b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2a:ab:ae:de:a0:01:34:8d:4c:3a:17:25:38:
                    c4:a4:92:ff:0a:b8:77:72:3b:f7:5e:f9:df:bb:9f:
                    61:a1:5a:3d:e1:1d:2e:36:d1:f5:28:38:11:34:34:
                    e2:1b:43:65:de:94:8f:62:45:55:78:7c:c9:f8:bf:
                    43:2e:37:47:60:e5:87:7f:9c:94:be:07:3c:e3:ce:
                    5c:93:6f:23:b8:66:42:67:be:79:27:e2:9e:46:5c:
                    46:76:19:76:a6:d8:14:4d:0c:8d:9d:7c:a8:24:56:
                    f1:2d:56:e0:77:17:5c:bb:54:07:5b:d3:16:d4:16:
                    dd:42:f8:eb:0f:66:b8:0e:12:9e:a2:44:49:93:7a:
                    d9:f4:a7:15:8b:09:07:eb:9e:12:0d:19:fc:68:b4:
                    9d:84:65:61:b9:6c:99:7b:a3:26:0e:95:b1:5b:17:
                    89:73:09:1e:25:d2:76:9d:c4:b8:69:39:6e:c9:73:
                    b2:b0:42:4f:12:9a:86:12:c3:af:2d:05:31:3a:c2:
                    71:fe:60:dc:2f:56:e1:82:70:90:a4:3f:6a:9a:40:
                    f4:a6:99:73:c3:fe:48:38:ec:3c:2b:6f:23:49:63:
                    05:22:7a:b0:48:3d:a3:1c:3a:0c:bb:12:51:60:13:
                    b8:01:d3:bf:01:9f:6e:8f:4c:46:39:7c:7a:ec:b7:
                    9d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2F:B8:7A:4B:A4:DE:0C:43:D5:FA:AF:02:8E:8B:AF:7C:25:A4:12
            X509v3 Authority Key Identifier:
                keyid:D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:2a:e4:61:67:c2:5c:dd:ae:72:1e:e4:c8:18:f7:cf:6e:e9:
         22:2f:22:86:35:76:a2:1f:ed:c7:e8:b5:04:e8:b7:10:5f:11:
         45:57:ca:69:3e:2a:6b:9c:64:41:da:75:80:2b:10:ad:b5:91:
         f8:44:02:97:7f:d2:e5:7d:37:3c:c6:04:d1:3b:69:f7:97:a5:
         c3:18:57:47:ad:cd:cf:2d:11:b7:92:51:16:52:49:9b:36:df:
         64:d6:e8:85:d4:28:d7:6f:b1:95:da:f4:68:f8:6b:01:37:ac:
         f4:a4:3b:a0:bb:75:0a:0c:d4:6e:9e:3e:74:e2:18:47:71:72:
         a2:b2:a2:6b:3d:aa:0c:e2:9c:86:e7:06:a0:de:92:59:9f:ce:
         a6:e8:cc:58:99:fc:b1:94:de:35:66:f9:5a:57:9d:bb:ce:5b:
         e0:f6:38:a2:84:5f:42:64:2b:80:b0:7f:d2:2f:44:6e:db:ed:
         43:6c:21:b0:13:87:f5:41:74:13:b5:2f:da:fa:c9:7d:ba:9f:
         16:cd:97:bd:59:b8:22:46:1c:7e:b0:21:d3:d5:c6:23:36:40:
         11:e1:ef:67:93:0e:2c:cf:b2:88:7c:79:99:5e:ea:5b:b0:65:
         1b:15:7e:04:9d:b0:6b:06:55:4c:ed:f5:07:2c:88:3c:da:ad:
         2b:0d:d4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:31:58 2026 by rpki-client