Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
File:                     C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json)
Hash identifier:          ko5YuXEBqE54euP6OyGUH0c4ynb5++KQ8pk5H/ehS9g=
Subject key identifier:   BA:07:37:C6:3C:FA:EA:FD:58:28:4C:0C:34:4A:A8:01:75:D2:25:8C
Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
Certificate issuer:       /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Certificate serial:       02AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
Manifest number:          0298
Signing time:             Sat 19 Sep 2026 02:02:10 +0000
Manifest this update:     Sat 19 Sep 2026 02:02:09 +0000
Manifest next update:     Sat 26 Sep 2026 02:02:09 +0000
Files and hashes:         1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: A1widXLURcWyTPxoqrUv7RPAJsEKSuaUxXJFslP3eew=)
                          2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: yla7D14JuKJpPGHliDBzy+rAx/LALE2tcLnDIveEQL8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl
                          rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 685 (0x2ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
        Validity
            Not Before: Sep 19 02:02:09 2026 GMT
            Not After : Sep 26 02:02:09 2026 GMT
        Subject: CN=6aaded21-3670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:eb:22:f7:04:2e:08:09:46:4d:f8:ac:64:49:
                    2d:bf:f4:5d:e6:b2:85:5f:17:21:59:1e:98:17:4b:
                    db:a2:72:2b:1c:e0:81:05:d1:73:20:2f:85:cf:e3:
                    44:76:e0:69:27:8b:48:a8:51:29:cc:77:b4:a2:7f:
                    dc:2a:39:d3:df:ca:1a:41:f9:fa:b1:b2:18:a2:5a:
                    de:84:b0:81:ff:8d:7c:ac:a3:82:a8:8f:66:b9:e8:
                    4a:65:03:c5:d1:96:94:c2:35:0c:2e:e0:c0:ea:f5:
                    58:dc:24:b1:55:f0:58:d6:26:7f:ac:35:25:68:89:
                    ee:6e:51:7a:f2:17:54:06:ac:bd:ad:f2:6b:25:11:
                    d1:cb:3a:11:a2:7a:1c:50:13:09:d7:2f:37:15:33:
                    c4:ed:e8:66:d9:ce:80:26:2c:4b:09:9d:84:ef:c8:
                    ed:ae:ab:ac:94:e7:63:be:93:f8:73:60:40:95:32:
                    a1:52:20:b1:4f:d6:68:4e:6a:0b:04:42:ef:16:17:
                    29:47:be:16:e9:65:af:5b:fe:4e:04:46:e8:30:62:
                    5e:c2:21:49:d2:c0:30:bc:78:ac:4c:ff:de:3e:54:
                    90:07:2d:51:68:42:4f:a5:f6:4a:27:7a:47:40:67:
                    8b:dd:63:88:d3:ed:d4:25:95:2e:fd:cf:23:49:6a:
                    3d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:07:37:C6:3C:FA:EA:FD:58:28:4C:0C:34:4A:A8:01:75:D2:25:8C
            X509v3 Authority Key Identifier:
                keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:4e:a2:51:8a:01:79:c3:cf:12:28:f8:90:8c:7c:c9:d3:e0:
         a8:92:49:e3:a3:63:2f:4d:12:23:66:92:bd:21:2e:3d:3b:8a:
         11:75:a3:81:c1:0c:1c:11:c1:05:3e:61:6f:06:59:67:1b:98:
         3c:db:c6:d4:55:d4:83:4e:da:9b:30:87:b8:98:14:c0:71:f7:
         81:68:c4:76:7d:12:5a:2f:21:99:57:8f:42:71:f4:1f:ed:99:
         23:d5:30:2f:97:ca:74:4f:a6:00:fb:60:57:44:a6:d7:9e:85:
         e5:87:cc:11:2f:0a:d7:56:ff:9a:7e:0d:7a:e4:b4:18:77:88:
         16:6e:d6:a5:04:33:74:f1:95:75:61:f8:58:de:af:6c:cd:06:
         61:26:b1:d1:20:86:00:e6:4e:20:f7:4a:31:67:39:77:eb:c9:
         0a:8f:55:33:2b:51:b8:c8:65:36:71:18:4b:c9:53:d1:4e:71:
         d2:0d:30:f9:97:68:2e:fd:6a:fd:80:5e:65:5f:40:15:84:a4:
         21:f2:be:b0:47:a5:b6:88:e5:09:c8:7e:47:da:8e:04:fb:52:
         24:1c:a0:ad:8b:50:e6:97:00:9a:57:6c:d6:ad:5f:f3:c2:30:
         72:af:d9:15:2b:97:e6:7a:b5:29:1c:a0:df:55:b8:06:ad:b9:
         0a:de:c4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:24:27 2026 by rpki-client