Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
File:                     C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json)
Hash identifier:          k4T+EjYNrUF7iYXQPeuH0Av9eSkY1qekORgTsdPdhco=
Subject key identifier:   79:B6:82:F3:3D:65:4B:E5:93:85:3D:D7:7E:3B:91:4E:50:25:EA:82
Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
Certificate issuer:       /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Certificate serial:       0291
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
Manifest number:          027C
Signing time:             Mon 27 Jul 2026 03:39:20 +0000
Manifest this update:     Mon 27 Jul 2026 03:39:20 +0000
Manifest next update:     Mon 03 Aug 2026 03:39:20 +0000
Files and hashes:         1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: 6VBxcp2f11V+7DKSL5L+UFFSKhryeKiVjEqnZBviYGM=)
                          2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: yla7D14JuKJpPGHliDBzy+rAx/LALE2tcLnDIveEQL8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl
                          rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
        Validity
            Not Before: Jul 27 03:39:20 2026 GMT
            Not After : Aug  3 03:39:20 2026 GMT
        Subject: CN=6a66d2e8-70c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:44:8e:27:05:b5:c1:92:b8:56:a2:7c:51:df:
                    c3:0e:33:ba:c9:6d:db:8e:03:04:cd:38:15:30:11:
                    03:42:e6:dd:64:7d:bb:3a:50:b1:07:ec:e6:3b:c2:
                    d1:d6:9e:cf:df:fc:1f:67:4d:4b:89:a0:3d:e1:c4:
                    3a:dc:bf:5a:7d:c6:54:0e:a5:9d:be:60:9d:6a:1a:
                    39:8a:d8:c1:27:74:22:05:63:b2:7f:1a:1b:c4:56:
                    9c:df:01:9d:48:09:b3:34:4e:1f:99:44:6c:21:35:
                    35:62:44:99:70:37:c3:5a:84:ff:ed:dc:e1:9c:2d:
                    d7:14:da:c5:43:d4:40:ec:a7:f3:20:11:d2:ff:4c:
                    06:0e:93:37:08:49:86:e9:22:f7:65:5f:0b:29:ad:
                    3f:a7:d0:e8:27:c1:6e:22:22:79:d4:30:67:2d:73:
                    61:56:08:6b:b3:53:9c:b4:f7:b4:9d:c1:00:a4:a4:
                    dc:e0:5e:9f:82:b6:9a:f3:e2:e8:5a:34:e4:06:dd:
                    53:39:b5:0c:41:05:13:a4:4c:42:32:da:c6:ee:a7:
                    e3:7d:22:b0:54:77:56:f4:a1:cf:6a:cb:b6:ff:6f:
                    e1:2c:1f:32:85:3a:97:44:0d:91:5e:42:8b:ab:c1:
                    57:75:44:14:a8:fc:8d:33:ed:c4:d1:d8:e6:7d:0c:
                    c7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B6:82:F3:3D:65:4B:E5:93:85:3D:D7:7E:3B:91:4E:50:25:EA:82
            X509v3 Authority Key Identifier:
                keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:87:0b:e6:38:21:1f:31:7e:46:cb:e9:cb:4b:c7:09:9c:1f:
         f9:de:a1:59:fe:a4:5f:77:f8:c3:b6:ad:71:d3:dd:39:68:bc:
         c9:a9:88:b6:b4:28:42:fd:e1:32:99:06:cf:64:a2:12:4d:70:
         2f:c0:57:02:de:b0:33:9b:82:a2:a0:58:7c:56:35:40:19:94:
         7a:82:e9:b5:24:d6:42:2d:8c:7a:15:de:1e:8f:f3:a9:89:cd:
         61:bf:b5:72:7d:e5:f9:0d:fb:ae:2a:0c:12:5a:48:53:0c:00:
         15:e6:7a:0c:45:25:4b:d6:94:75:2a:32:25:85:ed:03:80:f1:
         84:07:88:4d:ed:cd:98:f7:61:05:c8:e3:78:d1:08:15:d0:98:
         f0:2f:58:a8:fb:36:4c:ad:a1:02:dc:0f:54:43:a1:2c:f0:62:
         50:eb:2b:49:27:fc:f6:4d:27:c8:ad:2c:3d:27:1a:3a:4e:61:
         6f:a8:a3:f1:f1:eb:40:8f:ce:23:66:36:a4:b6:9a:d0:39:e5:
         1a:a1:76:87:9c:8a:5c:c8:41:29:55:2c:a5:1e:ff:83:ed:41:
         a4:64:9b:14:90:09:5b:08:3e:27:f4:9f:43:0a:80:e9:e5:bb:
         ae:cf:fe:6d:2f:8c:6b:88:d6:05:dc:a5:43:d0:0d:41:6f:50:
         51:7f:c0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:26 2026 by rpki-client