Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
File:                     2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json)
Hash identifier:          ZIHsNEgtt7vB9GfNnkfsqmxbRiHhCBNynHFK92j2hcY=
Subject key identifier:   B2:5B:4E:52:95:34:90:A0:24:5A:F1:0A:8E:2E:C5:36:15:EF:84:99
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       021B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
Manifest number:          0208
Signing time:             Mon 27 Jul 2026 04:43:20 +0000
Manifest this update:     Mon 27 Jul 2026 04:43:20 +0000
Manifest next update:     Mon 03 Aug 2026 04:43:20 +0000
Files and hashes:         1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: 3NAeas5skkvltDzkvPjs+4yNZQsY+Plumn80d7drL/g=)
                          2: E5502F78772411EE8659D21FC4F9AE02.roa (hash: 55QHoYjeQW2YY84IgZmrw7Bp3j4BU5OniNwUyuBN8Es=)
                          3: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: bdS7OvbOuaz6iTgPtqEV9vUYbciEKGiVTIJ8MXVQT+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:43:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
        Validity
            Not Before: Jul 27 04:43:20 2026 GMT
            Not After : Aug  3 04:43:20 2026 GMT
        Subject: CN=6a66e1e8-f084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7c:c5:f6:78:c7:cc:50:e9:ed:61:37:24:91:
                    dd:b5:cc:26:c4:c2:22:7e:a9:72:03:6d:00:29:d3:
                    a2:e0:7a:fe:fd:bf:71:2a:25:18:5a:03:23:35:a7:
                    f7:54:e5:81:b2:82:41:4e:8e:ee:d9:1d:ba:53:1d:
                    67:92:54:a8:e5:da:3d:46:b1:db:44:f1:2b:c0:b9:
                    7f:15:f9:6b:4f:a7:2d:78:23:02:8a:c7:69:3f:a6:
                    95:9c:14:bf:25:f1:91:ac:03:a7:97:d1:6c:68:81:
                    c0:c8:63:8f:31:d9:67:6a:c6:92:b9:6f:b5:1d:4e:
                    16:83:d5:e0:2f:9a:be:49:6e:55:d5:6b:4b:1d:ea:
                    7a:aa:9b:78:13:cb:69:fe:40:fe:4f:9f:b9:ab:80:
                    8f:6b:d4:05:94:01:d8:bb:32:d4:4a:0c:27:b1:3a:
                    27:76:42:79:fd:fe:78:ed:b2:04:bd:10:73:0b:9c:
                    1d:65:ea:51:c7:0a:db:96:39:2e:c4:44:32:75:ea:
                    0c:b7:25:1d:91:96:59:81:ed:e7:f8:a9:00:ec:37:
                    13:05:ab:7b:54:0f:c6:b8:6d:fd:ad:31:3d:80:68:
                    6e:bb:41:01:62:c0:47:3d:20:91:99:1f:02:ea:4e:
                    c5:aa:47:2b:fc:64:15:75:50:23:83:e3:65:fa:7d:
                    31:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5B:4E:52:95:34:90:A0:24:5A:F1:0A:8E:2E:C5:36:15:EF:84:99
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c6:f6:69:6f:41:47:d5:c1:9c:1b:14:cf:47:d4:53:2e:22:
         f9:96:6b:0c:f9:64:df:c3:8e:53:56:65:b9:56:f6:08:48:44:
         05:ea:f5:d1:d9:0d:6b:2c:68:fd:3f:d6:79:a0:f6:5f:05:3d:
         e7:39:64:12:61:ac:0d:fe:65:4d:7f:c7:0e:c1:e6:ad:6b:7d:
         9d:cb:e9:d6:dd:f9:3d:79:96:82:e7:b6:e6:81:9e:8f:6b:b6:
         2e:61:b4:40:38:b4:d3:86:9b:b9:77:9a:01:f7:71:c2:1b:09:
         e7:d1:16:b9:a6:13:a2:c7:d4:1c:cc:d0:fd:e6:2a:c0:48:7b:
         98:b6:ee:bc:fe:dc:6d:21:23:55:37:9a:ec:bb:96:b3:d2:0e:
         77:05:df:98:db:fa:54:cd:6e:11:39:77:35:67:22:5d:76:41:
         f2:04:19:6c:10:b0:96:73:5f:15:67:f8:de:2a:0d:2b:e8:dc:
         6e:97:44:4a:8e:0c:1a:d4:a2:96:05:ac:1e:1c:83:02:9f:19:
         65:d1:28:45:b1:55:a4:2d:32:bf:30:93:07:49:41:f6:6c:9a:
         3d:84:56:c4:4c:72:af:c8:83:9a:fd:09:8b:44:7e:d8:9b:2a:
         28:ab:bf:13:18:89:cd:07:88:12:27:28:15:3b:55:77:87:25:
         d7:41:25:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:27 2026 by rpki-client