Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
File:                     2v3gvG4K06iVvHVtbDGh5httODs.mft (raw, json)
Hash identifier:          goVVx4Xys+a5eJ1ktMIUWr2nnvMjFK2w8GFzpVS5Cxg=
Subject key identifier:   5E:B6:36:15:D4:FC:3F:73:B9:2B:77:46:5E:26:8C:52:A9:F6:CC:41
Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
Certificate issuer:       /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Certificate serial:       0946
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
Manifest number:          092D
Signing time:             Sun 26 Jul 2026 20:48:37 +0000
Manifest this update:     Sun 26 Jul 2026 20:48:37 +0000
Manifest next update:     Sun 02 Aug 2026 20:48:37 +0000
Files and hashes:         1: 2v3gvG4K06iVvHVtbDGh5httODs.crl (hash: poDCdhHXzEQT8pqH15j4PQiXF+43pBEcEK8ODU4F+SM=)
                          2: 312D1714A6F211EFBD311B19C4F9AE02.roa (hash: KoKgWmsxfkCkbgWCHOo/9Lqsa6nPc6n6w00K8LYdEf4=)
                          3: 311DA6AA78F611EFAFD81B5BC4F9AE02.roa (hash: 4vuTCUAhfJT3HGv5tLVBeeb3AAx6C5qUisVfSfItWZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
                          rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2374 (0x946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
        Validity
            Not Before: Jul 26 20:48:37 2026 GMT
            Not After : Aug  2 20:48:37 2026 GMT
        Subject: CN=6a6672a5-55f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:1a:91:e2:20:02:ef:04:6c:9f:f6:4b:63:
                    42:d7:72:18:18:ae:5e:94:92:16:c5:11:a7:c3:d8:
                    b7:11:04:09:03:e8:13:55:45:a2:46:2e:4f:79:a3:
                    93:5d:15:2c:6f:39:f0:14:11:e0:b5:48:15:19:53:
                    cb:b9:00:f6:de:cd:20:1e:31:ab:7f:fe:22:8c:79:
                    32:64:45:39:16:1f:84:15:c3:f5:8d:f8:90:6e:41:
                    cd:af:38:9c:44:21:cd:ae:69:00:6c:9e:c3:fa:28:
                    a7:c2:b9:60:dd:18:b2:c1:91:b7:d2:74:64:c4:c2:
                    bd:00:db:db:ec:03:64:86:8a:86:7a:91:e3:57:da:
                    e4:ad:75:4b:44:e7:5b:bc:64:9c:f4:5b:0b:f5:53:
                    11:d5:39:88:35:26:c4:4c:16:91:c7:f1:0e:57:67:
                    c9:62:39:a7:d4:37:84:4b:3c:ed:d0:7f:86:6f:30:
                    9e:e7:a6:10:70:ce:34:d5:03:41:28:6a:bd:c9:73:
                    29:aa:a6:9a:35:a2:fc:89:00:a7:c2:ed:28:6b:60:
                    b2:32:1b:44:9f:e9:e2:1b:98:94:f9:2c:2f:83:da:
                    ea:2e:77:91:e3:79:d6:2b:b2:75:b4:b5:3b:3b:fa:
                    c2:ae:e4:71:82:7f:cf:26:6a:e5:66:d7:93:9e:6e:
                    0f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B6:36:15:D4:FC:3F:73:B9:2B:77:46:5E:26:8C:52:A9:F6:CC:41
            X509v3 Authority Key Identifier:
                keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:4a:8a:72:bb:4c:a3:6d:4c:ae:8d:e8:1a:df:65:d8:6e:5b:
         0f:6a:c4:39:5e:4c:0a:da:5f:26:7b:23:93:1d:a7:1d:3e:df:
         8e:18:c6:33:a8:57:d4:b5:29:fc:8a:26:b6:dc:e4:fd:58:a5:
         d5:05:b1:f1:bc:74:a7:52:ea:2f:d0:59:23:ee:89:0d:fb:d6:
         aa:b6:b7:fe:5a:07:1b:82:92:9c:f9:15:26:0a:62:79:0b:1e:
         e4:b1:3f:2f:0b:c9:a8:f2:49:dd:0c:45:11:d4:ad:34:ae:28:
         f7:b1:d1:27:ff:4f:52:31:c1:94:f1:b9:7c:99:2e:46:df:91:
         77:20:8f:6c:1a:01:f6:77:f3:20:d3:c0:12:af:e1:5e:e2:2c:
         da:75:c8:61:67:b2:88:35:e4:0d:b9:c5:de:46:44:ad:f1:04:
         8f:6b:be:9c:b9:22:f5:90:b4:fc:1a:6c:eb:21:1e:a6:29:e2:
         85:be:ae:f2:26:06:60:e4:0e:8d:33:46:76:9f:d2:8e:49:95:
         77:7f:22:5d:67:c4:ae:9c:a2:13:f7:6d:be:01:b2:3e:77:86:
         03:e7:3a:bc:25:00:7d:68:13:e1:eb:bc:ba:b9:da:4c:95:2a:
         bd:e7:c8:ad:28:83:18:1d:a8:49:8a:d6:28:37:16:58:31:bc:
         03:8b:cc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:52:31 2026 by rpki-client