Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
File:                     2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json)
Hash identifier:          Rz+wTde/5r100gM59yJmArVouR0RTasiK9R4wPSflMY=
Subject key identifier:   A1:C6:E4:90:66:2C:B3:57:B2:E5:8E:A7:BE:0E:96:30:38:3F:A8:E5
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Certificate issuer:       /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial:       0A87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
Manifest number:          0A61
Signing time:             Tue 28 Jul 2026 20:01:47 +0000
Manifest this update:     Tue 28 Jul 2026 20:01:46 +0000
Manifest next update:     Tue 04 Aug 2026 20:01:46 +0000
Files and hashes:         1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: 8GRSY9nXDdYMgZuP3JQ6Oyq5mDwLNfw3wCSQ0gpfz2M=)
                          2: 92B2469A90D411F09BC0A564C4F9AE02.roa (hash: BkbQUsKXIX52vzOm2/vANASw4HXX+/0xUFcUl5+7lq8=)
                          3: 41622F82F82E11F0BC7D9928396F56BC.roa (hash: BOsXgTgRuoFK1Abqu9y4jRVX+t+6P8y+y8+yHdVIkmA=)
                          4: 5AEF27A42ECD11F1AE5BE4D1C4833773.roa (hash: pJrOfhLTXJrzDjh1PttmKiJG9g18KY+/mTy+A26VFpE=)
                          5: 013B99DA986011F08FA4AB86C4F9AE02.roa (hash: SGPYvzHeLCeVexbh9lAx6+ESCRM1l3c2pzV/QopMYDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
                          rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2695 (0xa87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
        Validity
            Not Before: Jul 28 20:01:46 2026 GMT
            Not After : Aug  4 20:01:46 2026 GMT
        Subject: CN=6a690aaa-e2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:8e:3b:1f:d1:7b:dd:a5:4a:cf:75:31:ee:
                    3e:ff:14:be:f9:4b:6e:4a:f7:8a:fb:05:fe:8e:bd:
                    0e:be:b2:e8:d8:bf:4d:a8:4d:5b:45:fc:27:20:33:
                    c0:f7:f3:d2:ac:1a:5b:35:97:12:d1:29:a7:cf:c6:
                    c9:b8:8d:f2:a5:ae:05:ba:91:f1:d1:92:74:89:32:
                    a6:ca:da:d9:e6:dd:9f:59:2a:a7:e9:50:57:4e:96:
                    20:cc:0b:b3:d3:43:70:6b:43:7d:e9:8d:7f:f1:22:
                    34:22:e8:2d:1f:91:5d:0a:34:a1:fb:62:ba:d8:37:
                    aa:30:20:72:93:df:6b:b6:db:8e:b7:ea:7e:fd:18:
                    44:f2:18:fa:92:71:8a:ec:66:b2:48:ee:2b:dd:46:
                    88:dd:3c:a2:da:5c:e5:d9:ef:f5:d7:b4:17:41:fb:
                    4e:42:29:83:09:2d:7c:ca:0f:df:ce:85:c5:09:f3:
                    56:fe:b9:08:f1:3b:ed:50:24:96:ca:a5:f3:c5:3f:
                    74:d8:67:d5:bf:f0:40:c2:43:66:04:c3:8c:e3:42:
                    2e:47:a1:b3:26:3d:2d:b1:2e:11:d3:47:60:6a:8a:
                    e4:d7:d9:09:c7:a4:62:9c:4b:ad:61:77:c4:c2:9d:
                    d8:9d:f8:d9:11:cc:49:8d:3a:03:3d:00:21:3f:dc:
                    79:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C6:E4:90:66:2C:B3:57:B2:E5:8E:A7:BE:0E:96:30:38:3F:A8:E5
            X509v3 Authority Key Identifier:
                keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:8b:fa:ce:86:8d:a7:10:18:0a:73:f8:fc:d7:17:6f:7b:60:
         ee:5c:9e:92:35:e9:a5:78:d9:65:12:41:7d:20:8a:c7:88:50:
         74:02:67:29:40:62:58:4c:36:fa:cb:dd:c2:ce:bc:f3:60:a9:
         86:22:14:eb:1f:a8:8a:8b:97:ae:9d:10:27:dd:1b:61:e2:9c:
         31:1d:14:f6:01:67:23:10:5e:97:a2:40:56:00:91:49:da:f0:
         93:e5:a4:18:2c:82:ae:4a:74:1c:06:b6:f9:14:39:33:f3:e8:
         2d:7f:e0:32:ac:91:ff:41:47:f9:1b:14:f8:e0:18:28:52:3e:
         73:02:36:4e:b1:c3:e0:bd:1d:2a:3f:0a:ff:ea:0d:8c:0f:d4:
         42:7d:62:22:a8:b9:08:66:6d:d8:34:4f:a8:86:32:27:8e:fe:
         87:ae:98:a9:da:f8:19:2d:f3:ed:44:a5:b4:5b:16:7b:5e:20:
         5a:9c:53:c8:65:45:1f:c4:b1:af:1c:23:53:d6:67:74:a6:07:
         53:fb:b0:03:26:69:1b:8b:6b:ec:d3:03:3d:12:0e:b9:f0:47:
         bd:0d:aa:86:f2:f5:04:48:b5:eb:d0:d5:df:3d:fb:1f:7d:1e:
         af:a4:57:69:7a:f3:e8:f8:33:fc:df:8f:a2:e8:be:1b:70:9b:
         92:9d:a2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:37 2026 by rpki-client