Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
File:                     2CWolzNYl8B-dpODimvyAnZYDwM.mft (raw, json)
Hash identifier:          sqE5o7SrbQEgaMNY1L3mVayEcXCF1+km/84DSx9Nd6g=
Subject key identifier:   B3:C9:9D:7B:B6:26:84:2E:DD:88:4F:E9:FD:90:52:3A:F1:D8:49:14
Authority key identifier: D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03
Certificate issuer:       /CN=A9199DE2/serialNumber=D825A897335897C07E7693838A6BF20276580F03
Certificate serial:       06FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
Manifest number:          06F2
Signing time:             Sun 20 Sep 2026 22:06:01 +0000
Manifest this update:     Sun 20 Sep 2026 22:06:00 +0000
Manifest next update:     Sun 27 Sep 2026 22:06:00 +0000
Files and hashes:         1: 2CWolzNYl8B-dpODimvyAnZYDwM.crl (hash: XR8Kz4ogES+2ch5Cs5+G/Mz6QnT94GAgJC5UZQ7bKJI=)
                          2: E6ECE6E6104C11EC9074E586C4F9AE02.roa (hash: ri4rIVeCnggrYrwuwRAFa5AOiVRD57MlQ9kNKhUQmT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl
                          rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1791 (0x6ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199DE2, serialNumber=D825A897335897C07E7693838A6BF20276580F03
        Validity
            Not Before: Sep 20 22:06:00 2026 GMT
            Not After : Sep 27 22:06:00 2026 GMT
        Subject: CN=6ab058c9-f56d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:4b:cb:b5:3d:af:92:a3:aa:76:74:17:ce:
                    0d:f7:d9:ab:8f:94:e4:e9:4e:75:ee:62:ed:fe:77:
                    b8:95:a8:4d:f9:42:08:f4:4c:4e:4e:f7:1f:89:f4:
                    3f:a4:f1:f1:78:27:6b:4e:b8:55:7f:70:f5:91:ea:
                    dc:4c:16:4a:9c:a6:1f:cd:cc:b7:47:0e:d4:da:8d:
                    bc:23:53:54:a2:3b:c4:2b:38:98:1d:dc:b2:7b:63:
                    f9:50:18:5d:d2:2d:30:82:48:06:ac:8c:8b:06:79:
                    d7:55:ad:06:45:cd:ae:d4:3e:01:f7:df:cd:3d:e5:
                    4f:0d:fc:c6:50:9d:24:c8:88:63:f3:b2:cb:50:4d:
                    0e:20:66:3e:9e:fe:73:21:7f:6e:51:77:bd:d6:50:
                    b3:6f:1a:eb:ff:f7:77:fc:8c:96:93:4f:90:7f:c8:
                    78:0d:87:81:b0:72:64:9f:c7:be:d8:a1:1b:d2:50:
                    79:4d:d9:59:c7:99:35:bb:66:35:c6:71:ac:40:9d:
                    c3:2a:ab:07:1a:ab:b9:d4:ac:3b:b1:b2:4c:88:e9:
                    d5:b6:06:b0:e2:18:76:81:e7:2e:cd:e6:db:ba:a6:
                    5e:4e:5a:70:98:59:dc:d1:b2:8b:6e:db:a0:27:e1:
                    ff:7f:23:5b:ee:d7:1a:89:19:53:4e:e8:d3:df:28:
                    d3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C9:9D:7B:B6:26:84:2E:DD:88:4F:E9:FD:90:52:3A:F1:D8:49:14
            X509v3 Authority Key Identifier:
                keyid:D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:9c:d6:26:19:09:18:6b:31:21:08:5c:30:e1:ac:a0:0b:ee:
         05:36:0c:fb:5e:a6:c3:77:a2:90:93:f7:f6:d8:bc:d2:3a:f6:
         10:69:85:7e:b5:d8:94:ad:c8:07:44:bd:56:2d:47:65:46:50:
         78:34:95:c6:11:11:a5:62:17:26:eb:15:5e:8a:ac:8c:e9:20:
         78:33:60:d7:3e:3a:27:73:26:fa:0f:d0:3d:44:10:a3:f6:04:
         2b:50:68:87:e0:d7:fb:38:82:f6:d7:a6:eb:c6:bf:27:f2:63:
         e0:5f:98:0e:72:2a:d1:cd:a4:31:a8:c1:0c:65:00:b2:86:ad:
         29:60:20:73:1b:ac:4b:52:2e:87:0f:a7:f0:6e:59:fc:0f:c4:
         f7:ba:cb:e7:91:7d:48:31:63:a8:2f:84:6b:ed:39:c0:a3:9c:
         78:92:cd:95:02:f5:e4:1d:84:03:c3:21:6c:eb:b4:1f:c6:c5:
         1a:bc:39:f7:d7:6b:74:07:1d:92:64:7f:45:bb:27:bb:ef:cd:
         9b:cb:3f:26:8d:41:c1:11:83:0e:ff:f1:ec:c9:d2:46:68:50:
         df:e3:e5:f5:d6:ca:6a:b5:03:9d:29:b4:d1:c5:f3:71:2c:75:
         bd:3b:9b:5f:e1:ed:a9:c8:f8:54:bf:cf:c8:d5:e3:07:7f:a1:
         da:43:fa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:33:00 2026 by rpki-client