Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft
File:                     cnTOXaBB8mCNjIJt7g5xWhhxUro.mft (raw, json)
Hash identifier:          lVDh8VCx3VZRrugDUHrjpy/ek5duDqexy9L80oNjSoA=
Subject key identifier:   1A:AA:D6:FA:D4:C3:E5:D3:F3:9A:EF:82:65:A5:B9:1D:3C:64:E2:5F
Authority key identifier: 72:74:CE:5D:A0:41:F2:60:8D:8C:82:6D:EE:0E:71:5A:18:71:52:BA
Certificate issuer:       /CN=A91A2FF9/serialNumber=7274CE5DA041F2608D8C826DEE0E715A187152BA
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnTOXaBB8mCNjIJt7g5xWhhxUro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft
Manifest number:          2E
Signing time:             Mon 27 Jul 2026 11:03:24 +0000
Manifest this update:     Mon 27 Jul 2026 11:03:24 +0000
Manifest next update:     Mon 03 Aug 2026 11:03:24 +0000
Files and hashes:         1: cnTOXaBB8mCNjIJt7g5xWhhxUro.crl (hash: 4n0uwDGAEWFNamlB8zgE5HATXutx/xYXTkEWwCLnfG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.crl
                          rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnTOXaBB8mCNjIJt7g5xWhhxUro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2FF9, serialNumber=7274CE5DA041F2608D8C826DEE0E715A187152BA
        Validity
            Not Before: Jul 27 11:03:24 2026 GMT
            Not After : Aug  3 11:03:24 2026 GMT
        Subject: CN=6a673afc-7db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d3:83:c3:eb:bc:d6:ff:69:cc:e3:37:5d:61:
                    b1:8a:7f:be:b2:3d:79:61:63:a9:7e:d4:8a:9f:d5:
                    ea:14:a4:d4:0b:80:64:7f:fd:83:86:2f:61:33:d2:
                    7e:92:1e:22:c0:28:84:f9:52:4e:52:a7:1a:8a:44:
                    e9:c7:01:3d:d8:18:03:29:8e:f1:0c:66:ec:dd:cc:
                    f1:31:4f:dc:b4:6d:74:9b:e7:90:bc:e9:07:02:1d:
                    80:24:15:5e:78:51:44:78:b4:f3:e9:8c:c7:59:65:
                    c4:67:77:27:16:0c:d6:39:66:c1:da:ff:ea:33:75:
                    6a:cb:7e:c7:7b:d3:71:d8:f2:1b:f6:15:78:9d:7e:
                    2d:47:a1:0e:9a:80:13:46:d1:59:2e:bc:1c:5d:e8:
                    a3:1e:50:a7:c4:1a:c9:a3:c8:a6:55:f7:7b:85:c4:
                    ac:55:b0:3e:1a:a4:cb:c3:64:6b:16:d4:32:d0:e7:
                    61:5d:10:c9:26:52:1c:aa:b8:8f:90:a2:42:8c:2c:
                    a1:42:e7:12:8c:a0:f7:bc:fb:07:26:3e:7b:33:a8:
                    cc:0e:42:65:9d:51:5e:40:bc:cf:ca:b8:64:bc:d1:
                    7d:ee:09:26:1a:f7:6a:0c:0c:5d:f7:44:46:07:d7:
                    ae:87:5b:e7:78:5c:34:84:6a:2c:4c:6d:cf:78:a2:
                    24:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AA:D6:FA:D4:C3:E5:D3:F3:9A:EF:82:65:A5:B9:1D:3C:64:E2:5F
            X509v3 Authority Key Identifier:
                keyid:72:74:CE:5D:A0:41:F2:60:8D:8C:82:6D:EE:0E:71:5A:18:71:52:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnTOXaBB8mCNjIJt7g5xWhhxUro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e0:f2:eb:6d:dd:52:c1:28:c2:36:7e:b2:af:df:98:87:66:
         91:08:2e:ca:ed:3e:10:d8:87:54:22:a3:9e:fa:c7:11:69:dd:
         3a:08:12:a9:1c:06:c7:95:63:d5:19:d0:80:14:d1:fb:83:c3:
         3b:35:45:bb:dd:0d:66:43:79:72:4a:fc:11:2e:ed:85:4b:0c:
         83:a2:28:dc:4e:83:e6:22:c7:71:4a:49:2d:59:15:2f:28:75:
         66:4f:3e:bf:e8:6c:b2:02:82:78:3e:9c:82:17:0c:b4:ca:fa:
         2f:88:e8:a8:fe:f5:49:7b:a7:24:e8:85:b2:c4:35:29:46:81:
         83:29:3a:1c:4e:b8:a6:09:18:93:74:31:0e:87:0e:48:fc:65:
         3d:6d:16:d1:a0:41:7c:5e:b6:82:ad:c6:48:5c:2d:62:c2:61:
         52:54:f9:47:f5:e0:c6:91:11:2a:5c:00:1d:27:60:9b:9c:35:
         58:2e:f2:9e:c8:eb:df:ad:f8:1b:7e:04:9f:30:38:de:1f:eb:
         47:d3:40:0e:81:ae:7b:04:4e:11:75:68:d0:1d:94:fc:63:d2:
         03:e8:69:71:96:23:05:be:d5:2e:d5:29:b0:ca:35:6e:ff:70:
         e7:dd:a1:86:45:6a:f9:2b:c8:97:72:5d:df:f8:f8:2e:09:1e:
         7c:11:70:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:42:43 2026 by rpki-client