Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
File:                     2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json)
Hash identifier:          fHcoKi1aP0zDRCEwVB56sRMGHhOj+6Ys84snPLRNizg=
Subject key identifier:   78:BF:31:4C:1D:8B:B6:D2:39:F5:15:62:61:99:B8:A6:D8:87:1B:02
Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
Certificate issuer:       /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Certificate serial:       0522
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
Manifest number:          0516
Signing time:             Mon 27 Jul 2026 00:37:05 +0000
Manifest this update:     Mon 27 Jul 2026 00:37:04 +0000
Manifest next update:     Mon 03 Aug 2026 00:37:04 +0000
Files and hashes:         1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: Ux+DPwENmNk20kOfA1K6xRKocwyT/xS2sWYiOE+OxW8=)
                          2: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: CP9FAdKBke/NciieBtLRTUYPVa+mGRMYkC3JaQUvBRc=)
                          3: E03427482D2411F192A7D59AB8833773.roa (hash: jK7mks1MMjJvVIyRYKwMkRBkaa32MR5Py6W7RYY9KqA=)
                          4: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: bPO66cPU1SPGOc5KH5eGrolnSN1m6sptmbmqTiJIuEU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
                          rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1314 (0x522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
        Validity
            Not Before: Jul 27 00:37:04 2026 GMT
            Not After : Aug  3 00:37:04 2026 GMT
        Subject: CN=6a66a831-82f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:c0:f8:fd:36:0d:30:17:4d:ce:6c:65:26:
                    2f:4a:77:94:c4:37:d8:f6:e2:71:4d:88:d8:94:5c:
                    39:93:38:78:93:16:95:59:d2:a8:40:76:d0:b7:12:
                    2d:53:33:32:77:28:be:dd:a9:15:59:77:08:72:ee:
                    f9:c6:fb:9b:33:0d:98:2a:4b:f2:d0:c1:59:c3:37:
                    52:3d:23:27:15:b6:2f:00:23:7e:7e:25:d2:24:b1:
                    22:67:a0:72:de:c3:a4:dc:1f:33:e8:a8:95:2c:b2:
                    dc:d6:15:31:7b:06:19:db:e4:77:5e:bc:26:d2:70:
                    47:27:4e:1f:0c:af:e4:a2:21:1f:1f:61:03:32:4b:
                    96:67:fd:05:6f:11:13:00:95:64:bd:e4:cb:a5:15:
                    e3:3f:6d:3b:0a:eb:86:12:20:4e:9a:e8:98:1d:36:
                    33:3a:e3:4f:7c:2d:c4:90:60:4c:55:3a:23:c4:b2:
                    48:5e:ba:24:b9:02:83:94:2f:06:66:ba:8e:7b:fe:
                    8a:b5:66:7c:a3:8a:fd:33:13:aa:31:b9:05:cb:15:
                    c6:f5:18:a2:31:00:66:e4:89:6a:79:cd:9c:51:74:
                    27:78:cd:bc:bb:a8:1d:2f:d2:83:8e:0c:3e:9b:4c:
                    59:84:1c:c4:00:66:b7:ec:4e:a2:d5:d9:88:ee:25:
                    3d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BF:31:4C:1D:8B:B6:D2:39:F5:15:62:61:99:B8:A6:D8:87:1B:02
            X509v3 Authority Key Identifier:
                keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b2:dc:fa:fc:1a:2a:71:5e:a7:fe:c3:cc:e6:c8:9a:d1:e8:
         e0:d5:1e:ab:14:44:d7:8f:85:9e:c7:ef:eb:34:4e:dd:1e:a1:
         fe:4d:3c:af:5c:3e:fd:49:95:49:d1:28:f1:bc:58:9e:4e:98:
         ee:7b:53:ac:51:69:4b:73:38:ca:1e:d4:42:1d:61:32:b6:4b:
         fb:65:f6:0c:48:13:0a:55:82:32:ae:36:06:7c:23:d0:09:97:
         82:7d:90:9c:90:35:36:3d:f2:4f:cc:92:22:f4:08:83:fc:b3:
         97:5c:07:90:e2:d6:3f:07:ca:e5:e6:27:d8:57:01:88:6c:b3:
         92:9f:51:f0:81:f8:37:6a:6f:76:d5:c0:c7:b7:b0:6d:40:af:
         38:17:91:85:93:ca:63:87:90:4c:2f:ef:5b:a5:43:5b:ae:2a:
         2b:48:b3:56:1d:79:68:7b:bf:33:56:9d:e8:6f:13:9e:c8:d9:
         bc:7c:66:69:60:b0:b9:be:01:e0:c7:5a:c8:1c:63:0b:29:7d:
         1e:d8:80:0b:68:f0:3b:15:68:d1:51:85:73:71:3c:47:d7:8f:
         59:15:2e:08:55:46:f1:ad:cc:63:35:f4:59:32:74:60:f9:75:
         20:6d:33:00:67:c7:3e:1d:e0:21:64:38:36:99:00:c3:91:b9:
         5d:0e:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:35 2026 by rpki-client