Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
File:                     2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json)
Hash identifier:          4XX1gGdK7vTCT/VVdyd//+eqoz4sdXmYSlOqFTpmE84=
Subject key identifier:   79:40:CA:6C:DE:0F:CA:B9:8A:C7:0F:64:01:96:C1:00:46:6A:B6:05
Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
Certificate issuer:       /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Certificate serial:       053E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
Manifest number:          0532
Signing time:             Fri 18 Sep 2026 23:26:36 +0000
Manifest this update:     Fri 18 Sep 2026 23:26:36 +0000
Manifest next update:     Fri 25 Sep 2026 23:26:36 +0000
Files and hashes:         1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: ZLAGsLPdpgejc+dgz3IR1Cru8zfKfywZYt8wtSfoO2E=)
                          2: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: CP9FAdKBke/NciieBtLRTUYPVa+mGRMYkC3JaQUvBRc=)
                          3: E03427482D2411F192A7D59AB8833773.roa (hash: jK7mks1MMjJvVIyRYKwMkRBkaa32MR5Py6W7RYY9KqA=)
                          4: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: bPO66cPU1SPGOc5KH5eGrolnSN1m6sptmbmqTiJIuEU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
                          rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1342 (0x53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
        Validity
            Not Before: Sep 18 23:26:36 2026 GMT
            Not After : Sep 25 23:26:36 2026 GMT
        Subject: CN=6aadc8ac-1af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:50:b6:e5:63:e8:47:d0:11:5f:ee:40:e2:
                    e6:5a:d3:d8:f6:d3:6f:1b:1d:5b:72:23:80:2f:99:
                    14:0c:36:c5:35:d2:66:3a:40:2e:d3:79:2e:de:f8:
                    36:07:b8:49:d3:1b:b2:31:8b:04:fd:f3:a1:c2:82:
                    53:a4:13:11:64:99:82:98:fb:0e:df:1a:ff:4d:1f:
                    5d:6c:a9:97:d7:0b:7d:d5:b4:c1:c2:87:5f:e8:72:
                    a0:46:ff:a2:51:55:46:f8:95:cf:c9:cc:c4:dd:3a:
                    28:13:94:de:be:e7:77:95:e6:a4:98:d7:04:e4:f2:
                    6c:07:d2:f1:c1:0c:cf:e4:02:78:42:e5:21:2b:91:
                    3f:2a:35:43:53:e0:d8:ac:12:6b:91:81:32:76:98:
                    8d:31:a7:5f:09:72:0b:e0:f3:35:52:fc:4c:01:a3:
                    13:c4:f0:96:60:f2:22:2c:a1:4d:cb:fc:10:8b:e1:
                    19:c9:95:22:91:c8:b4:47:d9:e2:a2:48:64:22:ff:
                    dc:c9:35:5b:14:c1:34:e3:15:40:10:27:c4:cd:c0:
                    86:e6:40:c9:d4:c0:30:05:df:e1:6f:91:ba:ae:a4:
                    24:4b:a3:fc:de:c7:56:08:5f:16:7d:94:79:6c:85:
                    ff:96:6c:79:09:38:80:1d:ac:fd:f2:ad:42:5e:e3:
                    95:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:40:CA:6C:DE:0F:CA:B9:8A:C7:0F:64:01:96:C1:00:46:6A:B6:05
            X509v3 Authority Key Identifier:
                keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:fa:72:78:17:95:8e:49:7e:7d:d7:43:2b:a9:7b:be:c7:48:
         17:27:29:09:9c:f7:6d:b5:a0:88:0c:99:32:da:14:d5:e3:79:
         89:d4:7c:1c:af:c9:4b:74:aa:2b:01:04:46:9f:29:79:e5:0e:
         01:8d:91:f9:ed:35:0a:3d:74:e4:27:a3:d4:8f:6c:23:e3:e4:
         24:b9:07:59:77:5c:d1:93:90:b9:aa:86:71:28:cc:e3:2f:40:
         9b:24:aa:db:8d:64:98:ec:a5:b5:1e:f5:68:d7:25:85:d9:46:
         15:3d:a1:3f:ce:e2:b2:ef:1e:a7:9c:72:e9:da:c0:40:9f:45:
         92:8f:ba:3f:91:8b:39:76:85:99:71:4c:70:89:03:a9:a8:28:
         79:e0:76:ad:85:ef:95:08:81:cd:1b:25:de:1a:e2:05:84:14:
         4b:f1:c0:47:98:f1:ec:ef:96:ee:79:c8:dd:bb:35:3e:0f:0a:
         d1:82:35:64:38:d6:e0:13:57:f7:58:8c:c4:1d:05:7a:32:55:
         73:9d:3a:8f:a8:16:26:6c:37:b5:7f:62:e1:96:c4:bd:36:9d:
         2e:5f:05:bd:3e:cd:63:7a:09:eb:00:d2:d3:cb:83:d6:e0:58:
         5e:f3:57:48:d3:6c:ae:4f:f9:b6:a3:eb:48:b2:7a:1e:c2:18:
         81:ec:56:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:42:15 2026 by rpki-client