Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
File:                     2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json)
Hash identifier:          BhnKXagxWXV2+iy68429gKSsPIpH1Lu5OMIRMBj+ogM=
Subject key identifier:   AB:68:AC:62:3D:15:00:F0:64:B0:42:32:8B:C1:96:FB:97:F4:7F:CC
Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
Certificate issuer:       /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
Manifest number:          0172
Signing time:             Wed 29 Jul 2026 05:58:21 +0000
Manifest this update:     Wed 29 Jul 2026 05:58:21 +0000
Manifest next update:     Wed 05 Aug 2026 05:58:21 +0000
Files and hashes:         1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: gvHTW6hwYPsuFvRM5+UlgeJhGMa5J4hWzPh/QDauH6Q=)
                          2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: shtxP/SBAQ2iT3UezvldJfibekIWgVIPJ+ZajU+8AuA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl
                          rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 05:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
        Validity
            Not Before: Jul 29 05:58:21 2026 GMT
            Not After : Aug  5 05:58:21 2026 GMT
        Subject: CN=6a69967d-984a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:65:d5:a4:62:46:bf:b5:72:ff:83:ad:0b:2f:
                    d7:a7:7c:a7:7d:e5:a3:9d:9e:99:0d:bd:06:8b:ac:
                    82:c4:5f:73:8a:59:55:ab:71:ac:06:66:90:48:9b:
                    af:81:e2:4a:ad:f3:a9:d4:f6:7b:14:50:87:0d:81:
                    d8:86:e2:d8:c1:4d:f0:47:ed:f8:8a:e0:73:74:83:
                    37:94:79:6a:b5:38:54:d9:b5:0c:99:05:e8:2b:45:
                    09:3c:06:8a:f9:60:ea:b7:3a:35:e0:d9:10:36:a2:
                    83:f7:52:27:39:3e:88:b8:73:d6:fa:f5:14:54:a8:
                    d8:f2:06:56:e7:5a:ba:a6:03:4e:80:a4:59:ac:50:
                    25:e3:f9:31:34:7e:b4:c6:d4:66:c0:86:ca:20:99:
                    cf:a6:1a:e7:d0:2d:f2:32:5a:b8:0c:2b:62:7f:e6:
                    f4:8d:82:b5:97:8d:c9:56:6a:c8:63:5c:d1:7d:ca:
                    d9:37:8a:50:a0:43:e2:cb:10:13:05:7f:29:27:21:
                    21:6e:27:d4:24:7e:11:a4:c3:30:24:c1:07:84:35:
                    0a:ad:be:b7:49:24:75:78:47:4f:61:2e:ae:dd:40:
                    e1:a9:d0:b4:c8:ce:67:6c:e5:43:b7:e1:97:5b:8b:
                    66:ea:d2:9c:b0:e4:7a:78:3d:9c:c5:83:b5:14:01:
                    39:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:68:AC:62:3D:15:00:F0:64:B0:42:32:8B:C1:96:FB:97:F4:7F:CC
            X509v3 Authority Key Identifier:
                keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:19:cd:24:86:70:05:2d:b0:1b:af:2a:47:38:45:ae:a0:45:
         29:58:8f:07:7a:74:2c:6f:fa:ab:9a:95:99:97:72:52:ec:3f:
         47:d1:1e:bf:14:c9:b4:5c:e2:58:c6:49:2a:24:7a:17:a7:65:
         d0:62:62:45:b5:e1:67:8c:f2:1d:d8:27:7b:27:8d:58:47:e3:
         94:bc:d6:30:83:a3:f2:8f:89:5c:67:d3:0c:4a:4a:37:c7:8d:
         8c:57:33:3a:a2:e3:7b:5c:5d:aa:2f:ff:6a:b9:7d:65:8a:da:
         af:8b:78:bb:e9:bb:2f:60:c4:4e:13:f9:e4:0c:7c:d5:30:39:
         5f:7d:cf:49:5d:87:1c:41:7c:f0:65:c5:91:c1:2a:b1:14:4b:
         3b:a6:b9:53:5d:3e:fc:6d:f4:9e:dc:f6:c6:0c:a7:58:22:ff:
         2b:2a:ac:65:c9:e8:f1:7e:fe:d5:dc:a3:b3:e2:c7:62:12:07:
         cd:a0:79:63:c8:d6:54:73:39:1a:25:44:01:f0:93:c9:23:2b:
         a7:01:9f:f0:e5:2c:1a:c9:27:9d:23:e3:2a:69:d1:47:a8:8c:
         1c:41:b6:71:21:04:77:92:7c:43:5b:52:56:ef:3b:2e:9f:77:
         63:ff:62:fe:40:e0:97:a9:4e:4c:f0:38:c4:0b:04:33:08:43:
         71:98:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:18:40 2026 by rpki-client