Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
File:                     2-mhAMSp66SyzRomcTKN73j-duE.mft (raw, json)
Hash identifier:          qqcb13JYxhr+PNN7agQLvaJv7jxRqSQWSqNgeBu/MGI=
Subject key identifier:   2E:BF:62:87:72:31:9D:86:A2:A2:7D:E7:D4:DF:55:63:15:0C:DC:E3
Authority key identifier: DB:E9:A1:00:C4:A9:EB:A4:B2:CD:1A:26:71:32:8D:EF:78:FE:76:E1
Certificate issuer:       /CN=A91AB74D/serialNumber=DBE9A100C4A9EBA4B2CD1A2671328DEF78FE76E1
Certificate serial:       0716
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
Manifest number:          070F
Signing time:             Mon 28 Sep 2026 22:17:14 +0000
Manifest this update:     Mon 28 Sep 2026 22:17:14 +0000
Manifest next update:     Mon 05 Oct 2026 22:17:14 +0000
Files and hashes:         1: 2-mhAMSp66SyzRomcTKN73j-duE.crl (hash: BObpcLx559tSGPh7fKdCcU6lSKd0fp+DeB1ID4DV04s=)
                          2: A0D57302A33D11EBA479491CC4F9AE02.roa (hash: u5ce3mhL9MTgfMANLqmHFxu4YGZmlzL+s2cu4dHRCdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.crl
                          rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 22:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1814 (0x716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB74D, serialNumber=DBE9A100C4A9EBA4B2CD1A2671328DEF78FE76E1
        Validity
            Not Before: Sep 28 22:17:14 2026 GMT
            Not After : Oct  5 22:17:14 2026 GMT
        Subject: CN=6abae76a-0f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:03:99:c7:53:9f:8e:10:30:ac:30:b7:22:
                    35:50:6c:8d:94:eb:03:0d:e5:41:77:01:a0:65:48:
                    f6:b8:af:3c:9f:61:48:06:34:ee:04:29:30:05:4b:
                    37:ac:7a:c3:6e:96:2c:c1:77:28:22:20:42:32:cc:
                    85:29:0a:a6:9a:df:97:91:18:14:da:c6:81:c1:2d:
                    6b:39:2b:8d:ea:6f:c7:04:1d:fc:3f:44:aa:dd:0b:
                    6a:4f:f5:75:93:eb:14:5d:7b:ca:a2:8a:8a:75:56:
                    60:f8:67:5e:08:d4:cc:65:d6:0b:27:5a:85:aa:71:
                    1d:a7:7b:0d:e5:11:aa:73:96:b7:e8:e8:66:58:3c:
                    c2:6b:81:b4:79:10:97:72:f9:e2:96:30:c9:33:cd:
                    24:64:21:a9:3a:29:68:01:52:7f:b4:1d:30:2b:81:
                    46:63:6f:74:a6:bc:c0:53:e4:d1:ca:44:6b:36:69:
                    0d:7e:42:93:cb:22:f9:75:f3:90:78:09:ba:d2:4d:
                    22:00:06:4c:4a:9d:8a:85:d5:6c:67:b9:89:23:e0:
                    36:f4:a5:14:ce:b6:14:8b:dc:30:ec:f7:c3:79:da:
                    02:63:fa:f3:77:5b:84:43:9d:12:35:85:2f:1a:61:
                    89:e6:85:c0:8c:bb:a2:bb:a7:5f:99:bd:90:f1:c2:
                    7f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BF:62:87:72:31:9D:86:A2:A2:7D:E7:D4:DF:55:63:15:0C:DC:E3
            X509v3 Authority Key Identifier:
                keyid:DB:E9:A1:00:C4:A9:EB:A4:B2:CD:1A:26:71:32:8D:EF:78:FE:76:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b3:20:2b:ca:8a:d3:ef:b7:9e:ba:b3:c7:0c:67:04:e5:f4:
         1e:71:b1:c4:17:68:32:41:9c:a9:ff:27:19:39:ed:2d:0b:0d:
         1a:c5:b8:d9:f9:23:97:38:e1:d8:40:7f:b3:de:9a:89:7e:18:
         ee:73:ee:4f:5f:23:f6:c2:f9:aa:06:b4:3c:bc:9d:4f:46:19:
         9c:d6:be:0d:bf:d0:f0:28:4e:1c:f2:42:5f:31:5b:97:03:94:
         4f:bc:ac:d7:dd:97:8e:b1:73:ae:a3:e2:82:aa:bc:47:5d:d7:
         94:1e:6c:9c:71:d5:77:1d:43:6d:74:cb:84:66:99:9b:8b:77:
         30:0a:c2:9c:7e:11:fb:bc:3c:01:ac:50:c9:a2:7d:6c:26:39:
         57:20:36:8e:54:40:23:75:8e:9f:cc:70:1d:8f:e4:ee:12:d9:
         9b:11:aa:22:0c:a2:e3:ac:dd:3c:2d:60:31:74:e6:aa:f5:a9:
         2a:95:f7:a2:27:87:ec:db:b5:c2:0b:b0:ee:72:f7:b0:5b:b5:
         0a:6f:d5:6a:05:a1:31:d5:53:2d:ff:6c:af:11:5a:2b:46:8f:
         18:7f:4b:ef:2d:be:59:4b:99:0c:72:7c:5f:60:8a:c8:79:3a:
         d2:7d:68:ea:c1:fb:6a:00:82:19:0a:48:d2:23:ac:34:9c:ef:
         33:30:ce:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:29:39 2026 by rpki-client