Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
File:                     C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json)
Hash identifier:          AvCVGakjAwVtWHN60+6Zs2hGA9KTPd3r7qjdSZO4u6M=
Subject key identifier:   51:22:AB:BB:82:7F:B3:BA:1C:E5:6D:5A:94:40:81:1F:CB:CE:16:14
Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45
Certificate issuer:       /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
Certificate serial:       258E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
Manifest number:          2576
Signing time:             Tue 28 Jul 2026 15:50:15 +0000
Manifest this update:     Tue 28 Jul 2026 15:50:15 +0000
Manifest next update:     Tue 04 Aug 2026 15:50:15 +0000
Files and hashes:         1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: Nnq+mp7oUC07Dv8vhgwCHj6sbW5K5C3r6oSqqaF+res=)
                          2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: kNgeshEQoMHZ0sW+i2npHyw2h62/78Or0q6kxwJMwVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl
                          rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9614 (0x258e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
        Validity
            Not Before: Jul 28 15:50:15 2026 GMT
            Not After : Aug  4 15:50:15 2026 GMT
        Subject: CN=6a68cfb7-9eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:fc:2a:84:62:0d:d3:53:64:4b:c9:fb:8f:
                    9c:fa:dc:b0:52:bb:1f:ac:91:72:16:91:72:25:78:
                    4e:15:4f:3f:ad:f4:02:b1:e1:4d:79:22:5b:86:3b:
                    9c:b1:38:58:61:3e:8d:3f:7d:fb:b2:d7:2a:e1:28:
                    41:c1:a3:5b:e1:6f:11:90:6f:75:f5:ec:4a:43:70:
                    8c:67:b1:dd:44:cb:60:88:46:a7:b2:8b:43:12:ba:
                    fc:a2:e7:0d:0f:b1:2b:54:85:fa:40:c3:ed:f5:3e:
                    38:2e:f1:31:a3:79:3c:b8:9c:3b:80:27:cf:f3:60:
                    e0:2c:ca:81:43:db:b3:b2:59:22:6d:46:60:53:15:
                    a1:d0:3e:d8:59:84:e4:a1:8b:a4:e4:6f:ee:c5:1f:
                    4e:1d:50:1f:e3:bb:af:e7:98:cf:c9:f1:87:2e:66:
                    68:c2:08:cc:d7:57:bc:e7:c2:44:00:0f:d9:2e:ad:
                    f3:84:fc:cf:0f:cd:39:b8:ea:f0:c1:e3:b1:7c:be:
                    00:e3:6c:40:03:26:25:db:6f:ed:10:d6:cc:8c:35:
                    3c:ec:4d:a4:ca:8a:37:dc:c0:71:09:03:55:6b:c0:
                    f7:97:14:23:79:b6:f2:fa:22:f9:73:ef:77:f5:74:
                    5b:8e:19:57:d0:cd:cb:3f:9a:c4:ea:3b:42:1f:e3:
                    6a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:22:AB:BB:82:7F:B3:BA:1C:E5:6D:5A:94:40:81:1F:CB:CE:16:14
            X509v3 Authority Key Identifier:
                keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:9a:bb:b6:1f:b9:8e:c5:ec:eb:e9:ea:64:27:e4:84:10:63:
         e6:c8:0d:72:bd:b7:0f:1a:63:84:c8:e5:35:08:58:0f:71:d6:
         8e:df:f2:11:4b:1e:9d:45:54:62:f6:a6:fe:df:1a:d1:03:83:
         aa:08:87:92:ca:5e:d2:dd:b1:51:99:17:2e:e6:2b:14:39:23:
         6b:17:e4:ef:4f:82:53:fa:65:0f:24:fe:29:45:f8:32:88:d6:
         ba:fb:c1:30:c5:62:ab:6f:32:46:f8:2a:f4:0b:32:f9:7f:e7:
         e4:34:0b:1e:e0:f9:f7:2d:07:5d:3b:16:32:b6:30:99:3e:5f:
         71:d1:c2:ac:5f:b0:16:6b:52:c5:21:3a:f2:7b:af:c2:c3:3c:
         db:9e:4d:4f:d7:1d:b0:0b:07:7c:73:95:9d:b9:7e:ab:f0:b6:
         a9:87:cf:2d:76:c0:18:0d:5b:de:d0:9e:ca:16:2d:d3:6c:80:
         a7:b0:c3:26:2a:79:26:1d:a1:ef:d5:9f:44:3b:f9:93:3a:32:
         8b:b9:53:7a:19:5a:91:4c:fc:58:14:fe:f9:86:f1:84:bd:f1:
         2a:dd:f5:cb:81:75:62:d1:a2:57:df:fc:61:c3:20:18:dd:de:
         35:93:8e:fc:50:cb:2c:ff:95:06:73:b7:b3:f5:c9:13:95:34:
         1f:86:47:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:42:29 2026 by rpki-client