Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft
File:                     2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json)
Hash identifier:          6bXiNN3eQE+bRxU2iAjFyV05DiTjwwAwNEgHDDiizsY=
Subject key identifier:   6A:9C:D0:23:9D:0C:89:66:EC:47:00:BE:4E:F5:79:BA:9A:B2:4B:5E
Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78
Certificate issuer:       /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278
Certificate serial:       03AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft
Manifest number:          03A8
Signing time:             Mon 27 Jul 2026 01:45:07 +0000
Manifest this update:     Mon 27 Jul 2026 01:45:06 +0000
Manifest next update:     Mon 03 Aug 2026 01:45:06 +0000
Files and hashes:         1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: 4kP44tnL3XoBoTvuYyRaXQy1Awm4Hbr7AQ/nsHa8Vec=)
                          2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: eh2olN6asVC4zjOV+kS987T4rETGl4oNwPTcTkaLCEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl
                          rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 942 (0x3ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE1E6, serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278
        Validity
            Not Before: Jul 27 01:45:06 2026 GMT
            Not After : Aug  3 01:45:06 2026 GMT
        Subject: CN=6a66b822-7b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f4:2f:c1:42:f0:18:d4:f2:29:6d:f4:f1:41:
                    4f:96:9a:90:3c:c6:0e:a2:0d:ea:24:ca:7e:c7:0c:
                    e2:d6:72:1c:e9:52:b7:e8:c2:68:28:b6:d5:88:2e:
                    fb:9c:8f:76:5a:0d:32:4b:f6:fc:3e:a3:31:33:cc:
                    c4:43:55:fa:d0:b6:3e:79:11:2a:83:a6:2b:fa:26:
                    d8:f6:12:40:c1:74:34:6a:d2:96:6d:2d:83:c3:23:
                    0a:ea:93:64:da:31:13:7d:5b:36:56:85:5c:a2:27:
                    53:ff:35:dc:a3:bd:51:40:43:e6:d0:ad:7b:2f:eb:
                    62:dc:1d:9d:81:73:ed:26:d4:4c:9d:4e:6d:47:31:
                    5c:3c:fc:a0:47:54:c6:53:28:1c:cb:29:01:8a:a0:
                    92:23:20:06:56:4a:04:2d:8f:02:4d:bb:9a:1b:39:
                    7d:b8:48:d2:f6:24:17:bb:fa:87:55:56:c2:1c:36:
                    02:33:2f:23:68:fe:19:51:35:ed:93:a7:ef:47:39:
                    6f:99:3d:49:3e:6f:5d:02:2f:93:ac:91:25:17:da:
                    93:13:6f:d6:d6:c4:6b:8b:99:51:52:d9:14:3d:55:
                    82:54:05:ab:c8:9b:3a:f4:40:89:1e:2a:6e:e3:77:
                    8d:9f:69:e2:80:ef:57:31:24:51:ec:d3:16:2b:ab:
                    f3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9C:D0:23:9D:0C:89:66:EC:47:00:BE:4E:F5:79:BA:9A:B2:4B:5E
            X509v3 Authority Key Identifier:
                keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ef:61:5a:37:60:aa:c0:82:98:92:80:b9:f6:3d:c5:62:3b:9f:
         27:a7:9b:84:dc:7c:56:c0:67:9c:dc:03:ef:e7:ca:30:2a:25:
         15:6c:ac:9e:68:20:6b:7e:02:41:19:51:01:67:c8:b9:13:ba:
         12:26:85:1a:4b:5d:6f:e2:73:e1:25:1d:a9:81:de:da:a3:87:
         e5:5e:0d:6e:2a:10:14:02:bc:2d:6c:82:fb:99:9f:09:72:10:
         e6:69:c1:06:f3:8c:99:ac:24:98:c9:66:38:5b:f4:3c:f5:6b:
         58:1c:36:96:af:2c:c9:bb:34:e8:f2:a9:5b:5b:90:eb:bb:17:
         6a:0d:68:7d:39:0b:92:bc:ad:17:d7:2d:c4:e4:b7:16:ed:a4:
         82:17:69:07:c4:f8:a9:a9:93:84:cf:ec:78:96:7e:a8:a9:1d:
         4a:fc:ba:2a:56:ed:fe:b3:a8:f4:fa:a2:cf:51:00:72:e6:66:
         28:a7:6f:0f:2e:fd:de:d9:9f:5a:aa:c7:75:ad:53:dd:9f:ad:
         d2:4b:67:0e:27:81:c8:a7:67:5c:cc:d7:e2:25:fc:bc:45:9b:
         32:b6:41:d7:3f:06:c5:a7:20:e5:c5:39:03:4c:c1:d9:01:3a:
         86:b0:69:0c:a1:ce:67:8d:72:17:0a:5a:97:4c:51:03:ab:eb:
         95:6d:fb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:31:36 2026 by rpki-client