Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
File:                     2MZzCV6Cqbfn381GWA94MajRiso.mft (raw, json)
Hash identifier:          LMAfXEhrki7YULX/1u30zhCX7AppXCjllQsrUHTtdkc=
Subject key identifier:   F0:C6:CA:8C:D2:02:88:BC:E9:28:FB:72:10:34:E8:F7:75:45:CA:1A
Authority key identifier: D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
Certificate issuer:       /CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Certificate serial:       1825
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
Manifest number:          17FF
Signing time:             Wed 22 Jul 2026 16:39:05 +0000
Manifest this update:     Wed 22 Jul 2026 16:39:05 +0000
Manifest next update:     Wed 29 Jul 2026 16:39:05 +0000
Files and hashes:         1: 2MZzCV6Cqbfn381GWA94MajRiso.crl (hash: QjBEwY512ku660X1ini5RjQO2u9lCvA0kQwNNyjbxo4=)
                          2: EE9AC4A2CF3E11F0BD67F029C4F9AE02.roa (hash: 1ifr0yn5rYOREwHuBa/9PEbXr1t4wQIXYEhnH3YZcdI=)
                          3: 07FF86DACF3F11F0AF94352AC4F9AE02.roa (hash: axL4DxRLdN4w1oidCM91AwY0+Ml6Zzq4wlYIpZ72Alw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
                          rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6181 (0x1825)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911862D, serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
        Validity
            Not Before: Jul 22 16:39:05 2026 GMT
            Not After : Jul 29 16:39:05 2026 GMT
        Subject: CN=6a60f229-76c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d0:84:ec:d7:fc:cd:48:c2:3a:dc:9a:28:4f:
                    a4:cd:75:6b:68:aa:c3:e1:76:d3:6f:14:18:9b:97:
                    23:6a:8d:a5:69:82:36:e2:e1:55:43:1b:16:aa:2c:
                    cd:c0:00:d9:2d:93:e5:4c:6c:05:cb:aa:40:74:6c:
                    1f:11:83:ee:20:60:5c:84:89:1d:1f:30:c6:bd:72:
                    9a:e1:68:e3:b0:b5:81:ae:79:b5:b4:35:c0:9a:d8:
                    67:4c:ad:8a:26:bd:b9:18:af:c1:4e:38:56:96:d6:
                    11:e0:c8:76:0e:d8:80:65:27:38:b7:97:b0:f4:7b:
                    90:58:59:8b:b9:07:65:ff:21:5f:a9:e0:7c:0b:9d:
                    55:2b:30:49:ff:0c:71:af:74:6f:92:ea:01:2e:e0:
                    cb:21:ec:94:e1:7d:dc:d1:c4:5e:36:88:cd:a7:43:
                    cc:33:75:dc:8d:06:fb:6b:f6:79:98:a8:cf:f4:32:
                    41:fe:30:44:98:fe:08:52:1f:53:f3:db:b6:43:ef:
                    cd:3f:57:e1:bd:31:94:b7:e2:ea:c5:7b:2c:57:a4:
                    e0:af:bb:93:ff:7e:58:d8:b7:66:b1:d4:92:bd:4e:
                    c3:4d:8d:1d:c3:d4:04:c6:d0:f1:bc:5c:66:9d:f5:
                    05:c1:8a:a4:69:11:8f:78:de:7e:66:e8:91:7e:bc:
                    0c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C6:CA:8C:D2:02:88:BC:E9:28:FB:72:10:34:E8:F7:75:45:CA:1A
            X509v3 Authority Key Identifier:
                keyid:D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:84:78:01:1d:88:22:3e:4d:20:18:7a:d3:0a:78:fd:32:e8:
         1a:ce:44:43:5c:a7:4c:9f:3f:f6:bc:cd:8e:1f:f6:ed:3a:ce:
         5c:67:5e:b2:bd:6e:fd:5b:79:e7:db:b3:29:80:a0:2e:1e:86:
         79:c5:91:e9:31:ef:d4:6a:79:02:e6:27:84:08:3e:eb:4d:1c:
         98:55:4e:42:59:1c:d2:ef:75:b2:cc:55:15:fc:0a:12:bb:e0:
         0b:2e:55:bd:f7:63:ec:c4:ad:09:d1:a0:e2:1d:63:35:33:dc:
         2a:ed:85:1f:55:33:cf:3e:52:86:f2:27:31:f7:17:1f:9e:fc:
         0c:f4:25:78:10:44:14:d1:1f:19:35:77:9b:a5:3f:34:08:47:
         90:ab:49:35:8a:35:15:d0:3f:73:49:2c:0a:8d:42:67:bf:6e:
         2b:0e:ee:8d:d1:ac:0a:29:30:5b:d5:45:54:64:05:41:e1:c7:
         0a:e6:6e:c1:f1:99:33:a2:a2:0d:0f:d8:0b:aa:1d:e2:32:f7:
         54:0c:c9:a9:4e:b6:28:11:b5:a5:23:df:e6:9e:de:12:9a:c5:
         80:12:8f:8d:28:2f:6b:b4:8b:30:2a:8c:a6:37:59:81:aa:5b:
         3d:e3:8c:bf:97:ab:f6:3b:28:c4:f9:9b:e7:72:83:94:17:4b:
         4d:c2:86:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:42 2026 by rpki-client