Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft
File:                     2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft (raw, json)
Hash identifier:          1REooOH2LMJKTOsBier+WOU2/JoT3fz6OpnFAn3QhW4=
Subject key identifier:   71:AE:3B:AF:65:C7:6C:FF:4A:F2:7D:79:4D:05:50:75:04:A0:D7:24
Authority key identifier: DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC
Certificate issuer:       /CN=A9127A9B/serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC
Certificate serial:       355E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft
Manifest number:          355E
Signing time:             Fri 24 Jul 2026 14:52:55 +0000
Manifest this update:     Fri 24 Jul 2026 14:52:54 +0000
Manifest next update:     Fri 31 Jul 2026 14:52:54 +0000
Files and hashes:         1: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl (hash: 9cZ3Cf5otlQxhODbf+GtCNIxnDYLYPyycUIPwTjePHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl
                          rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 14:52:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13662 (0x355e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127A9B, serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC
        Validity
            Not Before: Jul 24 14:52:54 2026 GMT
            Not After : Jul 31 14:52:54 2026 GMT
        Subject: CN=6a637c47-0469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e2:d1:b3:28:cb:c8:58:be:92:d4:d4:64:e2:
                    f1:4a:57:5f:11:69:c3:59:6c:59:ff:c4:3b:45:f9:
                    d4:26:ce:04:92:37:8f:15:5b:90:65:2d:9c:38:6b:
                    5b:c1:9d:db:a2:95:1d:95:c1:59:cb:f9:ff:7e:56:
                    0c:63:fb:48:a9:81:46:d5:b5:3b:9f:47:19:b3:f1:
                    ac:b3:3f:9b:96:17:2a:6f:0f:5d:6f:79:7c:5e:7f:
                    ab:41:e7:75:e1:a2:b0:e8:fb:d6:b3:62:4f:7e:93:
                    90:07:15:e6:14:c4:b9:fd:e9:86:95:26:ec:85:61:
                    f5:a0:86:3e:4b:66:6d:3d:90:5f:36:9d:70:97:a6:
                    0d:12:b5:1b:67:be:0b:cc:60:ec:ff:3f:80:bc:86:
                    91:8a:48:ea:73:b6:09:bb:4d:d4:d6:86:59:c0:ec:
                    c6:c5:93:fe:96:ff:48:08:af:24:90:55:f2:21:d5:
                    f0:a8:86:c7:cc:d2:02:9e:8f:bf:ec:c1:47:d9:0c:
                    04:a9:fb:10:78:04:ed:63:ca:d9:29:6a:09:07:4f:
                    00:83:73:f4:a1:44:c5:97:03:ed:94:f7:77:93:69:
                    e5:c6:14:50:e0:bd:b7:ed:77:c1:95:b0:0c:cc:89:
                    e3:47:0f:18:3e:28:1c:dd:9a:75:2e:1d:93:3a:11:
                    5d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AE:3B:AF:65:C7:6C:FF:4A:F2:7D:79:4D:05:50:75:04:A0:D7:24
            X509v3 Authority Key Identifier:
                keyid:DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:76:20:be:bf:44:2d:53:00:87:94:d2:11:74:82:e4:5a:4c:
         87:8c:4e:29:c1:83:3f:ac:44:a5:cf:9e:d4:e9:87:6a:f9:d7:
         9a:a6:07:41:2b:2b:15:1c:2f:8d:4f:ca:8f:64:12:cc:9a:a4:
         f5:5e:d6:90:03:d4:3b:ea:35:ec:ed:30:92:58:4a:4a:53:2e:
         e1:55:f7:08:22:0d:25:3a:b9:f6:a7:d5:e7:ac:b5:51:49:43:
         8d:cd:e1:89:c7:9d:07:26:c3:8f:9a:08:0f:ce:15:b4:79:26:
         55:98:39:03:7d:d3:8e:d8:07:a2:bc:bd:d4:9c:8d:fb:a2:5e:
         74:6f:d0:d2:02:c0:ed:23:2f:7e:08:36:ee:84:bf:90:e6:91:
         ce:58:c3:6c:1d:56:c3:5f:6c:53:34:ad:f9:66:e3:89:b8:ce:
         12:62:4f:37:d1:db:61:17:fa:d2:5e:c2:d8:19:fa:a6:ea:b5:
         fb:f6:74:f1:a8:f2:52:5c:8c:e7:f4:fd:c8:bb:fb:3f:5b:92:
         96:f4:23:1d:ba:77:87:2e:db:d6:df:6b:24:59:46:16:d7:61:
         a3:da:a8:90:d3:a8:8f:d3:6a:e6:9e:2d:3c:bd:03:5a:4d:24:
         e1:6a:ee:fa:41:d4:88:15:db:96:e3:16:66:0e:79:1a:b0:02:
         58:03:f5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:05:10 2026 by rpki-client