Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
File:                     p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft (raw, json)
Hash identifier:          4LXoBM7A3pOOPtEHNmyTVo2lBxVheVtatkDAOCGH6F4=
Subject key identifier:   C3:EE:0D:E4:71:B1:A7:6F:A3:58:D3:F8:FB:65:A3:E3:24:42:06:7E
Authority key identifier: A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39
Certificate issuer:       /CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
Certificate serial:       03D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
Manifest number:          03BD
Signing time:             Thu 23 Jul 2026 01:36:16 +0000
Manifest this update:     Thu 23 Jul 2026 01:36:16 +0000
Manifest next update:     Thu 30 Jul 2026 01:36:16 +0000
Files and hashes:         1: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl (hash: 0KZAZNeXOxm1bk4dBGRBde8kSMJ+u/1/qC+qJEbDZhA=)
                          2: 3824E928764711F0980D9877C4F9AE02.roa (hash: RNrBzsULWKNLzQ9xO26elmeen/lXKp/Fjr/z7K/9x2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl
                          rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980 (0x3d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE25, serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
        Validity
            Not Before: Jul 23 01:36:16 2026 GMT
            Not After : Jul 30 01:36:16 2026 GMT
        Subject: CN=6a617010-c933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:28:ed:21:cd:01:bc:d1:ed:c2:22:d8:43:
                    70:c3:d1:3c:07:56:e2:0f:0b:27:bf:ca:8d:06:e8:
                    16:b7:ce:d6:9d:9d:47:e2:c8:76:66:54:03:b8:f9:
                    54:d9:f0:ed:a4:fd:c8:b7:5a:d4:a2:f5:28:ec:b0:
                    f5:7a:43:fc:09:75:10:05:6a:37:30:8e:86:51:3b:
                    6b:8c:03:e4:c1:b7:55:d5:66:e6:21:d3:ca:d4:2c:
                    c3:86:53:0f:81:d0:4b:0a:fe:bf:9f:4d:d3:54:f4:
                    74:a1:fd:1c:0c:c1:84:7d:ef:af:3c:e7:6d:20:8e:
                    f5:8e:d9:8a:c0:93:5e:cb:09:6b:69:9c:bb:51:ab:
                    ae:83:8b:a0:79:4f:c3:c9:54:58:d6:14:61:cb:dd:
                    4c:53:77:1f:f2:e2:1e:58:93:08:55:bf:60:08:52:
                    a9:c0:13:f6:9b:c8:ea:b3:84:cd:a7:35:73:c9:c5:
                    3c:95:d0:22:5e:12:b8:1e:f1:80:2e:91:b2:81:80:
                    a6:99:78:3d:63:b4:3e:99:2d:10:8c:d5:71:29:b1:
                    8e:9a:14:83:89:ce:cd:0e:b9:c6:99:a7:10:e3:dd:
                    87:7f:87:70:e9:bf:a8:c7:23:29:f2:a9:cd:5f:a1:
                    0a:05:b3:45:93:f9:ca:b3:1e:1d:01:61:2f:a7:1a:
                    98:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EE:0D:E4:71:B1:A7:6F:A3:58:D3:F8:FB:65:A3:E3:24:42:06:7E
            X509v3 Authority Key Identifier:
                keyid:A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:6c:34:bf:eb:e1:29:10:28:00:4b:ee:45:3d:3a:b7:ec:fd:
         82:ca:0c:8d:f8:37:3a:dc:76:b0:69:dc:a5:d0:c4:c0:df:0b:
         5c:fd:1d:5f:bd:8b:02:ca:87:cb:15:8b:30:99:fa:4f:c4:0f:
         5c:a6:75:59:58:3c:90:b9:e1:8d:eb:2a:ef:db:89:de:eb:d3:
         fe:00:d9:14:c0:35:63:fa:7e:1b:e6:c3:e2:cc:2d:91:99:8a:
         a0:80:c3:c0:65:41:cc:3e:05:38:81:40:96:5d:b2:39:97:c5:
         f4:36:3e:c0:fe:46:d1:bc:94:39:f5:71:a3:da:24:cf:1c:bd:
         85:08:03:d1:b9:60:c0:a3:8c:f3:ec:45:d4:d6:96:2c:8a:89:
         db:ca:c4:87:ce:54:cf:94:3e:c3:0f:2c:07:e6:b0:81:4a:d7:
         a8:1e:fd:2a:aa:3b:5f:f5:39:e0:97:e7:43:ac:54:77:c4:2c:
         a7:fb:95:bf:bb:8f:26:01:06:77:c6:46:df:c4:76:28:ae:e0:
         91:5b:2c:4c:df:0c:7d:bd:56:d3:82:67:c3:54:3f:87:8e:1e:
         37:00:45:a2:3b:d3:0a:4a:0d:88:cd:c7:bb:f2:d0:b5:7c:3b:
         79:68:a3:c8:63:16:b7:2a:b3:1f:ea:01:74:b1:3f:33:a1:33:
         5b:72:c0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:34 2026 by rpki-client