Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
File:                     n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json)
Hash identifier:          ykeJFlhVUuXqwI/Dg7tEnE+un94SaeiMur0qthsEHPY=
Subject key identifier:   6A:59:8E:3B:99:1F:BC:25:5E:83:D2:49:99:4E:90:BA:9B:22:94:49
Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
Certificate issuer:       /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Certificate serial:       2C14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
Manifest number:          2BBE
Signing time:             Fri 24 Jul 2026 15:38:10 +0000
Manifest this update:     Fri 24 Jul 2026 15:38:09 +0000
Manifest next update:     Fri 31 Jul 2026 15:38:09 +0000
Files and hashes:         1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: nkxfCT6uTDNYYx3r+3MzIE6+2emaisbw9eAYaC1Y+Eo=)
                          2: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: RaV0EBH4fa+l9u1AYk3sjgFpJfu7SSd3dDIQo14KDEs=)
                          3: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: 25oLu27CZ0gv2qJnkcUs4150C/CVxdIojsajwReLNXs=)
                          4: BB799DA8844011F09054B049C4F9AE02.roa (hash: VrRFOlut3uTJjQcCOu3xElVoNRFtaOUQQFsO7k9dNnQ=)
                          5: 2AAD212086FE11F194514C90ABEE528E.roa (hash: STwQSq8DQE2VS7puIC3LaYb71CLa0EpjXHWsARHQLwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
                          rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 15:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11284 (0x2c14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
        Validity
            Not Before: Jul 24 15:38:09 2026 GMT
            Not After : Jul 31 15:38:09 2026 GMT
        Subject: CN=6a6386e1-af6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:51:88:02:39:2e:6c:63:27:46:92:3a:17:e1:
                    95:29:7f:f1:63:41:cd:5a:8a:17:89:e2:1d:e1:8b:
                    14:43:6b:a7:32:e0:2c:0d:c4:c5:26:8e:f8:16:00:
                    00:6f:05:ba:fe:05:4c:ec:dc:19:ad:69:2d:e8:72:
                    58:41:7e:b1:f0:f1:92:e5:cf:f1:ce:d1:29:47:df:
                    bf:cf:42:92:3f:00:2f:8e:01:dc:da:9a:75:a7:89:
                    49:e4:a0:d9:c4:a1:a3:c5:e5:c2:0c:d2:39:5e:97:
                    a6:67:ec:42:d7:90:2e:63:ea:1a:79:60:21:33:58:
                    41:1e:4f:fb:8d:70:1a:e1:4e:3c:1b:f1:2f:93:4f:
                    4a:c6:d6:fe:0a:ec:8f:6a:a5:16:b0:bd:5c:14:71:
                    bc:ef:ff:4a:b3:12:92:ac:b1:68:20:57:f3:c4:88:
                    7c:0d:d5:92:10:41:8c:d3:c7:1c:f7:43:fe:68:c9:
                    ad:f7:ed:ae:d7:cd:7b:06:a6:87:55:4a:95:b2:69:
                    ee:cd:d9:97:73:80:c1:fc:89:4d:98:4a:52:c3:c6:
                    43:57:fc:6d:5b:df:65:90:57:38:82:89:92:34:cd:
                    9b:32:40:54:61:24:f4:0b:74:0d:98:2a:16:fc:f7:
                    1a:25:a3:41:cc:cf:87:b2:d6:48:68:f5:cc:70:a5:
                    8a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:59:8E:3B:99:1F:BC:25:5E:83:D2:49:99:4E:90:BA:9B:22:94:49
            X509v3 Authority Key Identifier:
                keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d8:02:47:1f:cf:3b:2b:b9:54:7e:31:f9:12:ae:dc:15:f5:
         bd:37:b1:b6:01:34:5b:63:d8:fc:ce:96:22:87:64:20:ca:16:
         70:41:b7:8b:dc:d0:3e:e7:54:a6:89:22:00:71:4c:e4:20:86:
         ea:26:11:7b:a8:17:25:a2:6e:11:3d:6b:84:6b:57:f7:3e:9a:
         c4:ac:83:43:6f:c3:22:56:7e:e1:d7:8f:88:ba:2f:89:0d:8d:
         15:21:1b:eb:d8:2e:3a:1c:53:67:9a:4b:f9:9f:1a:b9:3c:1a:
         2c:02:ca:7a:01:0d:68:67:e3:b6:bd:ae:06:1f:5b:20:73:0b:
         c9:d9:27:9b:f4:1f:82:d9:29:12:2f:a6:36:81:3a:29:1a:0b:
         ec:f2:7d:c8:e9:4e:61:4a:69:6b:de:59:4a:58:85:73:73:4b:
         43:c7:8f:2d:c8:aa:3f:85:a4:61:f8:5a:a8:ca:74:c0:f7:4b:
         fc:76:9d:e8:82:1d:78:e5:30:b6:5d:88:d2:14:7b:9b:0c:23:
         c2:6d:bd:f5:3c:62:f4:8a:46:96:e1:ee:20:15:8b:f2:ae:b1:
         b1:54:35:3b:84:d9:f8:85:de:fc:12:7b:38:73:fe:1a:4a:bf:
         b1:36:21:eb:11:34:59:a4:a9:8f:f6:06:53:bb:d7:97:b5:47:
         e5:63:4b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:09:14 2026 by rpki-client