Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft
File:                     2HXmPHNQjdifas3MBgFEoIwIZtw.mft (raw, json)
Hash identifier:          By71fLDrAGQ5gmbWvRKm0qUgCV53kihEwMLGKtbVAgA=
Subject key identifier:   77:AD:02:79:B2:80:AD:67:0B:3C:DC:F7:8C:D5:01:45:AD:98:A9:F5
Authority key identifier: D8:75:E6:3C:73:50:8D:D8:9F:6A:CD:CC:06:01:44:A0:8C:08:66:DC
Certificate issuer:       /CN=A914E950/serialNumber=D875E63C73508DD89F6ACDCC060144A08C0866DC
Certificate serial:       049C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft
Manifest number:          0495
Signing time:             Thu 23 Jul 2026 00:49:00 +0000
Manifest this update:     Thu 23 Jul 2026 00:49:00 +0000
Manifest next update:     Thu 30 Jul 2026 00:49:00 +0000
Files and hashes:         1: 2HXmPHNQjdifas3MBgFEoIwIZtw.crl (hash: N7uKG1iYH+TSU2F7HrbfTXzSncGAwjhay5+jYv9ybbM=)
                          2: 6199B5668DE011ECB9F9C06EC4F9AE02.roa (hash: gXnStk1MwegllJpHCk0mKvppBMmur0BRxsppyW6UBsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.crl
                          rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1180 (0x49c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E950, serialNumber=D875E63C73508DD89F6ACDCC060144A08C0866DC
        Validity
            Not Before: Jul 23 00:49:00 2026 GMT
            Not After : Jul 30 00:49:00 2026 GMT
        Subject: CN=6a6164fc-21b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:8d:bb:0f:f7:61:69:a4:84:39:d3:b1:59:
                    0b:9a:d2:a4:17:f8:ab:1a:3d:23:aa:9a:47:cb:c3:
                    6a:fb:b6:57:94:8f:f9:88:6b:6b:a7:88:a9:80:19:
                    58:d1:64:7f:74:54:65:ae:51:c2:e0:8b:9b:5d:5a:
                    87:20:91:bf:67:8d:35:c7:4e:7b:68:53:6a:e4:aa:
                    d6:d5:d3:57:0b:e5:87:8c:a3:5e:97:6f:9b:35:cc:
                    ed:fd:92:1b:2c:77:e5:67:9d:52:60:53:f8:93:17:
                    88:62:11:01:b8:c4:17:e5:9d:57:6b:6f:08:d3:e1:
                    9f:39:9e:9b:64:51:c3:73:22:06:e0:79:6a:10:d4:
                    a5:d6:5e:52:bd:0c:0e:26:86:92:11:da:37:79:16:
                    9f:f1:e9:75:63:ce:62:2a:8c:93:6f:87:93:ac:3d:
                    d1:80:8e:23:9e:73:13:a3:32:ae:b9:97:a6:31:f0:
                    ae:6d:c3:fa:a7:9a:80:e7:ee:74:fd:1b:f1:97:9a:
                    fd:b2:2f:50:34:65:ea:86:07:17:e1:af:6e:b6:95:
                    d3:2f:ca:74:44:4a:4d:92:66:b2:eb:02:d5:b1:28:
                    64:7f:9e:85:50:09:08:82:7c:c4:1a:3a:8b:6f:86:
                    80:62:d9:46:78:f6:ba:eb:23:23:57:3d:f4:9b:d1:
                    0c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AD:02:79:B2:80:AD:67:0B:3C:DC:F7:8C:D5:01:45:AD:98:A9:F5
            X509v3 Authority Key Identifier:
                keyid:D8:75:E6:3C:73:50:8D:D8:9F:6A:CD:CC:06:01:44:A0:8C:08:66:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:69:ca:e3:6c:cd:10:71:87:ff:0d:cb:fb:e9:be:6e:22:59:
         b6:6a:8f:bb:b4:04:f2:78:3b:ae:fd:c9:d5:06:49:d4:0e:7b:
         b0:ae:16:4d:6d:51:79:58:31:b4:24:ce:4c:5f:f6:d4:b0:ce:
         5b:3c:04:92:fb:07:15:b0:84:61:b4:d8:20:b8:a0:b0:06:ea:
         7f:15:8b:36:6f:0c:b5:5a:45:6f:3b:a5:52:8d:f6:f0:e3:df:
         b7:63:35:45:4d:db:c1:e5:df:c2:b6:4e:5d:f9:84:55:ce:e5:
         1a:ef:3b:a6:ad:f6:c7:f2:35:a7:20:3b:0f:95:f7:11:ae:96:
         6e:e9:45:74:5b:41:fd:b9:f2:5f:e4:ea:a3:be:cb:22:6c:49:
         70:ef:a9:14:94:76:bc:c8:2a:c6:c0:11:6b:99:55:04:24:0d:
         cc:15:8d:19:9b:de:25:ba:58:7f:89:38:06:d8:60:21:0a:3d:
         b8:7d:8a:28:22:bc:f9:0d:28:28:50:33:4a:3d:20:af:1a:ee:
         0c:c6:7c:26:63:83:8a:e6:22:e5:70:08:f0:a8:5e:57:c1:07:
         da:3f:42:dc:4f:f5:84:8a:75:80:46:f0:38:14:31:22:8d:a8:
         aa:0d:da:c3:4f:a9:50:ea:72:3e:99:77:ea:84:a9:c9:18:d9:
         6b:ef:a5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:53 2026 by rpki-client