Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
File:                     2m7mst6yYhOWAXC6ZYdieLLff84.mft (raw, json)
Hash identifier:          wjq27LpdRTG1vHGqvFepwpLIc7EPncpIeM0AxMPs/Ew=
Subject key identifier:   50:69:27:20:1D:78:C0:E3:58:2A:73:50:2C:00:02:2C:FE:49:E0:4A
Authority key identifier: DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE
Certificate issuer:       /CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE
Certificate serial:       047D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
Manifest number:          0476
Signing time:             Thu 23 Jul 2026 00:56:09 +0000
Manifest this update:     Thu 23 Jul 2026 00:56:09 +0000
Manifest next update:     Thu 30 Jul 2026 00:56:09 +0000
Files and hashes:         1: 2m7mst6yYhOWAXC6ZYdieLLff84.crl (hash: hdqQWZM6iOyR+SA2cnxjycmpQUTfoelPWR1JocZggKc=)
                          2: E15BCDE69AAD11ECB4212E2AC4F9AE02.roa (hash: aeo+0u6kj/HbCCELyJjH0LNdDHk/8Y8ZluKCvUXbjJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl
                          rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1149 (0x47d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915429C, serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE
        Validity
            Not Before: Jul 23 00:56:09 2026 GMT
            Not After : Jul 30 00:56:09 2026 GMT
        Subject: CN=6a6166a9-3a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:e1:d4:23:f2:02:bc:4d:d0:07:1f:40:cc:
                    6e:c7:d0:27:c8:26:dc:cf:f7:d4:25:4a:5a:e2:be:
                    61:58:0a:0b:7d:fb:6f:9d:bc:7c:1f:29:9e:67:0c:
                    f2:81:42:01:b1:f6:a5:ac:d1:26:02:d6:b3:87:ba:
                    9f:54:34:63:17:3a:4a:7c:43:2c:34:48:a8:9c:76:
                    e3:8f:e1:02:28:e4:05:0b:67:71:07:38:fa:4a:bf:
                    ea:c6:ca:5a:f9:f4:3f:9a:9d:0c:30:0c:f3:3c:96:
                    8f:c6:d1:c4:3a:dc:67:c0:af:29:74:b6:bd:fa:65:
                    f4:c5:d1:97:6b:fe:e4:1a:f7:5e:9c:e3:49:9d:ae:
                    0d:c8:f2:47:43:ba:8a:15:e0:79:e2:18:9a:f2:4e:
                    8d:86:8e:12:93:3b:af:68:7f:10:20:ea:b5:4e:a7:
                    1f:5f:70:6e:f2:08:8d:15:4b:7b:ae:3f:8e:13:61:
                    09:07:77:23:b5:56:bb:f5:b3:ca:60:44:31:a7:c7:
                    7a:d2:7c:a2:0e:ab:0c:24:cc:90:66:fd:9a:86:72:
                    de:9d:48:7c:42:43:e9:dd:62:6c:df:b7:8e:99:b4:
                    da:32:38:b6:f1:01:2b:20:1e:0a:98:df:e8:0f:91:
                    ae:f3:3c:ae:b7:12:be:86:1c:fc:72:dd:d8:10:cf:
                    a0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:69:27:20:1D:78:C0:E3:58:2A:73:50:2C:00:02:2C:FE:49:E0:4A
            X509v3 Authority Key Identifier:
                keyid:DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1a:9e:7e:12:51:1b:14:fc:eb:57:1f:d7:b7:e2:93:f3:42:
         29:fa:9e:ce:3c:e2:df:dc:c6:83:7a:cd:db:ab:51:d8:f4:e8:
         df:16:64:f7:7a:c0:36:42:49:66:7b:1a:ac:cc:91:34:8a:12:
         de:bd:2a:5d:da:1a:96:d8:09:e7:61:7e:fd:25:78:3e:fa:61:
         d7:51:36:fb:c2:3b:6a:56:4f:ac:31:2c:f3:dd:c8:2f:80:c4:
         fc:80:11:76:e2:b9:cd:91:57:4d:88:8e:96:5e:57:95:22:04:
         f6:21:cd:ae:f3:f9:bd:c2:4e:10:ed:57:72:f3:81:70:1e:98:
         20:00:f3:4e:d9:91:76:ea:53:78:c8:9b:63:82:0d:f4:34:31:
         53:c4:95:a8:a7:3b:19:14:59:d3:dd:13:52:a2:bd:d0:8c:86:
         4d:b3:0b:97:b2:f8:65:30:d7:be:29:3e:90:6e:69:62:26:59:
         5c:54:28:53:df:23:07:4e:de:72:67:7b:6c:13:57:fb:0c:c2:
         1f:06:a1:89:76:07:bb:2a:3a:63:e0:81:2e:ec:d0:5e:1a:1c:
         49:1a:f7:0f:f3:d5:de:43:8a:f2:6e:ef:64:97:fb:50:78:e1:
         d3:3b:9d:d9:71:d5:75:95:08:6d:3d:f9:41:3a:ab:a6:06:82:
         95:b9:99:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQyOUMxMTAvBgNVBAUTKERBNkVFNkIyREVCMjYyMTM5NjAxNzBCQTY1ODc2Mjc4
QjJERjdGQ0UwHhcNMjYwNzIzMDA1NjA5WhcNMjYwNzMwMDA1NjA5WjAYMRYwFAYD
VQQDEw02YTYxNjZhOS0zYTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArXHh1CPyArxN0AcfQMxux9AnyCbcz/fUJUpa4r5hWAoLfftvnbx8HymeZwzy
gUIBsfalrNEmAtazh7qfVDRjFzpKfEMsNEionHbjj+ECKOQFC2dxBzj6Sr/qxspa
+fQ/mp0MMAzzPJaPxtHEOtxnwK8pdLa9+mX0xdGXa/7kGvdenONJna4NyPJHQ7qK
FeB54hia8k6Nho4SkzuvaH8QIOq1TqcfX3Bu8giNFUt7rj+OE2EJB3cjtVa79bPK
YEQxp8d60nyiDqsMJMyQZv2ahnLenUh8QkPp3WJs37eOmbTaMji28QErIB4KmN/o
D5Gu8zyutxK+hhz8ct3YEM+gSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFBpJyAd
eMDjWCpzUCwAAiz+SeBKMB8GA1UdIwQYMBaAFNpu5rLesmITlgFwumWHYniy33/O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDI5Qy9FNkIyNTRGODlB
QTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVloT1dBWEM2WllkaWVMTGZm
ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJtN21zdDZ5WWhPV0FYQzZaWWRpZUxMZmY4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDI5Qy9FNkIyNTRGODlBQTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVlo
T1dBWEM2WllkaWVMTGZmODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaBqefhJRGxT861cf17fik/NCKfqezjzi39zGg3rN26tR2PTo3xZk93rANkJJ
ZnsarMyRNIoS3r0qXdoaltgJ52F+/SV4Pvph11E2+8I7alZPrDEs893IL4DE/IAR
duK5zZFXTYiOll5XlSIE9iHNrvP5vcJOEO1XcvOBcB6YIADzTtmRdupTeMibY4IN
9DQxU8SVqKc7GRRZ090TUqK90IyGTbMLl7L4ZTDXvik+kG5pYiZZXFQoU98jB07e
cmd7bBNX+wzCHwahiXYHuyo6Y+CBLuzQXhocSRr3D/PV3kOK8m7vZJf7UHjh0zud
2XHVdZUIbT35QTqrpgaClbmZVg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:05 2026 by rpki-client