Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
File:                     2m7mst6yYhOWAXC6ZYdieLLff84.mft (raw, json)
Hash identifier:          g4UAC5LIlVUbkbZk+6VxNLEB2l8qBB5VrJ5x3twmn3Q=
Subject key identifier:   1E:FA:3F:8F:03:0E:24:68:AE:5F:DD:DC:C0:FC:7B:C0:9F:AF:FB:C3
Authority key identifier: DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE
Certificate issuer:       /CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE
Certificate serial:       049D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
Manifest number:          0496
Signing time:             Tue 22 Sep 2026 23:36:44 +0000
Manifest this update:     Tue 22 Sep 2026 23:36:44 +0000
Manifest next update:     Tue 29 Sep 2026 23:36:44 +0000
Files and hashes:         1: 2m7mst6yYhOWAXC6ZYdieLLff84.crl (hash: SA5CAghkBTB0btxMKrfnRZFSb4s9+ujQOM5eXZa8B7A=)
                          2: E15BCDE69AAD11ECB4212E2AC4F9AE02.roa (hash: aeo+0u6kj/HbCCELyJjH0LNdDHk/8Y8ZluKCvUXbjJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl
                          rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1181 (0x49d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915429C, serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE
        Validity
            Not Before: Sep 22 23:36:44 2026 GMT
            Not After : Sep 29 23:36:44 2026 GMT
        Subject: CN=6ab3110c-a861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:c7:c7:0f:97:1f:8a:c9:8b:ee:f6:77:c8:
                    05:00:f8:39:7b:c9:c7:4b:fe:7c:1e:1d:9b:54:73:
                    f9:c7:29:d5:07:53:7f:ba:99:16:62:01:b5:fe:5b:
                    d6:0e:2e:90:14:30:6d:af:d1:06:b6:9e:0c:63:1a:
                    96:2c:fc:de:69:bf:05:2e:b8:64:d3:66:5f:99:b2:
                    2a:78:23:3b:5b:99:98:94:87:97:04:a6:0a:97:8d:
                    12:8f:d5:56:5a:23:d8:2b:1f:65:79:95:22:8f:f3:
                    5d:ed:fb:29:c2:e1:97:34:7d:7f:4d:f3:33:d7:13:
                    5b:88:41:87:3c:a7:ac:95:a7:31:1f:c7:ee:d4:40:
                    f3:cb:bb:53:b1:b5:72:16:bd:98:f3:6b:c5:c8:35:
                    96:83:06:6b:4e:86:38:08:5f:f1:fa:8a:dc:0f:53:
                    16:b4:c0:12:b2:9c:45:b5:2f:a2:ed:0c:32:58:e5:
                    0f:52:3d:e8:df:ea:f1:18:64:ef:e5:f1:67:2e:f2:
                    6b:8e:1f:44:3e:d2:3f:48:cf:df:40:b8:08:71:57:
                    8a:8c:63:27:19:3b:68:63:b2:f5:e5:7a:7a:07:fb:
                    67:1a:6e:5a:67:29:26:ac:a5:99:f9:f2:9f:9b:9b:
                    02:63:f1:94:a1:0d:22:c9:6e:d8:d9:6b:05:81:e7:
                    b3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FA:3F:8F:03:0E:24:68:AE:5F:DD:DC:C0:FC:7B:C0:9F:AF:FB:C3
            X509v3 Authority Key Identifier:
                keyid:DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:92:2f:14:64:86:b0:42:85:28:c2:92:90:e4:45:77:24:11:
         13:c8:ac:5d:07:b1:dc:4f:20:d4:f3:fe:64:b2:cb:05:de:f3:
         98:28:ee:de:3c:64:09:7a:d0:96:58:39:e2:13:28:05:a8:dd:
         a2:f2:40:81:4d:6c:e5:fa:96:6a:7d:c7:76:7f:b4:47:5b:c4:
         dd:bd:79:21:c5:9b:cc:a3:19:3b:82:e6:a5:c4:a5:7a:1d:6a:
         2e:94:4f:0c:16:37:99:f0:fd:00:79:a2:f5:ed:bb:7f:39:7c:
         58:f8:71:75:37:6a:ea:56:99:e0:a8:ae:b7:f2:e7:a5:56:1d:
         9f:37:7b:39:c1:b0:d8:a9:f5:34:a3:db:c7:87:cf:54:3d:77:
         04:14:e8:90:c4:48:ba:ad:1e:29:40:58:e9:f2:6a:65:65:1d:
         c0:38:81:fa:1c:64:f2:f3:8c:6f:42:e7:68:69:a8:11:2b:41:
         15:8a:c1:c0:65:45:01:3b:b2:1a:05:b5:12:03:a2:bd:23:c1:
         4a:ce:fa:3b:ab:a6:c2:b5:4f:4e:db:90:c2:75:a0:45:bd:94:
         7a:d0:0d:04:86:1f:4d:45:81:43:e8:de:0c:f7:0a:db:5b:db:
         98:ab:92:d3:be:b4:dc:41:b1:0b:d1:c5:62:96:2d:5f:e2:60:
         9c:06:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:45:32 2026 by rpki-client