Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft
File:                     2TXs95kTG-wkONqd6CtoWJY8cFw.mft (raw, json)
Hash identifier:          KQ0lYzEQJ0xtH1rS79rf49HRc9TJLrzgeNdbVZxfl+A=
Subject key identifier:   98:56:07:E0:36:79:C5:AF:E7:E5:A7:F0:72:E1:BC:22:3B:98:4A:17
Authority key identifier: D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C
Certificate issuer:       /CN=A91547E4/serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft
Manifest number:          82
Signing time:             Thu 23 Jul 2026 09:39:17 +0000
Manifest this update:     Thu 23 Jul 2026 09:39:17 +0000
Manifest next update:     Thu 30 Jul 2026 09:39:17 +0000
Files and hashes:         1: 2TXs95kTG-wkONqd6CtoWJY8cFw.crl (hash: Dr7pN+vVkK5ZRc0YeJ+iCbXRP2LMDEIuoVCQFDsY6H0=)
                          2: 46BCC40E4F7E11F190CC27DCCD833773.roa (hash: Nghl/gGf3uzD6ZNyf47Xvx/I/pPxvMZUhYSQpT2Rhp8=)
                          3: 534E797A4F7811F1AC63D401CC833773.roa (hash: dAbQc+dld6yEP+cMR+R2W2FXFJfIm0ApZqmWogVGSbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl
                          rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91547E4, serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C
        Validity
            Not Before: Jul 23 09:39:17 2026 GMT
            Not After : Jul 30 09:39:17 2026 GMT
        Subject: CN=6a61e145-2a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1b:21:67:69:d4:55:ba:6d:2b:5e:83:76:ae:
                    1c:3b:53:ed:f3:d0:38:c8:73:1b:aa:92:96:f9:92:
                    6b:fb:13:02:07:6e:31:f6:f8:1e:8a:7a:fe:28:ea:
                    7e:e8:ee:e6:86:33:53:1a:c5:2b:33:ef:bc:d9:d1:
                    79:29:c1:b3:af:db:d1:d6:99:06:92:2a:93:92:18:
                    6f:50:ef:64:68:52:08:d1:da:32:a8:fa:2f:1c:c4:
                    55:8b:c0:38:2c:dc:25:79:97:f3:35:27:7f:00:e8:
                    05:ec:c6:49:5f:17:53:b6:8e:8a:30:51:3d:3d:9b:
                    e0:89:6a:f8:9b:36:c1:bc:a9:ee:ee:25:75:3a:fd:
                    41:43:70:ff:7d:ce:91:9e:c4:00:cd:03:c1:c1:c9:
                    f0:1c:27:32:39:44:cf:1e:99:ed:25:7a:f3:9d:0f:
                    20:4f:14:04:37:01:d9:28:b7:db:40:12:e4:b1:7f:
                    78:d1:87:9a:81:90:f9:eb:47:97:32:6e:97:d5:7f:
                    ce:a3:38:89:3a:60:0d:e1:47:eb:49:cb:56:71:af:
                    95:89:ae:6c:e4:01:c7:21:8b:6f:56:20:dd:05:ef:
                    6a:70:ad:7c:d0:7e:05:ab:c6:56:da:d5:f1:ed:0c:
                    5f:db:00:3f:7f:37:59:dd:56:9c:2b:a3:79:c0:9d:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:56:07:E0:36:79:C5:AF:E7:E5:A7:F0:72:E1:BC:22:3B:98:4A:17
            X509v3 Authority Key Identifier:
                keyid:D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b7:06:94:d1:66:69:b5:4a:4e:2f:d1:58:26:4a:00:b9:8d:
         8f:fb:d7:23:c6:99:33:71:9c:1b:2c:ac:9d:72:34:f7:0c:6a:
         e1:16:ee:cc:d2:fa:ff:3a:1d:eb:fe:aa:80:18:ec:75:3a:2e:
         e2:bc:43:88:7d:d0:64:8c:5c:f5:5b:a8:e2:a8:8c:86:06:cb:
         c4:21:32:a6:df:c0:7e:6a:d0:9d:63:8f:56:91:67:69:3c:6e:
         8b:ea:19:36:67:b0:d0:2f:7a:20:54:65:94:15:24:c2:25:d4:
         07:8f:8f:12:33:74:fd:ac:d7:d1:2c:44:3a:c6:dc:f1:23:c2:
         44:c8:91:ec:21:03:5f:0c:b2:34:7c:91:0c:ea:46:fa:70:69:
         1f:c3:a1:85:b2:9b:1f:16:b7:10:ff:24:a5:ec:b5:99:7a:5e:
         85:3d:c9:3d:a2:4d:67:ef:b8:7a:3c:90:76:a1:b3:ed:2c:82:
         dc:19:c5:94:84:ff:6c:8b:59:53:fe:a5:01:4e:8e:86:fe:a5:
         04:1c:ce:43:0f:fc:8d:4b:fe:00:99:9f:0e:6c:71:69:bc:bb:
         93:3b:7d:cc:a2:06:3c:e2:6b:fb:3d:aa:31:ea:87:d3:20:a7:
         30:cd:b7:17:30:01:a2:f0:7c:3d:87:38:37:bf:90:6e:29:87:
         99:53:0d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:18:46 2026 by rpki-client