Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
File:                     C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json)
Hash identifier:          m6NNnF6uTNl+7Hw9D0Dz/iipoTkaLC6DmPXADPeB/U8=
Subject key identifier:   8F:90:E9:03:0F:E1:2F:85:F8:E6:F5:2D:92:A0:0F:B3:83:72:AD:78
Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
Certificate issuer:       /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Certificate serial:       02B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
Manifest number:          029B
Signing time:             Fri 25 Sep 2026 01:57:37 +0000
Manifest this update:     Fri 25 Sep 2026 01:57:36 +0000
Manifest next update:     Fri 02 Oct 2026 01:57:36 +0000
Files and hashes:         1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: 5hVukICF+NfUVw4PmFSZ3byx3LMpdz7aJdSKFDNyeHM=)
                          2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: yla7D14JuKJpPGHliDBzy+rAx/LALE2tcLnDIveEQL8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl
                          rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
        Validity
            Not Before: Sep 25 01:57:36 2026 GMT
            Not After : Oct  2 01:57:36 2026 GMT
        Subject: CN=6ab5d511-b1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:d8:fc:f1:6c:d9:c5:c4:98:59:7a:ed:0d:
                    77:80:6c:be:b3:5a:71:ee:6f:12:7c:4c:3d:95:a1:
                    f0:78:19:36:63:21:5c:b4:54:b4:ce:f7:c1:9a:58:
                    a8:aa:41:15:c1:e7:7c:14:7b:e5:20:cb:e3:b7:6c:
                    3b:c6:f5:13:d2:20:38:2f:fe:14:89:b3:fe:e6:bf:
                    cc:12:45:81:4a:e2:95:47:c0:70:fb:c9:09:38:62:
                    3b:97:70:b1:4d:ee:40:e2:e4:eb:d9:aa:89:89:86:
                    6e:5a:8b:c0:a7:64:09:9e:4d:4f:f7:6f:14:a6:e8:
                    46:9e:01:bd:ad:69:cc:54:e9:36:3e:83:ee:17:04:
                    24:6a:15:7a:f7:07:89:a8:89:28:6f:ba:98:15:13:
                    0d:36:e3:83:82:81:25:7c:57:a4:ea:d3:39:aa:49:
                    a5:89:eb:ff:04:c3:18:29:47:fb:9c:b7:70:f8:ae:
                    c6:07:31:04:bc:7d:09:5c:65:db:74:62:0b:37:c0:
                    12:db:f1:b0:70:79:e6:a0:36:41:a9:0f:f1:99:c3:
                    12:50:a0:25:b8:24:ba:4d:0a:49:f4:cd:f7:00:64:
                    a1:88:42:7a:bb:9c:d2:c3:27:36:d4:d8:a0:73:6f:
                    63:8e:40:ce:01:b2:68:b4:0b:73:b8:0e:0c:b2:3e:
                    63:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:90:E9:03:0F:E1:2F:85:F8:E6:F5:2D:92:A0:0F:B3:83:72:AD:78
            X509v3 Authority Key Identifier:
                keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:05:9f:2a:cd:00:1d:71:fc:23:f1:45:d8:24:3d:66:b6:e5:
         7d:f8:e5:2a:1e:1c:7e:9f:f8:97:42:13:dc:d5:a9:43:f5:96:
         11:24:d1:cb:81:a2:6f:fc:30:3d:c7:f9:31:5c:3f:b1:49:d2:
         a5:20:61:09:ab:26:7a:b0:7b:2c:55:a8:db:bd:b7:5e:44:4c:
         fe:4d:c2:f1:3f:af:f9:68:43:51:46:46:81:d0:70:75:54:cb:
         9e:72:9a:58:52:ac:84:18:f8:6e:94:2a:f9:3f:e4:e5:13:34:
         1d:57:a7:b2:ab:d2:19:a7:a2:5a:31:9f:e2:77:48:69:5d:af:
         53:8d:59:b2:95:ab:e1:d2:d8:85:06:6b:81:6d:29:48:71:c0:
         d6:a8:f2:9d:70:f9:87:b5:6a:aa:ea:58:12:2a:07:ad:65:90:
         0a:30:e4:b8:f4:bd:b8:73:b6:09:dd:2f:b9:5a:74:6f:d3:68:
         b4:62:38:2c:f2:6d:2f:b5:f7:e7:e6:22:51:c7:07:88:20:59:
         06:43:ed:c0:b2:ba:2c:81:5d:c7:99:81:81:77:31:bf:44:b3:
         e6:90:6f:be:8c:70:d2:f6:d7:58:85:e8:88:00:a4:d6:6e:cd:
         92:47:89:63:a0:6b:c9:62:8e:e9:5e:d3:be:40:fb:29:48:0e:
         4a:f8:93:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:31:24 2026 by rpki-client