Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
File:                     C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json)
Hash identifier:          cfT7bifI92FgLzpwgH9v2fDXM9sIvz4EbZR7Z0ZKFmc=
Subject key identifier:   FB:4C:E9:1A:96:9A:94:06:C0:D8:17:92:1D:04:AB:47:C8:1A:F1:84
Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
Certificate issuer:       /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Certificate serial:       028F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
Manifest number:          027A
Signing time:             Thu 23 Jul 2026 03:23:09 +0000
Manifest this update:     Thu 23 Jul 2026 03:23:09 +0000
Manifest next update:     Thu 30 Jul 2026 03:23:09 +0000
Files and hashes:         1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: p/Heg25pz+yflThttEtdZtlJGWgCt/4fb3VAfQ+uzQQ=)
                          2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: yla7D14JuKJpPGHliDBzy+rAx/LALE2tcLnDIveEQL8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl
                          rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
        Validity
            Not Before: Jul 23 03:23:09 2026 GMT
            Not After : Jul 30 03:23:09 2026 GMT
        Subject: CN=6a61891d-af21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:41:d3:b6:a2:de:3e:18:54:c9:3c:da:d4:fe:
                    20:d9:5e:66:cb:b7:30:53:bf:90:f9:a8:ce:4d:4c:
                    16:15:f7:f6:a9:f0:e9:99:d8:76:85:14:17:97:8f:
                    e2:16:99:9d:1d:a9:04:e4:fa:86:4f:e2:60:2f:d5:
                    80:7e:d4:55:47:a5:8b:3e:18:2e:0b:09:bd:ed:61:
                    2d:17:ba:93:6a:2c:d9:7c:42:94:ad:20:97:9e:4e:
                    c3:9a:f3:4d:36:04:6c:ee:5d:f2:e8:c8:d5:18:d1:
                    42:de:33:9b:43:93:d0:4b:3e:e2:cd:b2:06:99:7f:
                    9f:b9:c6:e3:47:fe:71:aa:15:37:da:6b:45:86:c4:
                    1b:01:72:5c:21:4a:55:ae:61:13:aa:74:3f:3c:ec:
                    57:15:b7:8e:44:4c:2d:ce:ea:f2:f9:64:29:f2:cf:
                    db:6e:65:89:8e:80:a3:7d:a6:be:5a:59:9b:75:c6:
                    6f:ef:b2:c6:e6:44:36:fd:f5:ae:7e:c6:7c:ff:33:
                    8b:dc:04:de:45:29:34:fc:1b:4c:11:21:be:bb:88:
                    0f:9f:4c:d6:e0:85:d8:0c:16:a3:9f:eb:64:e6:98:
                    7c:ef:97:e3:21:e8:c5:50:ad:de:64:19:b4:c0:04:
                    a5:ad:a8:b1:ed:43:59:3c:25:22:c8:2a:bc:92:9b:
                    d7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4C:E9:1A:96:9A:94:06:C0:D8:17:92:1D:04:AB:47:C8:1A:F1:84
            X509v3 Authority Key Identifier:
                keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e5:93:d9:eb:a6:4a:02:bc:db:50:8a:be:c9:02:a1:63:e3:
         ed:a0:4d:22:3e:1b:68:df:84:24:c7:b7:99:21:83:80:6c:b5:
         55:dd:8f:9a:a2:64:be:50:50:d2:12:10:ec:23:91:b0:7e:d2:
         fb:df:45:f0:52:29:5c:8d:55:8c:10:38:8e:84:a7:b6:4a:63:
         19:e6:79:b1:7c:05:91:69:66:28:e8:cd:ea:fc:aa:43:56:e6:
         e5:ad:fa:45:b6:32:1e:16:3e:29:08:44:3e:00:5c:80:9e:2f:
         6d:d6:d5:f3:81:44:3d:ee:bd:26:da:9b:ea:a6:53:43:d0:58:
         ff:d8:d0:72:42:1d:b9:25:79:ba:25:4d:1b:72:56:b7:26:21:
         07:46:f5:79:c2:91:a0:36:31:05:0c:ad:61:c9:04:8e:5f:ed:
         ac:ec:f2:05:f2:d2:a3:56:d0:8f:a1:47:31:85:61:ee:ee:4a:
         35:89:bb:b3:66:e6:a6:fa:7c:c9:6f:8f:3d:ad:2b:4e:19:25:
         04:c4:9e:1d:a0:8e:9a:29:b5:ed:9b:a3:32:bc:9b:77:30:76:
         11:ef:bc:b7:7e:87:a2:fd:3f:15:94:9a:81:29:61:e1:f8:0a:
         27:b1:0d:c9:18:4f:c2:c8:4f:f1:b2:82:d6:89:a4:7a:3c:91:
         41:78:3c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:35 2026 by rpki-client