Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
File:                     2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft (raw, json)
Hash identifier:          xAcnowD4tYgAtdbK3BXN/2mqjP1ZRQHwxuoCsNysMo0=
Subject key identifier:   96:69:3A:BD:C5:26:C9:93:AF:08:AA:4A:F1:5D:E4:36:D7:6C:79:60
Authority key identifier: DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38
Certificate issuer:       /CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838
Certificate serial:       3569
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
Manifest number:          3563
Signing time:             Wed 22 Jul 2026 14:52:04 +0000
Manifest this update:     Wed 22 Jul 2026 14:52:03 +0000
Manifest next update:     Wed 29 Jul 2026 14:52:03 +0000
Files and hashes:         1: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl (hash: pcTLXPSlJtfY0/mbhSgZvcJeT3VmrZa2nmw5ZEG1azY=)
                          2: 10E0F1884D0C11EE81002274C4F9AE02.roa (hash: RTpAZwruc7NuoT/Wh4GeFBLqLMrhtkNDUYMQpCl+t8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl
                          rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13673 (0x3569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91889B6, serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838
        Validity
            Not Before: Jul 22 14:52:03 2026 GMT
            Not After : Jul 29 14:52:03 2026 GMT
        Subject: CN=6a60d914-20f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:40:e3:68:de:18:fe:cd:a5:f5:14:0a:13:
                    0d:09:32:9d:fe:75:e0:cf:fe:de:7d:4f:73:52:15:
                    02:a6:0a:0c:87:75:86:b1:07:58:a0:9a:dd:e2:c0:
                    d5:b9:e8:ba:ab:d9:b2:9d:7d:44:09:48:2d:0f:f3:
                    62:ba:2a:b3:f1:42:71:0b:a4:af:ec:79:0e:66:6a:
                    c6:d5:e4:bf:bb:e6:74:3c:5f:7f:94:cd:aa:83:86:
                    1d:39:e0:21:fd:20:ae:b7:51:96:e0:fd:b7:ad:12:
                    45:c5:63:20:1f:2c:94:8f:b4:da:67:33:7d:11:d7:
                    13:7c:a5:97:4d:f5:d2:46:d8:9f:13:47:c9:e6:ef:
                    1c:3d:1e:9b:3d:6c:fc:5c:c0:ad:06:f3:a4:c2:60:
                    ae:c6:f2:57:35:2b:34:61:d6:d7:ca:63:0a:c9:ad:
                    b5:dc:bd:a3:15:ee:35:c4:52:e9:db:cd:55:c8:6c:
                    99:4f:e1:e8:62:75:c1:6a:97:97:44:d1:c7:dd:1f:
                    f1:03:75:33:1d:f2:67:9b:bb:5d:b2:62:85:c2:30:
                    06:a5:79:65:46:16:c5:52:02:f0:be:49:a7:84:5b:
                    32:fb:c3:5c:9c:b5:c8:c9:df:ee:cf:4d:7d:8e:e0:
                    30:b2:51:4d:d1:6a:7f:81:4e:c6:6e:30:94:4d:61:
                    58:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:69:3A:BD:C5:26:C9:93:AF:08:AA:4A:F1:5D:E4:36:D7:6C:79:60
            X509v3 Authority Key Identifier:
                keyid:DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5c:16:9b:08:de:15:9d:85:fe:23:e4:13:39:f1:ba:88:4f:
         80:2b:25:b6:e7:b6:d6:be:44:5e:10:09:2c:de:3b:0a:91:1c:
         3c:b4:01:4e:c0:79:35:b9:10:36:d8:c5:73:01:4b:74:15:38:
         91:50:ba:2f:fc:b3:1e:99:f2:a4:f5:fd:d4:cb:75:df:64:cf:
         60:1f:e3:db:2d:c6:94:61:6c:81:de:f7:13:bf:d8:d5:05:b2:
         0d:9e:54:17:79:d8:17:a9:21:27:57:c3:d4:07:bf:e3:d9:b6:
         20:7c:78:0b:35:78:d0:42:42:68:b5:cb:54:1d:9e:69:37:d9:
         47:a1:27:81:f8:f0:a8:29:25:a7:6c:14:d2:93:1b:70:f9:70:
         45:76:1d:18:c4:2a:cc:6a:13:ca:c3:51:61:20:d0:a8:95:a1:
         28:8f:78:64:fc:5a:83:a1:cc:f7:8e:9b:b2:55:1b:9a:19:e8:
         ce:7a:4b:d4:65:72:75:b3:2c:69:11:41:2f:2e:3c:52:e5:bd:
         d4:12:b4:26:dc:32:bc:03:f6:9e:9b:31:2f:4c:8b:1f:27:d9:
         0e:1c:e5:9c:cf:ff:13:df:78:80:16:6f:f5:a0:96:1d:87:d2:
         eb:d3:47:00:e7:48:0a:d2:98:f9:37:13:08:95:62:14:55:94:
         94:b8:13:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:54 2026 by rpki-client