Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft
File:                     2szbgPh19VKJMaiCXRqvoYCpsXk.mft (raw, json)
Hash identifier:          O3zMdj3biolKvear2hxvcxJQg/3xS8qKgGVZR1ko68M=
Subject key identifier:   37:28:DF:6E:96:01:FA:7E:47:F6:09:53:09:5D:DA:66:FE:F2:61:00
Authority key identifier: DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79
Certificate issuer:       /CN=A918D701/serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179
Certificate serial:       02A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft
Manifest number:          0299
Signing time:             Sat 03 Oct 2026 02:16:41 +0000
Manifest this update:     Sat 03 Oct 2026 02:16:41 +0000
Manifest next update:     Sat 10 Oct 2026 02:16:41 +0000
Files and hashes:         1: 2szbgPh19VKJMaiCXRqvoYCpsXk.crl (hash: aCYl5AvGou5HSarWa+eiSMY0lUjOpdzndn8CFpaGRPA=)
                          2: 98D5AE30C88C11ED907C1C0EC4F9AE02.roa (hash: ZjWTn7RPw7EchMonKVaN+HGBpWShBdJZb78EKus3MRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl
                          rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D701, serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179
        Validity
            Not Before: Oct  3 02:16:41 2026 GMT
            Not After : Oct 10 02:16:41 2026 GMT
        Subject: CN=6ac06589-b6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:7d:68:82:77:ca:6e:4c:9d:7a:74:54:86:
                    12:d3:0b:df:0f:97:66:e4:df:5a:b4:b5:61:8a:a0:
                    30:34:4c:44:b2:3f:ae:24:0c:17:5c:7b:32:51:31:
                    d9:27:41:74:f2:30:32:6e:ee:8f:d1:b6:94:f8:cd:
                    ef:5a:49:64:49:80:0d:fb:f2:0b:f3:12:65:bb:a9:
                    6b:f1:c5:34:13:25:d2:8d:69:55:ee:05:b6:75:dc:
                    1d:99:94:b5:93:f8:f6:25:c5:a4:e2:c8:41:ab:15:
                    0b:4d:15:16:bd:ed:06:94:78:45:f0:01:91:07:75:
                    2a:c4:fd:27:14:ae:94:bb:32:8b:d9:ca:02:33:81:
                    38:bd:e8:9e:ad:a5:b4:2e:b6:3d:42:1f:79:7d:eb:
                    76:d5:3f:69:aa:e7:6e:31:65:c1:4c:cb:af:bd:14:
                    87:40:68:f6:dd:a5:34:a7:97:ae:37:2f:29:ec:ba:
                    b5:39:e7:7e:bd:08:3a:f5:a3:fa:e2:e7:ee:39:0e:
                    5d:20:05:7c:bb:db:c8:a4:b1:54:f5:a2:91:47:2b:
                    55:dc:94:27:bb:8e:b7:c5:3a:a7:59:2d:23:73:20:
                    e6:50:12:c7:ef:64:8e:81:77:b5:c2:f1:51:2a:2f:
                    5b:8a:cc:4c:f8:ba:b5:c7:05:fc:88:3b:08:62:52:
                    55:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:28:DF:6E:96:01:FA:7E:47:F6:09:53:09:5D:DA:66:FE:F2:61:00
            X509v3 Authority Key Identifier:
                keyid:DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e6:07:fd:a1:79:f0:75:40:96:9e:05:57:90:df:45:fc:47:
         e2:e7:bf:3c:bf:0f:84:cd:c3:01:fe:d1:1d:9d:d6:7e:60:7e:
         bc:a1:88:08:1a:dc:9e:64:fd:a9:b3:0c:1b:f5:62:1f:82:45:
         c4:d3:9b:4b:88:fa:54:8a:1d:7e:ac:eb:9f:3b:69:2a:3b:db:
         96:da:17:d6:f7:97:06:10:3b:1a:ce:61:e9:ab:b9:34:46:fd:
         bd:1d:fb:da:12:3b:d2:2d:7a:a1:bc:aa:55:37:74:85:23:73:
         b4:76:54:b2:b3:97:b1:17:65:f7:60:4e:95:ac:ba:03:10:1c:
         81:d3:a0:37:22:53:33:bb:ce:4e:7b:58:61:85:07:2a:a4:91:
         aa:c1:e8:dd:d4:0f:1f:06:ee:07:49:b2:8a:4b:5a:43:68:23:
         f0:12:e9:75:eb:b4:ee:59:f8:7e:ef:d4:d4:27:b7:b6:9f:da:
         18:d7:05:14:ae:10:8e:05:8d:d6:f3:d3:8e:b1:01:d6:4a:99:
         53:29:33:cf:5a:cb:b0:c6:30:63:db:4b:b6:f6:1a:fe:c2:8b:
         8a:69:b5:f3:3d:57:2c:75:87:ec:ea:3f:a4:d3:2d:2e:93:ae:
         55:77:dd:f5:17:00:e6:78:75:ca:79:e3:5f:58:40:51:13:30:
         83:30:33:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:39:04 2026 by rpki-client