Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
File:                     2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json)
Hash identifier:          lcyhP13mOLySWlOHuRgN/fUpD4d7LFD8Q625zD2FJCQ=
Subject key identifier:   AF:5E:19:33:18:0E:F9:69:42:FF:EE:C6:05:33:A6:CA:98:24:6A:22
Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
Certificate issuer:       /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Certificate serial:       0520
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
Manifest number:          0514
Signing time:             Thu 23 Jul 2026 00:27:28 +0000
Manifest this update:     Thu 23 Jul 2026 00:27:28 +0000
Manifest next update:     Thu 30 Jul 2026 00:27:28 +0000
Files and hashes:         1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: DoICg4opZe+nfvxO3KVjH4uMQYktOhAQHBTP/I+Qhn0=)
                          2: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: bPO66cPU1SPGOc5KH5eGrolnSN1m6sptmbmqTiJIuEU=)
                          3: E03427482D2411F192A7D59AB8833773.roa (hash: jK7mks1MMjJvVIyRYKwMkRBkaa32MR5Py6W7RYY9KqA=)
                          4: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: CP9FAdKBke/NciieBtLRTUYPVa+mGRMYkC3JaQUvBRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
                          rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1312 (0x520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
        Validity
            Not Before: Jul 23 00:27:28 2026 GMT
            Not After : Jul 30 00:27:28 2026 GMT
        Subject: CN=6a615ff0-7466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:52:d0:1d:6c:ce:08:80:b6:d0:f9:c6:63:28:
                    d5:26:22:9e:df:34:ec:d2:27:ae:8a:d3:aa:2c:d8:
                    58:db:a2:21:60:e3:6f:d9:e5:d4:b0:2f:87:6f:c0:
                    c8:b5:85:f8:e8:79:32:e0:e7:1e:93:b9:0e:a9:bd:
                    fb:5f:2d:51:11:16:a8:d4:bd:ac:b0:14:cd:61:c7:
                    a8:51:3c:1d:d0:dc:64:1f:e2:e6:cc:5d:83:6e:c6:
                    7e:c1:c6:49:8f:bd:94:20:4c:5c:bd:74:d4:63:90:
                    04:4f:8b:e1:4b:75:83:fb:78:35:d6:1e:51:26:e8:
                    55:0f:d2:67:a4:9d:33:c8:7e:ed:1a:44:84:53:b3:
                    2e:b3:7d:19:98:fe:f7:4d:ad:6e:0e:81:a3:48:a2:
                    1c:4f:d2:ab:56:15:d7:3d:66:a9:f5:8d:70:9a:c2:
                    58:09:93:48:81:65:ec:1a:82:03:8f:d5:55:cd:c0:
                    de:cc:8a:62:e5:13:23:94:88:ca:7a:aa:d3:88:7f:
                    1d:e4:89:71:e1:0a:a0:31:11:9d:04:3e:0f:6f:3a:
                    a6:6f:88:87:e7:1c:80:69:05:b8:14:4b:ee:6a:ec:
                    80:90:e0:42:a8:72:1b:96:a2:df:5f:ac:03:83:3c:
                    4a:e3:53:fe:a3:2b:2a:39:33:9b:27:d3:b3:7b:ad:
                    77:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5E:19:33:18:0E:F9:69:42:FF:EE:C6:05:33:A6:CA:98:24:6A:22
            X509v3 Authority Key Identifier:
                keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e8:05:51:d1:cb:e6:34:cd:51:38:85:8c:e1:95:7a:ee:ad:
         fe:88:8a:61:cc:4b:a9:68:3d:ae:b1:db:ed:76:45:db:14:c1:
         cb:7a:d1:97:36:a6:58:f5:3f:57:78:26:ce:42:fd:27:d7:56:
         fb:a3:5d:67:f7:78:23:05:bd:dc:5b:0d:e9:69:58:b2:de:59:
         53:72:4a:de:64:46:38:38:34:8a:b6:86:9e:04:fe:ca:b2:7d:
         c6:a7:f1:c9:cc:36:87:44:23:79:95:8a:49:f6:f3:f9:89:26:
         22:2c:fd:2d:9e:19:fe:68:bf:dd:5e:4b:61:39:e7:ff:1a:e9:
         5e:6a:f5:52:2a:fa:09:8b:2e:30:06:ae:b6:04:06:a4:a2:36:
         5c:5e:3f:5f:aa:a5:45:0e:9a:0a:41:3d:17:cc:7e:eb:dd:2c:
         aa:d4:62:76:ca:53:86:35:f4:f2:3f:ad:f3:b0:c6:c0:b6:e6:
         3c:14:b8:fc:a5:97:d9:4f:9d:27:a2:3b:27:0e:49:2f:e3:11:
         2c:2e:dc:88:29:80:ce:b3:8d:84:be:bd:3e:35:f0:e7:a3:b5:
         0b:c7:53:f7:33:f3:1a:dd:78:16:52:9b:64:38:7e:b5:f1:52:
         66:2e:98:f0:7c:99:0e:b1:9f:7a:ce:12:bd:67:9d:5f:eb:96:
         ca:d7:1d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:01 2026 by rpki-client