Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
File:                     2-mhAMSp66SyzRomcTKN73j-duE.mft (raw, json)
Hash identifier:          y+E/94tYVitZgZ5UJ1UWiWedPa51F7EhL9ARi5qef8I=
Subject key identifier:   51:C7:4C:30:86:57:24:08:70:EC:4B:36:62:6B:0C:F3:E2:BF:A6:9C
Authority key identifier: DB:E9:A1:00:C4:A9:EB:A4:B2:CD:1A:26:71:32:8D:EF:78:FE:76:E1
Certificate issuer:       /CN=A91AB74D/serialNumber=DBE9A100C4A9EBA4B2CD1A2671328DEF78FE76E1
Certificate serial:       06F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
Manifest number:          06EC
Signing time:             Wed 22 Jul 2026 22:54:17 +0000
Manifest this update:     Wed 22 Jul 2026 22:54:17 +0000
Manifest next update:     Wed 29 Jul 2026 22:54:17 +0000
Files and hashes:         1: 2-mhAMSp66SyzRomcTKN73j-duE.crl (hash: Si3oDpwMy//uMZCeumkVefsClghXJ7o+e68sd3I0K2I=)
                          2: A0D57302A33D11EBA479491CC4F9AE02.roa (hash: u5ce3mhL9MTgfMANLqmHFxu4YGZmlzL+s2cu4dHRCdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.crl
                          rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779 (0x6f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB74D, serialNumber=DBE9A100C4A9EBA4B2CD1A2671328DEF78FE76E1
        Validity
            Not Before: Jul 22 22:54:17 2026 GMT
            Not After : Jul 29 22:54:17 2026 GMT
        Subject: CN=6a614a19-3244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4d:29:6e:f9:07:1e:06:5f:b6:11:69:f1:9a:
                    38:54:ef:a4:75:ec:44:27:a0:b2:41:27:84:5f:08:
                    27:8f:76:12:ee:05:c7:95:41:1b:17:5d:bb:29:b4:
                    cc:3b:bc:c7:3a:2e:4d:0f:34:eb:62:1f:0d:b3:fc:
                    2c:a6:79:78:37:fd:7d:ee:10:20:e9:2a:ed:48:f5:
                    28:a0:44:17:29:a8:18:d9:b9:f2:90:3e:0d:56:02:
                    11:9d:35:e4:87:54:7b:4d:ee:78:93:e5:68:8f:14:
                    5f:ec:92:a7:f1:67:08:25:a6:b8:1d:26:26:7f:d9:
                    31:5d:6a:41:6d:fe:cd:af:81:d7:b1:e5:ac:48:75:
                    01:1d:cc:a9:6a:e5:78:12:47:1f:a5:b2:a1:a9:c1:
                    7e:f3:9a:54:d8:e5:c9:31:70:76:51:bf:5e:60:cd:
                    af:ea:aa:54:dc:b3:0f:14:06:dd:1b:4e:24:65:f9:
                    77:d0:c8:50:df:33:5a:fb:2f:4c:88:ab:9a:c1:d7:
                    9b:f3:c1:58:20:db:d1:87:ca:d1:43:4b:90:b8:67:
                    19:96:b6:0a:b0:cd:92:08:05:61:5d:65:61:15:b6:
                    42:43:ea:f0:84:19:47:95:65:9d:35:fd:e5:88:21:
                    07:36:91:0d:05:88:bd:d4:03:45:bb:9a:52:33:76:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C7:4C:30:86:57:24:08:70:EC:4B:36:62:6B:0C:F3:E2:BF:A6:9C
            X509v3 Authority Key Identifier:
                keyid:DB:E9:A1:00:C4:A9:EB:A4:B2:CD:1A:26:71:32:8D:EF:78:FE:76:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:08:ba:5f:53:73:5b:da:90:70:8c:14:df:91:eb:3f:5e:1a:
         5f:ca:a8:3b:b1:40:0d:3a:1b:6b:9e:2d:04:20:31:5d:ff:dd:
         d6:1b:24:83:77:18:d1:c1:b8:4b:d6:0d:74:b6:80:9a:8e:08:
         33:f2:28:39:31:46:87:4e:e4:10:16:b0:19:2a:16:cb:f3:64:
         b8:b5:f0:72:d0:86:68:03:0c:20:12:4c:69:7d:2d:75:84:d2:
         3c:19:81:59:18:85:b5:89:67:61:96:34:f5:76:fe:4b:56:74:
         cf:7e:45:5a:29:7a:29:54:b2:5c:50:97:35:7d:0e:b5:e4:15:
         98:a9:9b:a3:27:c7:5f:eb:fd:cf:58:32:21:6b:ca:5c:d5:78:
         db:06:db:50:c8:75:fa:6b:09:98:bf:81:8b:7e:b9:be:12:92:
         3e:ac:ff:f0:19:bb:5c:d4:eb:dc:f6:22:53:4d:bd:d1:ca:0d:
         d5:0b:0a:cb:69:96:a6:44:d1:a0:71:0b:e9:79:a5:a0:4d:73:
         f7:14:d4:30:61:63:07:a9:7b:6f:a3:4e:9f:38:4f:7b:91:93:
         20:f0:f0:65:83:f1:e5:dc:41:85:b0:af:66:a3:7d:6a:58:0a:
         ac:c6:fe:a4:30:18:e9:8e:98:05:eb:fb:73:5f:42:33:fc:de:
         e4:78:76:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:59:40 2026 by rpki-client