Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
File:                     2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json)
Hash identifier:          ycj3fQRiVT9Qut+YCa+08nAMYXuVKrWmZ1HLPUYHcBw=
Subject key identifier:   D5:EF:1D:ED:49:AB:15:62:24:34:ED:DE:EC:EF:63:E0:28:C9:4F:7C
Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
Certificate issuer:       /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Certificate serial:       028B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
Manifest number:          0284
Signing time:             Thu 23 Jul 2026 02:56:49 +0000
Manifest this update:     Thu 23 Jul 2026 02:56:49 +0000
Manifest next update:     Thu 30 Jul 2026 02:56:49 +0000
Files and hashes:         1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: lNDMjpD85cKLXIRd5BUZf/vYONDU4hm+a2Z4PaCixjE=)
                          2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 4E7B7eClCEG5d3gzWwa9hz6tdWf+XUY9sPo6EaTao1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
                          rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 651 (0x28b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
        Validity
            Not Before: Jul 23 02:56:49 2026 GMT
            Not After : Jul 30 02:56:49 2026 GMT
        Subject: CN=6a6182f1-85bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:26:44:13:2e:af:4b:53:95:38:31:6f:02:
                    ae:54:17:fc:ad:81:75:60:6b:cc:53:45:de:be:f4:
                    35:33:ac:c7:41:a5:13:ea:fb:fb:d0:3b:4f:09:a1:
                    c1:27:0e:77:9d:32:81:9f:8a:34:7a:52:a3:28:aa:
                    49:3d:a6:b7:62:a4:02:02:d8:a7:6b:bb:40:3f:94:
                    f8:39:0a:73:99:9c:97:d1:4c:38:c7:9e:b4:d9:b2:
                    15:e8:a4:8c:05:e2:f4:0b:83:7c:5b:12:e2:5a:73:
                    d1:9b:29:f6:5e:74:e5:cc:d0:3e:79:48:2a:66:f4:
                    00:2f:05:76:67:c3:d1:9f:30:49:94:7a:86:3a:82:
                    db:25:50:49:43:1a:44:9b:93:4c:93:9d:5a:c9:f5:
                    cf:4f:ca:c9:92:54:57:c5:bf:87:3f:61:bd:5a:f4:
                    cc:4f:4d:de:92:db:92:28:81:c9:ad:cf:56:2f:a1:
                    35:3f:cd:2e:17:87:7f:b5:05:cd:4e:52:aa:e3:73:
                    77:d0:2d:7d:56:18:e2:7a:a6:8d:6a:1a:3a:34:b4:
                    ad:c1:dd:0b:01:fb:cb:90:cc:e7:a1:06:16:f1:ec:
                    4e:7b:3f:88:26:e4:14:47:bb:c5:17:37:28:b8:4f:
                    ec:f8:b3:75:fb:98:9d:f0:c8:4a:18:fa:ba:8e:05:
                    45:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EF:1D:ED:49:AB:15:62:24:34:ED:DE:EC:EF:63:E0:28:C9:4F:7C
            X509v3 Authority Key Identifier:
                keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:00:12:1f:6c:d9:32:37:3c:2d:dd:3c:73:8a:55:81:b7:95:
         0c:3c:d7:23:9b:7b:c1:08:42:62:f0:7c:f9:c1:3f:09:f5:e8:
         4b:61:e5:d6:53:84:87:86:49:c9:a3:18:a1:81:35:50:20:1f:
         78:e8:04:06:35:ff:d9:c6:9f:2f:86:5d:4b:66:8f:33:7f:0e:
         27:d6:41:db:45:43:de:a9:a6:6b:07:4b:25:33:38:4f:8b:5f:
         0b:1f:7f:4b:b4:8f:ca:aa:e1:1f:0f:64:b9:97:28:61:16:69:
         34:39:5c:da:a4:07:2b:99:ff:b8:f0:68:22:b4:1d:17:2c:28:
         2a:ba:fc:1e:96:e7:f9:79:9f:d6:3f:29:71:df:f2:b2:d0:0d:
         8d:74:9c:42:39:28:8a:5d:96:eb:3a:05:0b:b6:dc:dc:df:5b:
         76:ef:e4:73:45:88:18:cb:4b:36:44:4f:c2:c1:b1:42:d7:a2:
         61:b1:93:a9:a9:d2:ff:98:ce:4d:52:be:a0:14:56:4d:f1:43:
         59:7d:f7:de:7d:ce:a6:1c:63:23:71:f0:8b:f4:7d:bd:e7:10:
         d7:a8:8b:88:02:36:c9:4e:31:63:15:b1:30:b5:01:72:04:9e:
         b2:78:55:0c:78:95:c4:4a:46:3d:cb:82:98:4d:be:bb:56:78:
         23:b3:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:33:03 2026 by rpki-client