Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft
File:                     2fpCBt8OmUfNUB39UlsuRmlv1EI.mft (raw, json)
Hash identifier:          w7NNjw7vYVEETKGNlG0qggn1l06Xkw+Qby5b+SzhZVo=
Subject key identifier:   85:32:03:F3:02:80:DD:E0:86:1A:EB:53:DF:6A:66:7C:F8:F7:66:A4
Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42
Certificate issuer:       /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft
Manifest number:          01D6
Signing time:             Wed 13 May 2026 03:44:35 +0000
Manifest this update:     Wed 13 May 2026 03:44:35 +0000
Manifest next update:     Wed 20 May 2026 03:44:35 +0000
Files and hashes:         1: 2fpCBt8OmUfNUB39UlsuRmlv1EI.crl (hash: HkJNHr4NO6WG8Dr1DWsq7ojY82zBbUHo6PEEjUzhnbU=)
                          2: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (hash: McXWsXXcIZmHr1+c7MXfi1yOdfqnkuMIhVjsAcxCbA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl
                          rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D40B, serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442
        Validity
            Not Before: May 13 03:44:35 2026 GMT
            Not After : May 20 03:44:35 2026 GMT
        Subject: CN=6a03f3a3-d28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:ad:22:05:58:47:ee:9d:59:9e:23:4e:4a:
                    61:04:56:6f:db:d0:a3:23:93:85:39:0f:9a:89:1c:
                    47:dc:81:01:7a:a8:d7:49:eb:07:0a:37:7b:8c:e9:
                    bc:25:47:29:70:61:e7:9d:5b:14:88:9a:f8:c5:1f:
                    90:33:3f:41:5d:23:05:14:11:16:cf:3c:fd:1f:bd:
                    22:27:83:4a:e9:9e:b0:7b:92:bc:f4:4e:0f:96:6d:
                    4d:40:16:2a:68:f0:55:91:aa:09:24:f8:0b:41:75:
                    07:c5:e2:43:7e:cf:9f:4b:26:b6:cc:ab:05:e3:7b:
                    7d:b6:32:a9:f7:b6:6f:14:79:13:e2:11:96:69:6b:
                    dd:47:d7:d3:22:87:b3:6f:a3:9f:95:8b:f2:54:e2:
                    42:67:1c:bb:d9:3e:40:4a:64:1d:43:f6:0e:fe:bc:
                    e2:69:03:74:28:af:d1:21:f3:97:90:00:ce:3a:ab:
                    0b:d6:ba:2d:47:0f:99:53:25:8e:36:56:aa:1a:a5:
                    57:57:57:ca:f6:32:20:5e:ef:08:95:1b:29:e6:21:
                    72:04:c7:d0:4d:c1:37:8a:ab:e2:80:4c:1f:71:67:
                    a0:61:ba:c2:2a:ef:79:5c:22:69:3b:2d:63:12:2a:
                    31:38:5b:7d:9c:86:f9:78:05:3c:be:e1:5d:32:c8:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:32:03:F3:02:80:DD:E0:86:1A:EB:53:DF:6A:66:7C:F8:F7:66:A4
            X509v3 Authority Key Identifier:
                keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e2:a3:90:30:7d:c3:30:b1:2f:7b:9d:da:9f:2e:83:cd:0f:
         20:e8:5d:40:ce:84:b5:40:b0:59:25:42:35:e1:0d:08:cc:ed:
         24:7c:43:29:92:c9:8c:6b:82:05:82:32:5b:90:6f:4a:07:68:
         6d:19:7a:0b:a3:b0:d7:ce:4c:ab:f6:7d:f3:75:c9:f4:fd:5d:
         5f:1d:05:00:35:54:63:bd:99:fa:f5:e3:51:4c:35:f9:8c:bb:
         67:9e:27:34:a1:b0:4e:ad:32:41:79:17:d4:1e:13:5e:b3:2c:
         31:9d:e9:b8:2b:dd:22:b7:2a:65:61:65:eb:8c:cf:f0:31:b0:
         54:e4:87:8b:c5:39:b8:84:6f:c5:b5:07:dc:ca:26:d0:5a:9e:
         ef:c6:c0:9b:a1:b5:a1:09:10:ad:2a:d5:05:8b:c0:82:df:e4:
         2f:aa:28:c1:39:91:71:ec:01:77:cc:05:a1:7a:93:31:d4:83:
         8d:17:95:c6:39:1f:4d:db:e2:72:22:4a:ab:55:f2:f8:a2:3a:
         4d:e4:8d:62:d6:4f:dd:f4:a0:0e:c8:f3:6c:ca:dc:c1:30:fa:
         05:c7:a1:b1:a2:93:b0:e8:72:f4:da:d7:35:3a:1c:81:f2:08:
         fe:2e:7f:43:e9:ae:03:ad:b8:a4:c3:49:80:6f:c2:13:39:55:
         94:21:94:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:58 2026 by rpki-client