Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
File:                     C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json)
Hash identifier:          5StTDdl8Dx1JnaqiNzd1I23/0cQhNVwu5zDW5F10J+M=
Subject key identifier:   48:E8:55:35:71:DC:88:87:5B:DF:F2:0E:03:08:AC:CA:BF:A7:1F:1A
Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF
Certificate issuer:       /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
Certificate serial:       0236
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
Manifest number:          022F
Signing time:             Mon 11 May 2026 02:42:34 +0000
Manifest this update:     Mon 11 May 2026 02:42:33 +0000
Manifest next update:     Mon 18 May 2026 02:42:33 +0000
Files and hashes:         1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: aOfsSeivRYwi76pZ4OWhF5DKzVjcteI9wT4BsOZ19J4=)
                          2: F276575AA81411EFACD1214BC4F9AE02.roa (hash: gOzuZuHt13/+CPeSVRF/LcUWEvkvTc92dX/tHfFEGBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl
                          rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
        Validity
            Not Before: May 11 02:42:33 2026 GMT
            Not After : May 18 02:42:33 2026 GMT
        Subject: CN=6a01421a-3bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:fa:87:53:f0:56:f4:e1:55:79:af:38:bc:
                    70:02:a2:de:9a:2c:7c:14:1b:04:b7:8e:d2:11:21:
                    3e:57:9f:88:44:ee:ad:25:3e:12:85:63:27:a1:84:
                    8e:6a:f0:c6:ba:51:06:e7:8b:36:0b:9f:05:fa:04:
                    01:cf:5a:05:bf:4e:6c:ea:2b:96:df:dc:3e:40:1b:
                    fc:49:88:59:e0:33:8c:64:a6:3f:0f:d6:0d:0a:ee:
                    17:f5:22:0a:be:18:fa:38:62:07:56:af:49:9f:52:
                    c7:31:77:fe:61:bb:c3:8f:82:c9:82:fb:85:8d:fd:
                    bc:13:cd:d2:12:e8:54:3e:13:eb:e2:30:41:7b:59:
                    97:e3:ae:93:1c:59:df:ad:e7:1d:f8:f2:db:fa:77:
                    88:a8:65:b3:1b:28:06:59:c4:ca:99:8e:06:1c:e2:
                    4a:d5:bc:13:34:4e:29:61:e2:ac:44:32:6c:10:e2:
                    bf:ba:39:04:af:86:fc:9c:69:f1:31:f7:d1:f4:f3:
                    09:11:53:28:c5:59:73:38:88:dc:70:24:3b:43:02:
                    fc:4b:70:47:f9:37:9e:2a:a5:92:dd:4a:01:bf:fe:
                    05:4d:6d:a5:dc:b0:23:e4:07:61:95:35:06:4c:34:
                    3c:d2:c1:85:d0:af:b5:22:85:01:9e:73:1e:80:c5:
                    a0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E8:55:35:71:DC:88:87:5B:DF:F2:0E:03:08:AC:CA:BF:A7:1F:1A
            X509v3 Authority Key Identifier:
                keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:17:1a:e1:1a:eb:51:a9:b3:d8:71:c3:36:53:9f:a6:c0:0b:
         58:80:a4:87:73:e6:ba:48:9c:b6:50:38:a5:0f:0b:b0:d8:ad:
         d6:6c:9e:8d:0b:f0:b8:29:20:20:66:21:68:b8:3d:41:54:a9:
         68:b6:8d:bc:7d:5c:7a:0f:c4:32:94:3a:a5:a6:8a:32:f2:6d:
         7a:54:01:da:77:4c:df:56:36:97:75:0c:26:9d:55:17:e0:54:
         92:35:c2:2f:74:39:53:a7:d9:74:7d:5c:69:13:74:97:de:20:
         36:7f:6c:5a:82:bc:57:7e:dd:7e:3a:8f:f2:13:0d:c8:c8:74:
         6d:89:fa:de:a4:9f:a0:6d:30:53:bd:01:4c:5c:f3:9d:1e:28:
         58:4e:7c:08:6c:22:2a:3b:dc:f5:5d:10:e1:8b:a6:11:92:47:
         cc:90:22:c7:20:dd:9c:7b:53:a0:b7:db:aa:ac:ec:12:61:51:
         6f:1a:2d:e1:aa:c6:7c:00:25:8d:d8:33:84:70:d7:c8:42:e9:
         57:30:21:4b:63:6e:2f:cc:27:97:ff:b1:54:14:c1:d8:81:8e:
         0f:71:99:b7:eb:90:90:14:26:bf:99:cf:45:8c:da:30:5d:fe:
         49:f1:15:af:9d:37:32:5a:fe:93:9b:af:a5:99:89:b7:c8:98:
         61:a2:71:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:49 2026 by rpki-client