Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
File:                     2VWVxglbTfriy5tFuQicwmI9lKM.mft (raw, json)
Hash identifier:          f2YbRgZH9IlE+o/oPvkQuK+kRWUlnbE/6f2V4QrDrKQ=
Subject key identifier:   79:49:AC:74:10:F6:0D:58:C8:D1:B5:B9:E9:55:FD:99:95:27:28:30
Authority key identifier: D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3
Certificate issuer:       /CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3
Certificate serial:       0F51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
Manifest number:          0F45
Signing time:             Tue 12 May 2026 17:35:42 +0000
Manifest this update:     Tue 12 May 2026 17:35:42 +0000
Manifest next update:     Tue 19 May 2026 17:35:42 +0000
Files and hashes:         1: 2VWVxglbTfriy5tFuQicwmI9lKM.crl (hash: bQD+YCHzXAnQY0BipDEhveRSZU6DOgojLpOwXU9c2xM=)
                          2: D7E41D6A788411EA9186C910C4F9AE02.roa (hash: vay/YGVV/WsH1QnstajT3hVBCLiNp9w6Bpg2Y+e345U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl
                          rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3921 (0xf51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144E38, serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3
        Validity
            Not Before: May 12 17:35:42 2026 GMT
            Not After : May 19 17:35:42 2026 GMT
        Subject: CN=6a0364ee-f310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:20:71:ff:1a:be:91:1d:96:95:c6:f6:30:
                    a7:26:98:17:54:94:ef:f4:55:47:87:f3:29:26:1c:
                    21:3f:e5:b8:7f:f7:33:5f:83:a8:50:7a:10:c6:52:
                    71:3f:72:1d:f4:43:62:e7:90:6c:3b:a7:0f:2f:22:
                    b8:9b:9b:38:9d:66:ec:85:8a:1d:b7:21:82:b5:c4:
                    b7:eb:21:04:27:ed:a6:f6:f0:6e:41:98:32:ea:da:
                    b7:43:4d:07:38:9a:a0:97:c0:8e:79:bb:82:3b:16:
                    09:02:a0:67:e5:e1:14:3c:4d:c7:e1:78:80:91:ed:
                    99:35:e3:26:97:93:1e:4b:14:c7:72:af:85:d8:d1:
                    bc:a8:c3:2b:c1:0b:07:77:2b:3c:8e:e8:fa:0a:31:
                    58:05:f0:db:fb:ba:d0:a9:c2:35:c4:bc:20:d3:17:
                    3b:31:4a:5c:49:71:5c:74:c3:b7:5c:5d:8c:0d:fd:
                    37:0c:52:e7:3e:d3:0d:61:a1:b9:6e:b5:35:97:7b:
                    15:52:dc:18:d7:9e:4e:58:7e:15:55:ce:ff:80:dd:
                    33:b3:b8:03:74:2c:6a:fc:ec:e9:d1:b7:14:97:c6:
                    3c:65:94:3c:aa:91:ee:fe:62:32:21:0c:4e:87:6d:
                    6d:a1:53:60:51:01:9b:ed:98:83:c1:26:78:d1:7e:
                    98:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:49:AC:74:10:F6:0D:58:C8:D1:B5:B9:E9:55:FD:99:95:27:28:30
            X509v3 Authority Key Identifier:
                keyid:D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:65:c0:28:b5:92:e6:ea:79:eb:33:72:35:50:e4:c6:d5:01:
         cf:1d:81:f3:20:81:af:77:f4:11:06:f6:0c:3b:f5:95:5e:65:
         c3:9b:cc:d2:a3:4c:e7:95:48:3b:e2:7c:70:ae:a4:6f:1e:78:
         c2:90:4c:22:51:8b:35:f3:21:a6:b9:c4:16:fd:9e:22:7b:4d:
         b2:79:d1:be:93:38:e6:54:5a:2d:30:73:9e:5e:5c:2f:b2:0b:
         22:4a:e3:fe:ce:76:f3:ed:36:57:2e:f3:2e:67:fb:61:dd:96:
         8f:a8:a7:ca:84:a9:e8:18:35:72:71:3d:71:0e:34:f7:99:be:
         b6:04:79:58:62:70:c1:62:e0:fa:a5:5f:fb:1b:da:ce:96:4a:
         ed:f3:d8:7b:63:4f:17:41:ea:19:d7:e8:f6:b8:30:52:3b:b4:
         a3:f3:e4:c1:a3:18:d1:da:cc:7d:ad:ac:75:2b:4f:ec:bf:31:
         c2:4a:7f:d2:5b:34:ef:8c:a0:26:12:2d:69:f6:5d:64:df:0d:
         b9:82:28:03:11:51:ac:ad:43:c7:33:74:86:31:b7:2e:69:3c:
         84:87:a4:47:a0:0e:df:df:6b:50:e4:a6:61:97:a2:1f:e4:52:
         fa:9d:e6:73:0f:77:c2:7c:e4:d9:10:3d:42:e6:d8:07:67:94:
         70:1a:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:26 2026 by rpki-client