Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148434/DDA8865C662411F183922A2D9E47A888/2rL6s47l0l-AvFsC1PRewCtPqEE.mft
File:                     2rL6s47l0l-AvFsC1PRewCtPqEE.mft (raw, json)
Hash identifier:          e392rGgYkrT3NIt3T7XgiyXBwaz8+lj5piCCiwo4EDc=
Subject key identifier:   C0:BD:C8:CE:1E:06:B8:AF:2A:99:5C:7E:3B:00:C3:55:97:B1:FF:B1
Authority key identifier: DA:B2:FA:B3:8E:E5:D2:5F:80:BC:5B:02:D4:F4:5E:C0:2B:4F:A8:41
Certificate issuer:       /CN=A9148434/serialNumber=DAB2FAB38EE5D25F80BC5B02D4F45EC02B4FA841
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rL6s47l0l-AvFsC1PRewCtPqEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148434/DDA8865C662411F183922A2D9E47A888/2rL6s47l0l-AvFsC1PRewCtPqEE.mft
Manifest number:          36
Signing time:             Wed 23 Sep 2026 08:21:34 +0000
Manifest this update:     Wed 23 Sep 2026 08:21:33 +0000
Manifest next update:     Wed 30 Sep 2026 08:21:33 +0000
Files and hashes:         1: 2rL6s47l0l-AvFsC1PRewCtPqEE.crl (hash: TFMPA2dbleBfQS/VR1L/W0LjT56WRrzQ9NiiclMI8KM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148434/DDA8865C662411F183922A2D9E47A888/2rL6s47l0l-AvFsC1PRewCtPqEE.crl
                          rsync://rpki.apnic.net/member_repository/A9148434/DDA8865C662411F183922A2D9E47A888/2rL6s47l0l-AvFsC1PRewCtPqEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rL6s47l0l-AvFsC1PRewCtPqEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148434, serialNumber=DAB2FAB38EE5D25F80BC5B02D4F45EC02B4FA841
        Validity
            Not Before: Sep 23 08:21:33 2026 GMT
            Not After : Sep 30 08:21:33 2026 GMT
        Subject: CN=6ab38c0d-bde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e0:a1:84:41:1e:bb:21:72:f6:d1:ab:69:af:
                    8d:90:21:9f:f0:33:f7:8f:01:a9:7a:41:6d:5d:94:
                    a4:86:8c:d1:4c:f3:47:e3:cf:2f:ba:d4:33:62:2b:
                    ce:a7:94:9b:60:9d:77:c9:40:bc:23:42:a3:11:dc:
                    71:df:93:cd:96:74:de:56:ea:c0:bd:e1:02:4a:37:
                    74:e6:d6:a8:b8:f0:86:40:ea:68:cd:03:17:54:a4:
                    66:1f:e3:51:e0:56:84:5c:ee:32:98:b8:85:95:3a:
                    05:fa:60:1d:53:3f:14:ba:32:86:da:67:d4:3c:ce:
                    7a:2b:c5:14:22:a5:08:52:35:98:27:6a:d1:5b:9b:
                    51:66:e3:18:b7:cd:44:d3:b4:55:9c:6e:09:11:d9:
                    89:1e:82:ba:d9:35:33:d4:91:a3:a7:00:10:18:5e:
                    f0:e9:dc:ed:1f:5c:56:2f:fc:93:b0:63:4b:c3:a5:
                    5d:74:c5:da:4a:23:7c:4a:c0:d4:1f:3b:23:31:86:
                    55:c9:0d:be:f4:a9:13:5b:5c:aa:bc:5c:e1:30:31:
                    d8:3d:c2:12:01:a8:27:4e:02:d4:ba:6b:96:49:4c:
                    9a:3d:e0:a8:25:88:8e:26:1c:13:bc:88:ab:33:56:
                    9a:86:85:cd:54:76:b6:6e:b7:db:78:40:dd:19:f2:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BD:C8:CE:1E:06:B8:AF:2A:99:5C:7E:3B:00:C3:55:97:B1:FF:B1
            X509v3 Authority Key Identifier:
                keyid:DA:B2:FA:B3:8E:E5:D2:5F:80:BC:5B:02:D4:F4:5E:C0:2B:4F:A8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148434/DDA8865C662411F183922A2D9E47A888/2rL6s47l0l-AvFsC1PRewCtPqEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rL6s47l0l-AvFsC1PRewCtPqEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148434/DDA8865C662411F183922A2D9E47A888/2rL6s47l0l-AvFsC1PRewCtPqEE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a3:af:55:af:34:5f:26:9e:7e:66:ce:d8:33:20:65:df:7c:
         2c:32:b6:d0:27:f4:ef:27:9f:8f:44:e0:ab:a4:0b:f6:5a:24:
         4a:8e:67:e0:0c:ef:c1:42:96:ae:ac:3b:4a:bc:b3:32:2b:9c:
         c5:f1:80:7e:2a:2a:92:53:e6:a2:72:04:bc:e0:94:0f:af:af:
         35:32:56:c5:78:26:f4:e2:2c:ca:3a:2b:6d:28:ba:45:a6:f7:
         09:e4:9e:5a:2e:4b:1a:71:60:69:bf:64:5b:33:00:85:2f:71:
         e2:47:2a:fd:7d:6b:de:7b:3d:8b:7f:7a:2a:0e:98:65:3b:c0:
         e8:97:08:9a:c2:43:5b:d3:98:23:f7:c5:61:ad:2b:5d:6e:7e:
         af:72:0c:0e:d6:63:8b:95:b9:ec:49:6a:62:a9:6c:68:b5:95:
         d2:8b:3f:b9:13:2d:75:15:cb:da:00:ac:d7:3f:f1:ac:00:cf:
         ed:8f:68:0e:a0:61:67:02:62:e6:79:6a:d4:f6:33:bb:b8:5b:
         8a:0a:5e:cd:55:46:33:da:ed:43:84:e8:e1:9b:c2:56:15:0d:
         ba:5e:1c:ed:21:6e:1a:a8:2e:fb:dc:5d:a7:e1:c8:2d:24:9a:
         d4:42:70:67:69:81:e8:92:6e:33:5b:f6:17:82:01:ef:7e:0b:
         f2:5f:70:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:10:17 2026 by rpki-client