Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft
File:                     2UW2DwCc3xVcQp1Aha62z-BrzgA.mft (raw, json)
Hash identifier:          9F21WC/DTGiP5v4PeTjBM65tvdP2/9naG0JDo7dUJus=
Subject key identifier:   C6:AB:99:B4:93:E4:37:9B:CC:18:1D:2C:7B:CD:5C:82:12:13:70:29
Authority key identifier: D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00
Certificate issuer:       /CN=A9149CEF/serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00
Certificate serial:       0579
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft
Manifest number:          056B
Signing time:             Tue 12 May 2026 23:25:49 +0000
Manifest this update:     Tue 12 May 2026 23:25:48 +0000
Manifest next update:     Tue 19 May 2026 23:25:48 +0000
Files and hashes:         1: 2UW2DwCc3xVcQp1Aha62z-BrzgA.crl (hash: b6m7YdMFU00vDEUs1BmdbJxAdlhC91bGWhIPRaoQ8y8=)
                          2: AFAC764C2C1711EC817C5912C4F9AE02.roa (hash: KV+oymiCQ8SI81Nw8YLk5LKF58JCB1ujUEL9Z05HDyg=)
                          3: AF22E83C2C1711EC817C5912C4F9AE02.roa (hash: 5f9ml2EUZAGAD2c6U/Z9/PW0M3VyIhaGC3vHQZLyq8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl
                          rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1401 (0x579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149CEF, serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00
        Validity
            Not Before: May 12 23:25:48 2026 GMT
            Not After : May 19 23:25:48 2026 GMT
        Subject: CN=6a03b6fc-1722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:41:4f:4d:bb:35:02:75:8a:44:48:c3:98:10:
                    9a:41:d5:61:87:64:77:c3:95:6f:de:52:07:85:55:
                    cf:aa:cf:47:34:61:b0:d2:a3:8e:aa:9e:35:3e:23:
                    70:32:af:87:55:3c:2a:56:88:ba:ce:45:22:60:d4:
                    8b:fe:7d:a3:d1:a4:9e:01:04:1e:9c:7e:28:06:20:
                    47:e1:a2:34:99:bd:a1:c9:00:54:03:f2:a9:1c:ee:
                    32:7d:1a:74:b7:82:b5:31:10:9e:f3:39:44:ae:e4:
                    f5:be:68:84:5b:19:9c:46:5a:47:db:5a:67:e2:3b:
                    03:51:cb:11:0b:92:2f:10:7f:26:51:fd:d6:a0:62:
                    69:75:43:cd:09:ac:6f:d0:cb:10:fa:5a:f4:12:9e:
                    f8:b8:a3:2f:6b:42:76:10:da:03:59:a9:8f:6b:75:
                    e9:3c:af:c9:5a:b8:16:68:af:5c:9c:b9:13:d4:9f:
                    f6:30:2e:28:7d:17:34:08:8c:03:89:84:60:ca:f8:
                    d2:67:4c:8c:30:f9:13:e5:29:1f:80:1c:fc:c5:38:
                    f6:14:64:35:1e:4e:94:7d:ff:73:79:f3:87:3b:2c:
                    49:3a:4e:16:54:43:12:b4:b5:c1:09:6f:ec:f1:fd:
                    bf:66:e0:03:83:97:f8:15:a2:d2:2d:1b:a0:24:7b:
                    dc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AB:99:B4:93:E4:37:9B:CC:18:1D:2C:7B:CD:5C:82:12:13:70:29
            X509v3 Authority Key Identifier:
                keyid:D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:f7:49:83:b4:b6:3b:0e:5a:5e:ab:f8:d6:29:3c:b7:f5:3f:
         24:2f:00:71:33:79:52:5d:77:90:b9:02:be:73:a9:93:9c:3c:
         c3:d7:29:60:ea:c2:39:ef:0f:f5:35:09:f5:a2:55:f6:82:86:
         38:65:90:da:c5:94:61:ac:ea:01:c2:c3:de:3d:b3:ed:bf:36:
         48:a1:58:3d:88:65:fc:5c:89:22:2a:67:15:55:37:6f:3d:87:
         d5:1b:41:9f:e6:a6:6d:c2:8e:e5:6e:72:2b:fa:f2:bc:72:e1:
         28:b6:12:6b:0d:2b:90:9f:28:7a:f5:ed:dd:0f:1d:69:a8:4d:
         b5:b4:ce:dd:17:0a:10:25:a3:24:ea:a8:30:ab:32:9d:f6:b3:
         27:c6:c4:e4:89:24:4e:f0:63:ee:4a:06:21:45:6a:4c:d2:b0:
         17:69:57:b5:5f:e7:60:47:3d:d9:4c:92:dc:13:74:d1:30:e2:
         5f:5e:59:95:96:1a:be:1a:8c:63:60:db:f3:e9:26:50:7f:9b:
         5f:f4:a8:24:e1:57:6d:80:26:f6:8f:78:a5:03:97:37:ae:0f:
         2a:52:e6:ec:73:de:dd:96:b9:d0:4f:a0:8e:6c:aa:ad:6b:71:
         16:1f:24:40:0d:85:4e:36:fd:a9:5c:94:a4:e4:55:57:97:60:
         6b:3a:ac:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:09:10 2026 by rpki-client