Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft
File:                     2TXs95kTG-wkONqd6CtoWJY8cFw.mft (raw, json)
Hash identifier:          kWeTfIvm3yPPGj+05oylmk5z2covGIliZF0vGrBquqc=
Subject key identifier:   B7:9C:33:6C:90:93:CA:D9:9A:BD:66:40:E1:59:E4:C2:07:D9:E9:7D
Authority key identifier: D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C
Certificate issuer:       /CN=A91547E4/serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft
Manifest number:          41
Signing time:             Wed 25 Mar 2026 07:39:09 +0000
Manifest this update:     Wed 25 Mar 2026 07:39:08 +0000
Manifest next update:     Wed 01 Apr 2026 07:39:08 +0000
Files and hashes:         1: 2TXs95kTG-wkONqd6CtoWJY8cFw.crl (hash: DRcm6H8z2MjXXC36A5VZ18QxESfrYfgSPvde7FZTJYU=)
                          2: EDD5097ECB7411F0A2C24D4FC4F9AE02.roa (hash: VI4BpFGbspGtTWlGcHxr2/5wodjUlVSpAm9KmOWTHck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl
                          rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91547E4, serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C
        Validity
            Not Before: Mar 25 07:39:08 2026 GMT
            Not After : Apr  1 07:39:08 2026 GMT
        Subject: CN=69c3911d-0aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:37:28:6b:02:bd:c6:69:1c:c6:a6:4a:de:5e:
                    15:3a:98:57:3a:ed:37:4f:4d:dc:22:7c:4a:3b:4c:
                    5e:bb:37:44:c1:64:49:49:b6:e9:8a:59:0c:1c:55:
                    7d:24:0e:ae:a4:fb:16:32:9b:73:c0:67:d7:b6:46:
                    79:88:53:8b:76:e5:02:bc:a6:d0:4c:31:ed:97:6e:
                    36:fe:f1:80:41:dc:54:c8:aa:65:2a:5e:5d:6d:8b:
                    9c:3e:6a:10:93:85:4a:2b:ab:a6:f1:56:64:a1:a6:
                    a5:09:e7:e5:31:9f:c3:89:a7:86:1b:61:8d:fd:4c:
                    0a:7d:53:a8:28:67:f3:83:e7:31:e2:9f:cf:61:10:
                    43:32:96:2b:7e:63:80:a6:d0:e9:3b:fa:fd:63:cf:
                    1b:30:05:e1:42:86:9e:5e:c1:e5:4b:59:47:91:93:
                    3b:5b:d4:2f:ff:9c:96:03:81:52:b4:9a:5f:41:92:
                    0d:e2:41:86:a9:c1:76:f5:38:54:e8:d3:d8:c8:70:
                    82:67:b7:dc:7d:d6:5b:87:1b:0c:8e:40:45:fd:ba:
                    2f:84:67:77:36:ad:df:8d:f5:b4:84:b5:f9:a2:01:
                    a0:76:18:6a:0c:2b:bf:55:fb:b4:1d:4a:f7:3b:6a:
                    0f:eb:b1:b1:66:4e:a0:7b:8d:15:54:07:5f:ff:ec:
                    60:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9C:33:6C:90:93:CA:D9:9A:BD:66:40:E1:59:E4:C2:07:D9:E9:7D
            X509v3 Authority Key Identifier:
                keyid:D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d2:b5:41:3c:05:be:a7:df:4d:e3:8b:14:7a:17:e6:de:5f:
         8c:c0:06:ac:1c:4e:a1:81:46:dd:6e:5f:04:b1:a8:60:a9:6d:
         1d:bc:5d:a5:b4:4e:6e:12:d0:1e:4c:2b:68:95:55:fd:42:37:
         c2:d7:0f:ca:75:89:4f:9f:9e:c6:37:30:6f:5d:8a:43:34:96:
         46:03:79:bb:c5:35:8f:32:bc:d2:29:87:68:11:94:5b:ab:75:
         cd:96:fd:93:91:04:35:d5:c1:4a:15:31:94:b3:64:25:45:da:
         f8:0b:c2:cb:cb:e8:a4:8b:4b:f8:a1:00:bc:11:a0:49:0b:d4:
         02:44:13:cc:22:eb:b4:34:f0:c7:73:b1:d6:8d:52:c0:0a:4b:
         c7:9c:77:a9:e1:6e:0e:ee:06:9f:13:aa:23:4d:5d:98:c8:7a:
         db:4d:b9:a2:f6:87:0f:2d:c1:96:27:25:2c:e0:3e:2e:6a:b8:
         5f:48:58:88:00:c1:26:91:90:b3:b5:25:e0:84:78:f1:32:ab:
         32:77:0a:01:cd:d3:6a:60:04:1f:1d:a1:1d:a2:4e:66:23:a6:
         fe:ca:d6:e1:c4:d9:0e:c3:9d:d2:1e:13:9d:e9:7e:4c:e4:77:
         0e:b1:99:00:fd:b5:e4:b4:38:0c:47:4c:41:27:74:78:34:56:
         aa:c9:e1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:45 2026 by rpki-client