Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft
File:                     2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft (raw, json)
Hash identifier:          7X1E4fKSN5A3UvK0a4Oj33gbiXyVQYGo3xXQPfhzMjs=
Subject key identifier:   E0:BE:CF:F2:22:94:6C:1E:CE:EC:14:12:2F:CB:F1:C8:EF:45:41:D3
Authority key identifier: D8:69:DB:EA:26:30:64:3C:D6:D1:D4:B6:38:D4:6E:53:4D:3F:6E:AE
Certificate issuer:       /CN=A91689B9/serialNumber=D869DBEA2630643CD6D1D4B638D46E534D3F6EAE
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft
Manifest number:          2E
Signing time:             Tue 29 Sep 2026 09:21:00 +0000
Manifest this update:     Tue 29 Sep 2026 09:21:00 +0000
Manifest next update:     Tue 06 Oct 2026 09:21:00 +0000
Files and hashes:         1: 2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl (hash: mTIPpjMx84zI6HteVMlnsl25Gx1sP23mFyew96o/Yx4=)
                          2: 9D1E103C79BD11F1A56111AD5AA30FBC.roa (hash: v5LCMSJ7unsotsj1CUAFikFHoJMXhj0hIvgSsrnsLqo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl
                          rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 09:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91689B9, serialNumber=D869DBEA2630643CD6D1D4B638D46E534D3F6EAE
        Validity
            Not Before: Sep 29 09:21:00 2026 GMT
            Not After : Oct  6 09:21:00 2026 GMT
        Subject: CN=6abb82fc-035f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3f:d3:a6:ca:0f:9a:e6:9d:1a:7f:0f:70:e2:
                    ae:c2:45:c2:fb:80:21:63:8a:ce:d2:e5:06:6e:9e:
                    0e:a3:9a:ef:4e:30:04:e0:04:53:a5:23:3f:4e:a4:
                    94:fa:66:c9:5c:0a:39:aa:b5:f0:3d:2f:f3:87:6c:
                    c3:d6:65:2a:2d:8c:b0:f6:41:ac:2a:3d:62:bf:34:
                    be:65:ce:be:40:c0:5b:7b:c0:dd:f6:e1:10:28:0e:
                    98:88:71:80:38:57:1e:ca:72:ca:fa:07:dc:cb:40:
                    5d:6d:1a:61:bb:9e:c0:61:4b:9d:0c:b5:45:fd:b2:
                    4f:0f:53:cc:c6:2f:07:67:e1:0c:27:ae:1e:f0:02:
                    3e:de:3b:49:d6:c7:bd:ef:27:5d:77:54:a1:64:50:
                    16:75:08:87:ee:e3:dd:37:80:47:90:8e:19:74:5b:
                    19:07:b3:17:a1:1f:14:15:dd:47:79:26:56:4d:89:
                    f0:7b:0e:fe:34:df:b6:e4:1a:1b:85:4e:c8:d9:49:
                    3f:9b:9d:3f:5f:e0:2e:35:e8:15:b9:e7:3e:01:11:
                    5b:ed:36:8e:3a:81:d0:60:76:f2:51:d1:32:d2:a1:
                    d3:f6:05:2c:eb:ba:f8:fc:34:be:ef:a3:c0:51:38:
                    c0:78:cc:26:7d:d6:e2:31:a7:17:c0:0f:16:28:b9:
                    e4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BE:CF:F2:22:94:6C:1E:CE:EC:14:12:2F:CB:F1:C8:EF:45:41:D3
            X509v3 Authority Key Identifier:
                keyid:D8:69:DB:EA:26:30:64:3C:D6:D1:D4:B6:38:D4:6E:53:4D:3F:6E:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:92:8d:78:af:d9:aa:fc:03:f0:c2:56:49:8a:c9:04:c0:c9:
         22:d0:68:12:91:ee:50:ce:a5:46:9f:33:50:4f:09:71:12:a1:
         b9:c4:81:66:02:23:d3:7a:ac:ed:7e:62:d6:c5:6d:fe:7b:72:
         9e:83:af:75:15:5e:9b:ef:cd:27:31:d2:82:03:07:19:07:c1:
         fc:d3:e2:cc:a2:6f:1f:86:12:28:b6:76:5b:63:a4:84:03:7f:
         df:1a:7e:7c:90:49:a1:a9:44:04:51:ae:36:90:10:2c:8c:8f:
         f1:50:31:2a:91:42:b4:28:10:76:cb:2c:94:b1:07:81:50:37:
         fe:3f:94:d3:9e:0a:76:b5:1e:33:15:7a:93:e3:aa:fe:38:b3:
         da:1d:3b:a8:75:0b:e9:57:07:25:13:12:6d:bc:de:41:d1:74:
         ec:3e:15:43:78:85:ff:c5:93:7d:7e:e5:bc:6e:db:c7:81:69:
         91:6a:5f:ea:e7:c5:63:42:79:16:d4:d4:84:d7:5b:fd:4e:83:
         41:5a:81:c0:38:53:44:c8:17:e7:9a:01:1f:ed:ef:d8:04:9d:
         bc:73:b7:6b:db:d3:ef:73:fe:45:d0:90:2c:65:12:ef:72:eb:
         bc:17:20:08:79:a4:7c:62:ae:4d:7f:84:ea:f1:db:79:f2:5c:
         7e:6b:a2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 07:49:44 2026 by rpki-client