Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
File:                     2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json)
Hash identifier:          8nYdoiO9KO7IowLm8TkK89Q9Ehzy3QS9Yo5HuA3KR84=
Subject key identifier:   EE:96:DD:1E:3E:A9:BD:A4:DB:81:61:47:79:5E:B2:0D:D6:93:38:41
Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
Certificate issuer:       /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Certificate serial:       036C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
Manifest number:          0360
Signing time:             Wed 25 Mar 2026 00:33:43 +0000
Manifest this update:     Wed 25 Mar 2026 00:33:43 +0000
Manifest next update:     Wed 01 Apr 2026 00:33:43 +0000
Files and hashes:         1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: TXsHiUw4EjscBrtUJziV8MVtjN9oTk4VZELtfMvmIQE=)
                          2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: B+EK2a9s5cpD4dbFXqEBGct1LhuPCRVc5c4XOhND9Sc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
                          rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876 (0x36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B241, serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
        Validity
            Not Before: Mar 25 00:33:43 2026 GMT
            Not After : Apr  1 00:33:43 2026 GMT
        Subject: CN=69c32d67-02d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:87:d3:07:f9:44:34:80:b8:a6:8d:cf:fa:
                    a0:e1:26:d5:ca:b4:c4:ac:51:54:57:59:a2:12:98:
                    91:95:6b:14:6f:c2:9a:90:d9:17:e1:02:90:76:7c:
                    09:7f:65:ae:02:f3:44:0b:6e:d9:14:59:b5:d9:d4:
                    ed:3c:31:ae:3e:dd:c3:7d:26:5e:dc:19:1f:81:79:
                    69:2e:09:28:ff:d8:f5:99:d8:7e:a8:8b:68:44:ed:
                    98:f4:4a:0e:f9:c5:7d:e4:9e:22:2a:97:83:06:a3:
                    55:92:b7:9c:38:1a:df:1c:7d:96:d2:8a:e2:93:58:
                    d5:d9:75:0b:fa:d2:7c:48:a0:48:43:7f:15:e3:89:
                    1d:a3:0b:ac:eb:5f:73:bc:80:98:cb:45:ff:cc:5d:
                    81:23:3f:b2:e9:9e:dc:71:6a:2a:b3:8f:6d:9c:09:
                    18:80:b4:6b:91:18:e6:23:8c:88:37:05:ed:9c:5b:
                    bb:50:bf:83:3b:96:29:2b:26:cd:30:d8:52:ce:7d:
                    6b:4b:77:62:fa:0c:57:8a:67:83:c4:67:89:84:7f:
                    3d:db:ea:27:2d:4b:bc:a3:20:ec:a7:f2:09:2a:7c:
                    0a:f8:d8:9c:b2:59:a0:ef:c6:c1:fb:9c:1b:c1:a2:
                    22:1d:c5:48:5e:f4:4e:31:26:85:22:73:3a:e2:d6:
                    ec:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:96:DD:1E:3E:A9:BD:A4:DB:81:61:47:79:5E:B2:0D:D6:93:38:41
            X509v3 Authority Key Identifier:
                keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a3:35:2d:27:1f:c8:c3:dc:59:a5:a0:af:32:d0:be:ce:c6:
         43:41:09:e8:d3:3b:57:ab:fc:e7:25:ae:08:a6:76:96:33:ef:
         fd:c1:6e:d8:66:3a:14:e4:da:af:5d:93:9a:26:cb:84:3d:8e:
         ca:13:db:8c:bc:8e:d3:99:b9:2d:0b:9b:73:a7:30:9d:28:98:
         14:00:4f:9e:c1:ef:4c:8f:fe:45:a6:78:42:ee:10:e6:2b:c1:
         13:a6:e2:98:c2:29:cb:9f:97:f0:5f:27:e8:31:40:3c:46:21:
         32:f3:33:99:f9:90:95:af:c7:0d:a9:b7:f0:d9:8a:65:24:62:
         4b:5b:eb:5b:09:a8:47:06:d0:ef:99:76:d2:33:62:5c:af:16:
         69:bd:02:8f:42:62:a7:f5:98:30:66:b7:43:77:9c:a5:4c:02:
         af:28:cf:5d:5e:67:61:b0:0a:37:d0:55:0c:00:77:d4:a3:5b:
         29:1b:c2:e3:0c:69:92:b5:43:ee:6a:5c:ee:56:54:63:46:6a:
         71:82:20:08:27:1c:0a:73:96:f5:48:dd:2d:35:5d:ea:fc:58:
         6d:8a:17:17:a3:5e:00:e2:c8:52:21:99:ca:b5:8a:a4:9f:96:
         a6:06:ad:a2:cc:1c:c7:38:75:5f:2c:5c:ee:2c:c5:e2:5d:70:
         7e:56:55:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:35:21 2026 by rpki-client