Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft
File:                     2wYwePe5d1L7gdAPqb18UjsclwM.mft (raw, json)
Hash identifier:          TlVJ9iQj+fAgAsQDWi/P0clifjwxrqjpHhacBQGeprg=
Subject key identifier:   D9:75:76:5C:A9:57:DE:47:68:B8:77:DD:A5:B6:1D:B7:31:C8:0F:D0
Authority key identifier: DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03
Certificate issuer:       /CN=A9192698/serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft
Manifest number:          0171
Signing time:             Mon 11 May 2026 04:47:23 +0000
Manifest this update:     Mon 11 May 2026 04:47:23 +0000
Manifest next update:     Mon 18 May 2026 04:47:23 +0000
Files and hashes:         1: 2wYwePe5d1L7gdAPqb18UjsclwM.crl (hash: Q2BqmYlXor4Kw5KvfKCpfL/zydalKmQsAre89A8rpig=)
                          2: CE042A841E5611EFBEDD1F39C4F9AE02.roa (hash: k9o+QZZOY/GVuUjyky+6WbWrZg7L8fx0wCEliNfXDKk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl
                          rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192698, serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703
        Validity
            Not Before: May 11 04:47:23 2026 GMT
            Not After : May 18 04:47:23 2026 GMT
        Subject: CN=6a015f5b-d07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:d2:a1:fd:ad:97:a5:b7:d1:28:ef:73:32:
                    0b:4e:e8:85:9c:50:da:1f:0a:77:b7:0d:d5:37:c4:
                    c8:75:a9:da:23:39:91:c9:32:d5:8a:50:38:e2:d3:
                    79:43:eb:b2:b0:6c:14:00:8c:9b:b1:9f:b0:9a:66:
                    ca:a7:bf:b8:83:72:f5:c5:89:03:dc:6e:5f:64:62:
                    24:d7:82:5b:63:be:fc:0e:62:b2:38:89:e0:45:c8:
                    67:c9:e1:8d:e0:28:00:fb:7a:90:2d:82:44:29:99:
                    14:4d:94:52:77:33:74:b8:cf:ab:33:2d:88:00:59:
                    ed:4c:48:0b:38:d3:94:9c:c8:84:6b:c4:81:af:92:
                    23:17:ab:dd:c9:ec:7f:5e:96:d9:27:fc:98:d9:24:
                    9a:79:16:b6:2f:ec:fb:cf:d8:3e:bf:ed:7b:81:81:
                    4e:df:49:f0:e1:ae:39:5d:65:52:df:5b:58:1d:2e:
                    ee:f2:4b:0c:e5:5e:4b:c5:80:2e:6a:8a:59:c3:e8:
                    2a:31:74:14:a8:85:f5:60:4c:98:3d:ec:be:17:be:
                    1a:a1:7c:1e:e2:7b:2b:8e:2f:97:99:51:23:e6:3b:
                    c7:26:1b:08:67:95:f4:91:aa:dd:04:c6:b0:40:3c:
                    56:6b:37:bb:f4:dd:be:6f:dc:21:3a:b2:4d:9b:e4:
                    c1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:75:76:5C:A9:57:DE:47:68:B8:77:DD:A5:B6:1D:B7:31:C8:0F:D0
            X509v3 Authority Key Identifier:
                keyid:DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:56:80:aa:83:95:cd:dd:11:6e:ea:4c:11:0c:3c:84:dd:c2:
         f9:7a:90:89:c9:9e:1c:b0:d3:97:af:a9:9e:9f:7c:09:b8:8a:
         5d:77:20:ac:2d:fe:36:50:53:90:ce:64:db:0a:52:80:06:bd:
         9b:30:97:64:17:02:71:f1:61:dc:84:f2:41:3f:e5:4a:b3:db:
         7c:0e:57:ac:1a:1f:83:d8:d2:ec:d3:c7:c0:8b:85:41:ee:e1:
         41:59:c6:b5:26:3c:a1:27:c0:a0:47:c7:06:00:b5:fe:01:70:
         22:4f:a0:62:de:61:8f:e5:c1:e8:8d:89:24:43:01:15:00:bc:
         6c:e9:c7:a4:72:10:86:2d:ba:3e:11:00:d0:25:16:17:8d:98:
         f1:21:91:53:13:76:47:45:99:75:a3:98:75:c6:76:75:32:c3:
         e5:fb:fa:db:54:40:f5:d6:e1:9b:af:8b:13:87:66:0e:99:aa:
         92:c4:b7:f5:57:97:0b:dc:2b:13:e4:47:61:20:73:b4:ac:66:
         55:52:d7:30:48:1c:4d:29:5b:99:fe:17:c7:0d:5e:e0:39:bf:
         20:b3:07:85:09:0c:16:ab:76:bf:ac:5d:bb:77:87:4d:5a:fa:
         be:ca:45:32:c1:3a:42:48:93:55:6f:3b:67:65:7e:47:18:ae:
         cf:88:35:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:38 2026 by rpki-client