Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft
File:                     2TIL_awMkLNCikT8fcoOL3kJd0E.mft (raw, json)
Hash identifier:          Tw2RlaQK1B7c8mN5Rw18keuop8mLjy5D7S0HrRhiUrI=
Subject key identifier:   75:08:36:CD:C8:CF:D0:45:D2:CE:BE:23:6D:42:27:C4:18:40:F6:18
Authority key identifier: D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41
Certificate issuer:       /CN=A9197ADE/serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741
Certificate serial:       E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft
Manifest number:          DE
Signing time:             Mon 11 May 2026 06:45:07 +0000
Manifest this update:     Mon 11 May 2026 06:45:06 +0000
Manifest next update:     Mon 18 May 2026 06:45:06 +0000
Files and hashes:         1: 2TIL_awMkLNCikT8fcoOL3kJd0E.crl (hash: /sJ0Ia/JkN9FFiGGPgiHSgGlGdrMtUUH8IbDiPuv2RE=)
                          2: E0CFA54EFE4D11EF8274971BC4F9AE02.roa (hash: IQs2mgIIn1eSW55HIZcwfqfurLI2M7cs6R03kQuYr9A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl
                          rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197ADE, serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741
        Validity
            Not Before: May 11 06:45:06 2026 GMT
            Not After : May 18 06:45:06 2026 GMT
        Subject: CN=6a017af2-2e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:db:6a:f3:db:3b:dd:e2:e5:31:1b:b4:b9:95:
                    49:e0:4d:32:c1:b2:27:a7:4f:55:28:76:76:d0:9c:
                    a9:9d:42:e5:77:2d:0e:89:a1:a4:5d:90:d4:00:c4:
                    0e:11:c1:34:22:30:48:12:7f:2b:13:69:0b:dc:6c:
                    b4:dc:32:5e:37:09:f0:9a:43:dc:8a:27:10:08:d0:
                    b5:6f:44:ee:0b:63:88:70:c6:17:e3:b4:31:5f:80:
                    3d:02:b7:5e:34:49:5a:d4:f3:93:17:a6:b8:ef:84:
                    21:7b:81:2a:a7:30:d0:f6:69:9f:8c:39:f0:c0:bd:
                    6e:60:21:c6:4b:bd:e3:ec:d1:22:9b:3e:97:1a:89:
                    60:8f:35:76:35:b9:7a:98:14:b0:c1:d7:a7:d7:24:
                    90:65:9d:d5:f2:47:54:c7:73:bc:cf:90:b9:f0:65:
                    9a:99:21:09:04:f9:01:0b:67:b9:c4:6f:f9:e8:be:
                    de:12:3d:70:fa:84:c6:10:8b:79:7b:e1:0b:65:c7:
                    4f:12:6a:75:6b:62:79:35:5f:fa:71:ec:b4:f0:28:
                    cc:ae:b5:d9:ff:12:67:67:5e:60:bd:61:33:6e:c0:
                    1d:5c:e6:11:96:0d:52:8c:87:c7:75:1c:e3:89:9c:
                    29:bd:63:3a:ed:22:7c:e5:3f:11:f2:73:29:4b:8b:
                    15:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:08:36:CD:C8:CF:D0:45:D2:CE:BE:23:6D:42:27:C4:18:40:F6:18
            X509v3 Authority Key Identifier:
                keyid:D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:11:1b:1c:a6:43:3e:2c:fc:c5:96:6e:77:31:ab:f5:93:da:
         db:1b:8b:7c:36:ba:3f:64:31:d1:14:01:a7:02:74:2e:6a:33:
         e5:d5:ce:9d:73:c2:82:31:c2:57:9a:bc:12:e5:30:3a:67:ec:
         5b:3c:e2:3c:66:b2:96:79:74:ab:c3:d8:7a:a0:3a:7d:19:01:
         29:bd:71:c3:6d:8e:39:2b:9c:7b:35:4b:aa:9f:e6:f4:97:85:
         a8:c2:aa:c0:a8:ac:89:2d:7a:8a:4a:65:d4:1d:3e:84:90:12:
         ec:ce:88:14:3c:6d:7b:cd:a0:b2:53:c0:64:1a:36:9e:66:b0:
         68:31:b2:4a:e4:68:a1:bd:47:4a:7a:ec:d3:95:c8:6f:20:dc:
         b8:55:f2:b6:39:6f:e4:f2:b3:0d:88:ea:8e:8c:d6:01:83:ea:
         15:54:15:a1:fc:44:af:91:dd:15:df:aa:e8:e1:25:69:34:47:
         7d:62:4c:de:24:29:db:37:01:80:d7:7b:4d:a2:75:41:ae:f3:
         d1:3c:05:43:01:92:fd:24:20:69:7a:1f:7b:b5:fe:64:c8:5c:
         e1:ce:9b:5e:09:6f:74:e2:43:a7:e9:c9:bd:6f:91:91:37:a2:
         46:2b:ee:1a:b6:c4:88:62:af:83:54:2a:7b:2b:d9:d2:cb:8c:
         ed:b5:be:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:30:10 2026 by rpki-client