Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
File:                     n2T-UJklN_sLQOUvnPrDEMonGRg.mft (raw, json)
Hash identifier:          9rGTop9N3drSMbC5F8wZ7xwgoUbYYGQAHBYGszN8UzA=
Subject key identifier:   4C:AF:A6:AF:2B:55:3A:D1:C5:86:35:E4:BE:B8:DB:0E:41:36:84:15
Authority key identifier: 9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18
Certificate issuer:       /CN=A91A57F8/serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918
Certificate serial:       02A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
Manifest number:          0292
Signing time:             Wed 13 May 2026 02:18:07 +0000
Manifest this update:     Wed 13 May 2026 02:18:07 +0000
Manifest next update:     Wed 20 May 2026 02:18:07 +0000
Files and hashes:         1: n2T-UJklN_sLQOUvnPrDEMonGRg.crl (hash: gx4jXNQ8sktAZ4zgTxEeGxkY9pgevmhWzJJNwitW/K4=)
                          2: A508D320BBC711ED8DF23C40C4F9AE02.roa (hash: XiGYQotdStfaaRLDXTyJEgN5O2tsmcN7Z7VvHBR9Ytg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl
                          rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A57F8, serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918
        Validity
            Not Before: May 13 02:18:07 2026 GMT
            Not After : May 20 02:18:07 2026 GMT
        Subject: CN=6a03df5f-9c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:24:a5:82:2c:ef:6f:9c:ac:59:4d:24:2c:da:
                    6b:84:34:9e:f6:91:a3:51:4f:bf:85:ff:76:7e:f9:
                    af:42:e5:62:a3:57:b9:da:cb:ac:22:17:a5:3c:80:
                    1f:51:b5:f4:40:6c:c2:cb:a7:ff:96:9d:66:07:0e:
                    c1:1b:e5:5c:ad:17:d2:ef:20:22:4f:32:66:b3:c3:
                    6a:55:74:89:2b:45:58:40:bf:f2:89:aa:2f:7b:dd:
                    b5:38:7c:53:c6:96:5a:b1:5a:58:c8:dc:3c:9c:84:
                    a3:6b:ec:bb:ff:11:d0:2b:2b:9a:6c:da:6f:32:43:
                    6a:05:07:ec:c3:3b:fb:52:ca:08:bb:53:c8:5b:2d:
                    ac:89:64:e4:be:8c:79:01:e7:71:22:df:63:e9:96:
                    d6:04:c3:d7:99:eb:59:2c:c3:e7:16:f9:1d:fa:a1:
                    1c:a4:52:2c:75:6f:4c:d1:75:a7:87:bb:95:5a:ad:
                    1d:a7:9e:35:5a:3e:78:63:75:e6:ee:2b:bc:25:22:
                    01:6c:88:bd:79:76:a7:3c:ae:12:04:5e:37:e6:49:
                    28:e7:0d:c5:12:a6:cb:88:c1:df:c2:46:dd:ae:b0:
                    13:34:a3:76:c5:fe:b6:4e:79:d0:1c:fe:7a:ae:1f:
                    4c:4e:a9:39:8b:a9:fa:ce:fd:ab:77:23:8f:cd:94:
                    fd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AF:A6:AF:2B:55:3A:D1:C5:86:35:E4:BE:B8:DB:0E:41:36:84:15
            X509v3 Authority Key Identifier:
                keyid:9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0c:8a:a8:92:c9:bc:04:57:d4:ac:61:90:f7:b9:e3:56:2a:
         a5:bb:a4:4b:da:f8:de:d5:cd:43:45:77:0a:c5:64:37:8c:4d:
         1a:89:c0:43:f8:20:b2:1e:8e:a1:26:5e:02:3e:59:d2:81:fb:
         0e:3a:e6:d4:01:e6:7c:39:5d:b9:f9:6e:0f:de:7b:fb:74:7c:
         23:95:49:b9:20:69:ca:2d:c1:75:7c:2f:e9:c9:b4:d6:21:3f:
         61:f7:0e:bb:e5:7d:68:4d:65:9f:e4:e0:82:71:70:f6:3b:ba:
         ee:36:8c:ac:07:95:8b:3e:aa:d0:3a:5a:9f:c6:b6:61:4e:d5:
         e5:78:9e:4a:14:6c:28:6f:1e:7e:93:ac:b4:33:db:89:8c:ee:
         9b:03:61:03:66:36:51:ba:8c:6c:9a:02:9e:1d:fb:75:eb:54:
         16:78:8c:a3:64:7e:b6:6c:05:54:10:09:cc:29:8e:12:7e:f2:
         18:78:3a:d9:bd:c3:49:95:97:97:8d:96:c3:73:32:a1:95:01:
         be:f4:50:a8:35:c8:4e:b3:b5:b3:ff:2e:07:e8:62:92:7c:18:
         56:b1:8b:75:63:91:76:02:33:0a:54:33:3a:06:99:b6:f2:d7:
         f7:b0:d2:93:8f:9e:fc:fa:2e:f6:04:25:cf:86:9e:6d:b9:97:
         b6:bf:a3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:52:08 2026 by rpki-client