Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
File:                     2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json)
Hash identifier:          KlfvZWJTb9vIlVcVg+p9osaQIo9lkHBOJPBdt1nQNcg=
Subject key identifier:   B3:95:CE:C9:50:13:7A:4E:17:5E:57:62:F7:45:D2:84:D5:89:08:9E
Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
Certificate issuer:       /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Certificate serial:       0265
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
Manifest number:          025F
Signing time:             Wed 13 May 2026 02:12:53 +0000
Manifest this update:     Wed 13 May 2026 02:12:52 +0000
Manifest next update:     Wed 20 May 2026 02:12:52 +0000
Files and hashes:         1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: Pp9t/TAR65tDSSoOJycip5PnKeMe5qqnxzrC54qTzaw=)
                          2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: lg5BmvJvKTTVfM5jqqI1swljGGFx139JD9z+JtbKwVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
                          rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:12:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
        Validity
            Not Before: May 13 02:12:52 2026 GMT
            Not After : May 20 02:12:52 2026 GMT
        Subject: CN=6a03de25-8441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:c3:19:bf:11:ec:1b:3d:00:0b:47:f5:ff:
                    12:f1:cb:c4:05:38:05:28:62:d3:80:9c:bd:e1:57:
                    50:e7:96:2d:a8:9c:f7:b5:81:3d:38:25:e4:8e:fd:
                    be:d4:10:aa:10:17:ad:c6:5d:45:64:01:d0:81:6e:
                    8b:38:19:f7:f4:e6:0c:35:23:3f:92:4d:bd:df:6d:
                    b5:68:42:d7:83:66:3b:e1:f9:3e:d1:8e:7f:c0:cc:
                    5b:28:d8:ac:76:16:7a:b3:bc:4a:ff:54:e9:27:9b:
                    70:da:0d:d2:5d:9a:a4:7b:63:39:57:a3:4e:c2:e9:
                    c1:40:3e:f2:a0:da:50:ac:d4:7c:3d:c4:84:12:83:
                    a1:44:28:7e:a6:f6:72:f2:91:90:fe:31:6b:15:c7:
                    c1:d3:1d:25:6d:e5:77:01:8b:5e:91:e7:0b:18:76:
                    75:7d:29:36:b0:36:aa:6f:81:03:1b:f9:1a:32:c5:
                    c9:c9:9e:7a:5f:bb:a8:f9:99:07:bc:f0:cd:bc:3d:
                    7d:64:f0:87:35:aa:35:d7:84:30:db:d4:3f:1d:76:
                    b1:e8:45:44:66:e2:98:d0:a6:78:98:5d:29:26:fa:
                    19:ea:44:47:f9:0c:58:c7:27:ab:2b:75:fc:c4:6a:
                    cd:2f:42:74:70:85:87:90:4d:71:73:08:d1:ca:20:
                    24:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:95:CE:C9:50:13:7A:4E:17:5E:57:62:F7:45:D2:84:D5:89:08:9E
            X509v3 Authority Key Identifier:
                keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:55:37:b0:90:f2:59:4f:2b:36:9f:a0:f8:16:4d:4c:82:f2:
         7a:2a:b9:71:53:bf:2a:87:0b:77:5d:8b:1f:4a:d5:e9:cf:fd:
         b5:64:b2:32:1d:bf:1b:2c:f6:8d:f7:44:08:cf:0b:53:a4:2c:
         7c:62:b0:5e:0a:f6:b4:ca:22:60:0d:ea:8f:aa:a3:27:db:f2:
         87:f9:78:9a:7d:e1:03:cc:90:5a:bb:d3:28:8d:c2:98:4f:53:
         5d:9b:27:a6:05:f5:68:82:40:ea:ca:2f:22:25:d8:f6:09:62:
         c6:aa:eb:02:c6:d6:18:e4:a9:db:e7:f9:d9:69:5b:5c:d1:5f:
         d4:33:1f:71:00:ac:96:88:f5:06:59:f7:ae:af:1e:53:d2:f2:
         3f:21:22:f2:0f:d5:7e:49:a0:cd:25:db:88:4d:c7:bc:d4:be:
         d0:06:17:f3:d0:89:32:43:9f:2a:20:b9:94:fb:c8:79:26:f6:
         3d:96:0b:8a:36:67:c3:c1:07:e7:47:5e:8c:38:39:26:50:29:
         fc:a1:97:7d:79:50:39:ff:aa:51:ef:89:a8:d8:62:3b:fe:c6:
         f0:4e:e8:be:57:18:a8:9f:d8:30:65:d8:a8:1b:7a:b9:c9:48:
         aa:24:b5:e6:22:9c:8c:8a:1a:23:d9:45:b2:1d:95:80:6a:4b:
         2f:4e:f8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:43:19 2026 by rpki-client