Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
File:                     L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json)
Hash identifier:          D30blMrp1B8/XCinK7+Vaif/pXW/5QA/bD5zMx6gIsE=
Subject key identifier:   69:75:92:D4:DA:CA:F9:11:D5:F3:18:84:2F:41:64:B8:D3:CD:8C:5B
Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
Certificate issuer:       /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6
Certificate serial:       0269
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
Manifest number:          0260
Signing time:             Wed 13 May 2026 02:17:24 +0000
Manifest this update:     Wed 13 May 2026 02:17:23 +0000
Manifest next update:     Wed 20 May 2026 02:17:23 +0000
Files and hashes:         1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: EnHZOR0gdVS+dX0LSntHY8Kz/xIZlbiGXq2Ug2Qv2/g=)
                          2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: PvZuO5e4GchVGqAm1QbEBiq8YBp2L+bhbVxt20o+A5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl
                          rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6
        Validity
            Not Before: May 13 02:17:23 2026 GMT
            Not After : May 20 02:17:23 2026 GMT
        Subject: CN=6a03df34-b14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:58:45:32:d2:5b:d4:73:28:17:48:34:5f:
                    a7:c8:11:32:0e:86:22:48:7e:c9:4b:e2:68:22:77:
                    5e:30:11:19:91:de:33:aa:5d:46:b8:27:7b:5f:cd:
                    6c:4e:26:b3:5e:dd:ee:3d:e8:12:56:f5:7f:d1:14:
                    5b:14:2c:00:5b:45:f0:8f:0b:31:b7:1b:a4:e6:33:
                    c2:24:25:7d:d2:06:94:f7:7b:cc:c4:14:ab:a1:c5:
                    c0:44:f7:08:40:16:ad:0f:96:0c:7c:bd:75:6f:27:
                    12:ed:2a:fd:68:51:2c:35:fe:9e:34:ec:ec:85:23:
                    63:97:b1:9c:33:9f:75:fa:57:c0:72:3c:7b:9a:55:
                    ef:3a:78:59:f8:22:66:d5:c8:a4:ce:3a:5d:be:e7:
                    99:da:db:17:50:56:4b:09:ff:6e:5a:df:91:6d:95:
                    45:e5:c8:2c:59:47:05:db:86:6b:88:0e:b3:b9:a4:
                    4e:17:98:47:6a:20:7d:c0:c0:67:52:79:25:b4:2b:
                    52:62:44:97:c9:b9:1c:6c:74:2a:38:7e:b3:c1:e3:
                    d2:c3:f6:1a:ce:7a:cb:ce:a0:98:02:f2:07:3e:4d:
                    29:c3:17:78:24:14:51:48:8c:db:19:8e:a5:3a:05:
                    4f:c8:7e:5b:b9:08:ac:ed:9e:c7:fc:01:30:96:8d:
                    28:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:75:92:D4:DA:CA:F9:11:D5:F3:18:84:2F:41:64:B8:D3:CD:8C:5B
            X509v3 Authority Key Identifier:
                keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:3c:a3:a7:0c:09:83:16:5e:59:d3:2c:35:48:60:16:9c:cf:
         a5:06:9a:37:94:22:22:4b:c7:89:2a:b3:77:90:3c:7d:78:85:
         e0:e8:ee:b8:d9:6e:10:9b:f7:62:48:6a:1a:12:85:3c:38:36:
         85:0a:d9:16:4b:06:94:08:0f:8c:ff:19:3b:c6:e0:f5:01:a3:
         ba:cb:d4:30:60:d5:34:13:20:48:80:00:49:17:08:9d:93:f8:
         e6:16:7c:85:6f:ac:c2:c4:3a:95:30:83:cf:43:bd:29:59:41:
         c3:35:46:92:88:ed:96:4a:8a:06:1b:2b:68:bf:d5:c9:96:7e:
         3a:46:17:a1:1a:c6:e7:63:69:21:34:10:4a:90:94:fa:fd:79:
         2d:f0:57:3a:26:ba:d1:f9:c7:fc:6c:02:f5:b1:d8:92:62:fc:
         b7:cb:a3:8d:c5:6d:dd:e1:b9:55:f8:25:f4:fc:86:8a:dd:d0:
         15:d3:a0:78:ef:a7:be:59:9a:b7:19:ef:a0:45:7f:e3:32:7b:
         93:3c:e1:84:34:30:d9:2b:2c:78:4f:53:c4:9c:ae:b4:e3:f1:
         50:31:59:71:aa:17:77:bc:df:97:08:34:76:d1:7e:2a:5e:8f:
         cf:56:af:de:74:60:3d:66:12:b7:df:eb:b5:d3:32:a7:be:7f:
         8b:e5:9a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:06:54 2026 by rpki-client