Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft
File:                     2S2tTXbh9aAmwn8tuRxE-62OSHw.mft (raw, json)
Hash identifier:          SDHEc9ECrB/AJ0XF87KzI8cvqLTYzt/A/96PI2+jbKw=
Subject key identifier:   F0:47:5F:71:B4:BB:3D:99:61:CC:69:A6:44:EA:08:07:6D:F6:FB:A1
Authority key identifier: D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C
Certificate issuer:       /CN=A91F5143/serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C
Certificate serial:       0EDC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft
Manifest number:          0ED1
Signing time:             Tue 12 May 2026 17:42:01 +0000
Manifest this update:     Tue 12 May 2026 17:42:01 +0000
Manifest next update:     Tue 19 May 2026 17:42:01 +0000
Files and hashes:         1: 2S2tTXbh9aAmwn8tuRxE-62OSHw.crl (hash: +agqd3/SzaLcG9HaBPqkiv9bJzaxElhtKYgbv1W9qqA=)
                          2: FBBFC6D8A86B11E9A1385758C4F9AE02.roa (hash: uK9y+gPM8Frp0brfv/3gjohOY8wSZFPP3WtdADUyL4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl
                          rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3804 (0xedc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5143, serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C
        Validity
            Not Before: May 12 17:42:01 2026 GMT
            Not After : May 19 17:42:01 2026 GMT
        Subject: CN=6a036669-ea85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:47:2b:4b:de:02:07:de:dc:95:a4:a2:a2:
                    a4:23:78:54:34:ad:6e:5f:56:42:61:29:44:88:09:
                    ca:83:d9:79:9a:a7:5d:13:13:4f:17:e8:df:dc:d9:
                    d1:dd:c6:10:09:99:82:0e:c2:ee:fa:19:8e:f3:43:
                    1d:21:ba:cd:a0:b3:97:76:23:98:27:c1:50:5c:35:
                    fe:db:2f:80:2f:e5:21:a7:05:84:23:d6:ae:a5:0c:
                    82:dd:12:ba:ea:6c:f7:d1:c8:a0:f8:e9:42:c8:64:
                    0e:d4:b4:5f:c2:18:2a:0c:eb:b5:da:db:a0:d1:6b:
                    a8:e4:8a:2a:62:a5:1e:7c:14:2b:d8:3c:bc:89:a3:
                    55:d0:e9:c5:41:e3:b5:2f:65:20:e2:63:49:8c:f7:
                    36:4e:e0:43:d0:67:8b:a1:b2:18:b2:e7:bb:c8:23:
                    06:20:7d:4b:6c:dc:52:09:93:c1:b8:fd:97:89:05:
                    28:5c:4b:ae:97:ca:16:a2:24:5c:6f:71:9e:35:5e:
                    2a:89:28:71:13:b8:f7:63:1c:1c:44:14:11:e5:fc:
                    14:30:47:44:73:a1:5e:8b:72:fa:1b:27:2c:84:a8:
                    00:1d:4b:2d:0d:8f:99:c5:fa:e1:4e:e1:75:e9:18:
                    47:43:f1:e1:93:e1:47:6f:0d:b5:4f:0a:78:f2:e2:
                    ac:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:47:5F:71:B4:BB:3D:99:61:CC:69:A6:44:EA:08:07:6D:F6:FB:A1
            X509v3 Authority Key Identifier:
                keyid:D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4f:fe:77:9f:33:e8:47:f8:92:c2:aa:89:e3:b2:2f:10:1a:
         fa:10:eb:20:6f:5d:7f:ef:17:6e:f7:3b:54:a5:6e:6b:26:e7:
         19:00:c7:bd:81:93:f1:65:36:09:cf:97:55:eb:04:8c:dd:7d:
         8d:f5:6f:79:81:5b:d4:3b:0d:2a:9f:b2:61:c9:95:ea:31:94:
         99:d1:7d:b2:b7:fa:80:bd:87:7b:d1:04:c4:32:09:78:f3:9e:
         1f:c8:bf:3b:3b:8e:49:90:e0:ff:44:b6:f7:eb:17:88:7a:14:
         37:ee:0f:d2:32:79:2b:0a:06:a4:36:6e:d9:9d:b7:21:5d:7b:
         aa:11:54:97:7f:cb:1b:7c:56:eb:7b:b8:37:aa:81:99:54:fe:
         bd:a9:2c:7e:23:09:9a:1f:21:e5:6f:81:57:e7:9b:42:2c:3f:
         a8:9f:18:92:36:fd:85:33:5d:b3:55:35:e9:fd:eb:f3:db:56:
         e7:bc:ca:8b:bc:fc:bd:ee:38:b9:ad:a8:40:fe:b1:97:4c:99:
         21:88:9d:cd:88:94:a8:07:02:f7:d1:d5:71:47:a8:6f:5b:89:
         67:36:3a:62:54:ac:f9:1a:48:a9:02:6f:37:71:90:0c:e5:46:
         ac:76:a9:4a:f7:21:2d:da:9e:ec:b0:1b:31:6d:9c:18:7f:ee:
         d6:71:ed:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:05:18 2026 by rpki-client