Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
File:                     2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft (raw, json)
Hash identifier:          JyqW9w6h9kNJ9YiPgLQ1pF8KMFPJpk6RnpRg4vQNLVI=
Subject key identifier:   D9:1E:9C:0B:B2:FB:ED:3F:16:C4:BB:78:83:66:FE:2B:CA:04:6E:B3
Authority key identifier: D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84
Certificate issuer:       /CN=A91F89A2/serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
Manifest number:          0192
Signing time:             Wed 25 Mar 2026 03:39:53 +0000
Manifest this update:     Wed 25 Mar 2026 03:39:52 +0000
Manifest next update:     Wed 01 Apr 2026 03:39:52 +0000
Files and hashes:         1: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl (hash: Mgv98daYab2jgZHHTeS9rQcmugdTWoHlXPG7VOh3szk=)
                          2: 6C363C0CF85911EE9EAE731BC4F9AE02.roa (hash: SXX9J1Vh+qspkCTPjTkZ3VWy+kFZUW+dwC+7wZGwukY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl
                          rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89A2, serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84
        Validity
            Not Before: Mar 25 03:39:52 2026 GMT
            Not After : Apr  1 03:39:52 2026 GMT
        Subject: CN=69c35908-d35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c7:9f:18:ae:e4:89:2e:96:35:e2:00:81:99:
                    c4:28:0a:8e:c7:32:37:70:99:37:2a:9a:d9:2a:93:
                    70:b9:86:18:c7:b5:e0:62:06:a2:c1:82:b6:44:ce:
                    b9:f0:46:9b:a3:7e:b4:53:c6:1e:84:50:52:df:4f:
                    77:e6:52:96:84:2a:6c:79:71:c9:d4:72:21:1d:48:
                    fc:80:51:dd:60:2c:63:fb:34:d5:44:5a:32:3b:b0:
                    94:2e:fa:96:04:0a:4f:99:f5:1c:4d:ec:60:19:53:
                    90:dc:40:47:80:13:d8:96:78:d8:e5:d9:c4:34:4d:
                    97:c4:35:75:db:e3:da:c2:33:47:19:ea:51:4f:cd:
                    41:02:b4:92:1d:51:b5:2c:8a:06:aa:8d:74:7f:8f:
                    ed:71:6f:ad:6c:8c:86:6b:e0:f0:f3:27:0c:f3:43:
                    4f:1e:2c:c9:98:a7:18:84:9e:34:d3:3b:d4:b1:30:
                    4d:b1:a8:62:48:67:f5:53:1a:ae:55:63:25:64:0d:
                    8b:2b:f0:09:4d:6d:95:02:50:03:5c:96:70:bc:a9:
                    e4:15:15:88:a8:53:9a:41:5f:14:e4:26:27:96:ae:
                    30:7e:61:4e:2f:97:17:81:a1:d8:be:6d:f4:35:85:
                    30:3a:83:16:31:d0:68:8e:76:83:af:05:8f:a1:40:
                    5b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1E:9C:0B:B2:FB:ED:3F:16:C4:BB:78:83:66:FE:2B:CA:04:6E:B3
            X509v3 Authority Key Identifier:
                keyid:D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:57:ec:29:cd:f4:b0:f2:25:25:2c:0a:e0:b5:c9:a6:8b:e3:
         14:a0:80:c5:b6:b1:08:2d:e7:b1:9d:09:c2:28:29:73:77:d3:
         c6:ab:e0:cc:1a:05:2a:e2:fd:bb:d0:89:b7:07:98:32:1a:0e:
         d9:43:15:4e:7f:9e:7a:30:f9:aa:05:e4:87:84:3a:b4:8d:fb:
         4c:6c:f1:4c:6a:a8:77:69:93:58:ff:60:96:4d:35:04:1a:ea:
         a9:5d:f7:58:c7:b2:d0:61:61:c6:a8:83:22:a9:b1:fd:97:e3:
         1a:bd:ed:df:7f:bb:39:b2:fc:5a:e3:5f:5a:8f:44:22:72:0b:
         d3:4c:6d:ea:69:d9:c5:90:2c:5a:06:ad:00:7b:4e:e2:50:ec:
         ea:af:93:8c:7a:ef:52:0a:72:2a:7a:e0:02:4e:ec:fc:35:f3:
         00:7d:cf:4d:aa:bb:34:ef:e9:94:9a:c0:bd:b9:76:27:89:65:
         3b:98:7f:06:4b:e0:1c:38:2b:96:17:0c:ec:44:32:ae:c5:3f:
         cc:73:10:69:40:73:a0:53:3b:dc:fe:10:84:29:bf:f2:fc:9d:
         5f:61:df:93:6f:5d:61:92:63:35:6d:1d:ad:ab:5c:9d:d2:69:
         4a:4a:b0:03:88:f4:01:6d:1e:0a:ca:ef:bc:a3:19:42:d9:46:
         60:ba:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:51 2026 by rpki-client