Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
File:                     _egcp2lelKkL_f2D8Rp3NGMIF-g.mft (raw, json)
Hash identifier:          3jc1NUErTt4xQKrUEPBj79X7Eqlv5lffNb6Jgt/gI+c=
Subject key identifier:   D3:68:99:33:60:8E:12:AE:72:6F:0F:E4:C6:BF:00:BC:05:C6:40:AE
Authority key identifier: FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8
Certificate issuer:       /CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
Certificate serial:       0242
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
Manifest number:          0239
Signing time:             Sun 15 Nov 2026 02:51:52 +0000
Manifest this update:     Sun 15 Nov 2026 02:51:51 +0000
Manifest next update:     Sun 22 Nov 2026 02:51:51 +0000
Files and hashes:         1: _egcp2lelKkL_f2D8Rp3NGMIF-g.crl (hash: KDzoK+6ldKJim3/VhPkCEnD2q9BxAGrxKWKeCIbPDXA=)
                          2: AA02862E890C11EE87862551C4F9AE02.roa (hash: txKDX+YhBJXdDuRQY7L74gG8NetRgth5sfhluKMRd0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl
                          rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 02:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127B5, serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
        Validity
            Not Before: Nov 15 02:51:51 2026 GMT
            Not After : Nov 22 02:51:51 2026 GMT
        Subject: CN=6af91e48-54f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a4:07:c3:31:4e:4a:c8:5e:12:6a:4e:10:89:
                    2a:9c:de:64:53:7c:f9:3c:0e:0b:57:41:19:fe:11:
                    f5:3d:70:7a:63:c2:63:1c:51:0b:79:b9:36:6e:92:
                    1d:9c:d0:91:e6:f1:f4:22:40:6c:d5:12:ae:ed:89:
                    e6:d4:3c:d2:5d:d4:29:21:18:21:b1:52:c6:98:88:
                    ab:de:51:e9:bd:6f:f1:42:2d:00:79:d8:c7:e2:76:
                    bf:f4:2c:03:65:e9:6f:2d:9a:3d:67:09:c4:bd:40:
                    0c:f9:a6:ae:17:4f:1b:e8:3c:da:5f:59:e8:9e:77:
                    52:64:be:9f:f8:05:04:0e:ed:ab:55:47:fd:16:29:
                    2a:0a:4d:11:1a:10:93:79:40:42:53:ab:42:7c:bb:
                    cb:18:0c:af:cb:1a:8d:24:60:52:f2:1b:55:f3:53:
                    0a:ba:3e:b6:14:32:a8:af:11:57:01:a4:84:66:b6:
                    7e:d3:fe:3f:a2:fa:fb:aa:cc:54:13:bb:9e:08:af:
                    8c:ed:df:d5:40:f5:7e:5e:cd:b1:2d:3d:7f:b1:5e:
                    b1:af:89:74:a0:2d:9d:0c:37:c2:b6:54:4e:ac:fa:
                    db:64:a1:50:ed:4f:62:1c:55:b9:94:4b:62:d5:05:
                    94:06:05:a1:b5:72:05:de:6f:ff:32:b5:26:4b:ce:
                    b5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:68:99:33:60:8E:12:AE:72:6F:0F:E4:C6:BF:00:BC:05:C6:40:AE
            X509v3 Authority Key Identifier:
                keyid:FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b7:36:42:71:a6:47:02:46:07:a5:6e:5f:8a:09:6b:e1:9c:
         81:58:6b:0c:7e:49:b1:75:f1:f4:82:7d:27:fb:ec:18:a0:fe:
         ae:7d:0d:da:16:f2:0f:bf:be:e5:8b:73:e9:51:71:55:d2:5f:
         b6:97:66:d2:51:1f:1a:5a:ae:02:56:99:16:ec:2b:2f:88:c9:
         e8:e1:40:69:b2:21:65:03:b3:94:e5:55:f5:c4:d1:d6:bc:ec:
         51:43:7d:49:d2:5f:65:ef:e6:2b:0f:48:8e:09:e8:14:c2:6a:
         b7:9c:b5:e4:0c:08:40:f1:c3:47:9d:1b:78:54:44:04:00:7f:
         d7:f8:b3:2e:02:fe:8e:ac:1e:51:ed:b8:ad:d1:ce:e0:69:3e:
         ee:82:ab:98:4b:f3:8b:54:f7:1f:c9:7b:cf:a5:0b:2a:db:96:
         09:db:c9:1d:b3:05:29:06:b1:41:4b:27:5b:0c:18:eb:f1:4c:
         6f:82:60:eb:1a:7a:f1:b4:db:08:58:7a:72:71:77:3e:9e:d2:
         5e:7e:c1:dc:7e:d6:d6:15:96:92:76:30:75:1f:98:62:c9:4e:
         bb:2d:ac:10:39:7e:97:e9:e2:fa:fc:4b:e6:bf:cf:de:7f:47:
         a2:17:43:14:c5:b8:ed:a5:e3:b9:1f:cd:12:c0:98:d1:fe:77:
         a8:b4:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:08:03 2026 by rpki-client