Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
File:                     n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json)
Hash identifier:          EjIRPXQrETZQhvWs9m3fFXRfmJmNOxcj3iCoPynsIwo=
Subject key identifier:   52:64:E5:56:58:9F:09:B0:5A:A9:1E:57:C2:A0:0F:D8:FE:EB:F3:23
Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
Certificate issuer:       /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Certificate serial:       2BDE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
Manifest number:          2B8A
Signing time:             Thu 16 Apr 2026 15:30:55 +0000
Manifest this update:     Thu 16 Apr 2026 15:30:54 +0000
Manifest next update:     Thu 23 Apr 2026 15:30:54 +0000
Files and hashes:         1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: F3CvscbnzhPm+KlkTijyjnLRl0zUSr7vMaSaL4XFiss=)
                          2: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: RaV0EBH4fa+l9u1AYk3sjgFpJfu7SSd3dDIQo14KDEs=)
                          3: BB799DA8844011F09054B049C4F9AE02.roa (hash: VrRFOlut3uTJjQcCOu3xElVoNRFtaOUQQFsO7k9dNnQ=)
                          4: F1BA2EAC353311EBB895B082C4F9AE02.roa (hash: XMn1rTIy3jaeKDZE05M5b8eeprfjm2rfHPZwQzTw2V8=)
                          5: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: 25oLu27CZ0gv2qJnkcUs4150C/CVxdIojsajwReLNXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
                          rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11230 (0x2bde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
        Validity
            Not Before: Apr 16 15:30:54 2026 GMT
            Not After : Apr 23 15:30:54 2026 GMT
        Subject: CN=69e100af-bf9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:ff:3e:e6:1a:29:49:12:5f:87:87:88:77:
                    e7:03:50:95:6c:79:94:96:e1:52:08:1d:8c:c4:24:
                    a5:72:17:31:f6:8a:aa:d0:25:1c:2a:c5:06:44:95:
                    54:c1:04:51:61:a8:24:2b:6f:e2:d7:62:6c:8e:f3:
                    37:b7:4c:24:54:de:2c:12:d8:8f:01:46:92:0f:52:
                    e1:9d:24:27:40:13:3f:ab:99:60:13:de:83:a8:7d:
                    5e:a9:25:a2:0d:3b:8a:df:f2:b1:48:20:f2:f8:a2:
                    d6:a3:21:cb:cd:14:45:91:f7:e8:92:30:60:2d:e7:
                    98:7b:42:98:dc:a7:3f:ed:38:e5:dd:96:31:47:d5:
                    48:dd:08:85:35:88:9b:c2:0a:d7:7a:1c:f4:74:96:
                    a6:80:68:bd:5a:cd:4d:03:6c:bd:7e:d8:f1:ac:f3:
                    39:64:1e:7e:69:04:9e:25:ec:60:81:96:d2:4f:12:
                    6d:f2:51:be:c4:0d:00:49:c6:2c:09:e3:aa:40:13:
                    80:d0:54:5b:39:45:3a:77:fe:a9:d8:da:5c:44:86:
                    9d:e2:6d:ee:4b:49:61:7a:20:c1:e7:f7:68:8b:fc:
                    7c:14:ea:51:11:38:1a:8d:e8:29:c3:41:54:b5:dc:
                    48:5b:de:01:5d:f4:82:96:ad:77:e3:12:f6:16:8d:
                    e5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:64:E5:56:58:9F:09:B0:5A:A9:1E:57:C2:A0:0F:D8:FE:EB:F3:23
            X509v3 Authority Key Identifier:
                keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d3:ca:1b:57:76:97:b9:72:19:28:33:50:12:f2:b9:62:3f:
         9b:6f:2e:8c:ee:b0:51:40:c4:22:5a:21:b5:d1:2b:73:d9:21:
         46:ef:c5:f2:ad:82:6f:b2:52:cc:bf:ad:d0:0d:59:92:50:11:
         cb:40:d2:b2:ba:e6:0c:fc:37:b0:58:cd:d7:a7:75:2d:af:ed:
         2f:2a:7d:7a:a8:ba:47:51:4e:d3:9b:14:f5:85:bc:a2:27:f5:
         a9:1b:3c:c6:aa:d9:1a:d3:27:d0:7b:53:42:3f:f7:e7:36:5d:
         ed:5b:17:03:af:91:6e:62:39:73:cb:13:bc:46:0b:d1:1b:51:
         a4:6e:98:85:5e:41:3b:1f:27:bc:44:b1:9c:dc:cc:9f:53:6c:
         54:ee:c6:4a:07:38:29:74:0a:bb:24:b3:d2:35:2c:ac:08:23:
         6d:2d:8e:0c:31:42:28:f1:7a:3f:2a:fa:e7:49:96:64:2b:77:
         62:c8:8e:7d:0e:8f:da:7c:74:b1:d8:da:90:b8:11:f8:bc:fd:
         6c:21:31:f3:1d:b9:65:d5:cc:04:7f:2d:32:3d:47:ed:9e:ea:
         e7:d1:be:a3:fa:09:2b:ea:02:1a:68:c2:c2:17:e6:41:7f:50:
         76:8c:67:d3:0d:0f:b2:18:05:47:2b:2f:1f:c3:70:79:5d:1f:
         dd:62:b1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:12:50 2026 by rpki-client