Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
File:                     2nLQztquGaHsPtugRn1ZjrmRVlY.mft (raw, json)
Hash identifier:          6U3y02mHKwa3MCLZ57rApKZwmi/mYdgTPnwVvIWSSo0=
Subject key identifier:   F0:5A:A5:92:07:8A:89:79:A7:20:75:98:33:24:BD:B7:DF:C8:AB:23
Authority key identifier: DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56
Certificate issuer:       /CN=A915E131/serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
Manifest number:          B2
Signing time:             Tue 13 Oct 2026 07:44:53 +0000
Manifest this update:     Tue 13 Oct 2026 07:44:52 +0000
Manifest next update:     Tue 20 Oct 2026 07:44:52 +0000
Files and hashes:         1: 2nLQztquGaHsPtugRn1ZjrmRVlY.crl (hash: cVm3Ls+YcZpd1iG+myYniGaGR4swoaHNh3yC1n4lu4o=)
                          2: JzJnSdklHtqRb5n_07qN21tlKkw.asa (hash: BbSaRokX1FejlIti0bqfCe5bvM22EnMzB7ypMvPdUp8=)
                          3: 7D4302A0BEC811F0AE45220FC4F9AE02.roa (hash: DdCOIo33v4IDMQPtkKtDFsOxid92dMxNzutXTG46zeE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl
                          rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 07:44:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E131, serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
        Validity
            Not Before: Oct 13 07:44:52 2026 GMT
            Not After : Oct 20 07:44:52 2026 GMT
        Subject: CN=6acde174-00db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:41:ba:ad:f5:83:ff:3d:96:f6:d9:40:7a:
                    dc:05:3a:0b:9e:44:e9:49:28:2c:7d:b9:12:cd:17:
                    b0:0f:8a:0f:e0:e6:2b:16:a5:61:6f:a8:f0:e6:d7:
                    0f:79:96:05:cf:b6:29:49:f8:b0:72:2f:12:b3:be:
                    ac:37:f8:f8:5e:d0:2f:46:42:ad:c1:cd:14:b2:8e:
                    04:1a:9f:14:59:a0:5d:e0:be:b7:75:a5:b2:77:44:
                    db:19:ea:0a:93:af:ed:c0:15:3c:12:52:80:e0:03:
                    b2:59:91:6f:2a:8f:0e:04:d5:ab:00:8e:fd:5a:dd:
                    1e:d8:d2:62:6a:36:a4:53:8c:5d:87:f8:2c:eb:37:
                    65:d3:f5:aa:50:e7:f6:cf:5f:4f:53:32:f2:dc:b0:
                    ba:07:75:7a:06:c1:67:5b:83:25:de:cc:9e:bc:cb:
                    32:f8:03:92:81:d1:af:19:8e:9b:3f:88:23:8c:a4:
                    6e:e5:f3:b4:8b:df:4c:0c:c3:2e:a5:67:0e:f4:f1:
                    9b:15:b1:f1:91:c7:80:4f:53:d6:a8:e2:27:ed:19:
                    bb:28:0c:96:f8:d6:38:a5:27:da:46:3f:ab:60:59:
                    84:1d:66:54:9d:8c:3a:2e:b3:4f:e9:70:e7:56:4f:
                    94:3b:f8:38:ea:d9:27:a9:91:45:68:95:46:f3:9b:
                    22:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5A:A5:92:07:8A:89:79:A7:20:75:98:33:24:BD:B7:DF:C8:AB:23
            X509v3 Authority Key Identifier:
                keyid:DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:95:40:8c:85:7e:01:01:b4:41:3d:5c:06:7d:14:7e:f8:7d:
         ba:9e:1b:d4:68:fb:23:8c:2d:43:23:2f:23:79:f2:cb:95:08:
         0b:13:4f:fe:1c:3d:8a:5c:e1:17:b2:08:65:97:90:98:85:55:
         1f:5c:2d:9b:b4:67:59:5e:40:73:c4:8d:fa:0b:86:8f:7d:fb:
         7b:fb:64:1f:5a:ef:07:e5:53:4f:62:ac:3d:52:6e:dc:30:3e:
         57:40:f1:8c:97:94:af:b2:e6:15:4b:e2:59:8d:64:89:8a:98:
         4d:c7:5f:0d:c1:e5:3e:cc:07:85:1c:39:20:b9:59:b8:4c:56:
         ba:42:e7:7d:d4:46:69:f8:a5:20:18:72:ad:fc:c5:b6:36:cf:
         2d:98:76:a3:f5:4e:07:d9:24:e0:3f:e8:1b:e5:0a:ac:48:29:
         a2:3a:ae:4b:28:81:69:80:f8:c8:21:7a:d8:3e:dd:91:e2:a9:
         68:0f:a2:85:73:90:71:de:e2:b2:be:98:1b:83:cc:09:40:cc:
         19:58:e8:92:42:2d:34:f3:d2:3d:f8:8b:59:94:08:21:8c:a2:
         6d:f2:27:a7:2e:ab:9d:49:c7:14:9a:7c:c5:d7:bf:59:53:5b:
         4f:92:27:d2:23:f4:43:73:50:46:fe:a9:79:05:c8:e6:d8:49:
         91:3f:7a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:42:22 2026 by rpki-client