Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
File:                     2nLQztquGaHsPtugRn1ZjrmRVlY.mft (raw, json)
Hash identifier:          pMsc4Dhg+FiBaDKaE+P2NLsyjSfVj8N7c+Agtmk8yKA=
Subject key identifier:   3A:0C:80:E7:EA:84:B5:32:C9:52:24:E3:70:42:DE:22:E0:A1:FA:35
Authority key identifier: DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56
Certificate issuer:       /CN=A915E131/serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
Manifest number:          57
Signing time:             Fri 17 Apr 2026 07:51:00 +0000
Manifest this update:     Fri 17 Apr 2026 07:51:00 +0000
Manifest next update:     Fri 24 Apr 2026 07:51:00 +0000
Files and hashes:         1: 2nLQztquGaHsPtugRn1ZjrmRVlY.crl (hash: q/E84pQsji+TSmMbPkrGUnRCEwWB3ZM0FU5+XtLdCxw=)
                          2: 7D4302A0BEC811F0AE45220FC4F9AE02.roa (hash: DdCOIo33v4IDMQPtkKtDFsOxid92dMxNzutXTG46zeE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl
                          rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E131, serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
        Validity
            Not Before: Apr 17 07:51:00 2026 GMT
            Not After : Apr 24 07:51:00 2026 GMT
        Subject: CN=69e1e664-5a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:3e:cd:1b:d9:6b:62:cd:8a:86:ff:7f:85:
                    7c:27:f1:99:9c:4c:71:5c:d7:ef:34:8c:83:c1:a1:
                    e8:b4:1f:ab:c2:a5:d6:50:7f:d5:cb:11:ca:2e:89:
                    ee:4b:fd:b8:6c:e7:97:55:f7:b4:2e:f8:6e:5c:3e:
                    c9:0f:7d:34:50:ce:6f:b8:08:e7:dd:4a:1b:ff:01:
                    e7:8d:92:f6:c4:ee:57:27:39:7d:d8:ed:15:43:ce:
                    11:4a:5a:df:75:b5:5a:b2:7d:44:a4:45:6d:35:8a:
                    2c:8d:65:cd:96:77:e6:6a:77:80:9d:0f:33:4a:d0:
                    c5:0c:cc:c9:ce:3b:60:c2:74:9e:6a:42:fe:91:0b:
                    8a:92:bc:e0:79:40:40:e4:05:f5:8d:87:94:f0:b6:
                    0f:a0:57:db:b8:26:8d:e5:98:1a:04:17:75:f6:4c:
                    86:c5:9f:19:74:be:eb:01:25:23:f6:86:5b:a3:10:
                    04:86:32:39:1c:1a:62:cc:f1:da:a3:b3:7f:0d:14:
                    11:be:4a:69:ae:f2:3f:13:a6:07:e7:3f:c3:6b:7c:
                    e2:cf:18:02:a7:96:7b:96:d9:ac:b4:1b:6d:44:a8:
                    b2:54:7c:65:16:46:b5:ef:ab:15:fa:ec:0d:9f:72:
                    4f:3e:35:f7:f6:ea:d6:6a:ee:33:05:30:cf:22:e9:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0C:80:E7:EA:84:B5:32:C9:52:24:E3:70:42:DE:22:E0:A1:FA:35
            X509v3 Authority Key Identifier:
                keyid:DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:52:53:f0:86:c0:18:e2:76:da:13:b8:9e:ca:c1:a3:a7:0c:
         1a:8e:f2:6f:bc:c9:75:7b:c4:af:2c:71:53:a9:e7:a0:7d:4a:
         85:ba:75:ad:24:73:4f:88:02:25:de:65:c7:e6:d0:64:cd:65:
         5e:92:09:4b:43:b9:e9:2e:8e:ae:26:8a:6b:1b:58:de:62:86:
         90:be:eb:c5:82:e7:70:9e:94:9b:22:74:d6:a1:e7:ad:80:5c:
         2a:0d:49:3d:1f:2d:b1:7f:56:6c:65:5f:c4:30:84:12:56:c5:
         7e:66:ac:2a:ca:31:12:87:a7:3a:da:26:82:c5:d7:10:13:a6:
         c0:a4:24:ca:25:a1:71:0e:2c:4b:15:f8:c0:bf:21:b8:01:66:
         9e:fc:68:1c:25:55:5a:6f:ca:d4:83:4b:a1:0b:03:2d:83:0d:
         93:b0:e6:62:38:a3:80:42:41:85:ad:cf:d1:7d:99:c7:78:72:
         cf:1b:8a:ec:be:02:d6:28:e1:11:aa:04:2c:fd:98:27:1f:3f:
         74:dc:3f:17:c3:37:9d:6e:9a:37:90:20:56:ce:4a:bc:c1:76:
         2a:46:49:01:c8:4b:04:d9:4d:b9:e5:45:93:b4:d7:76:dc:5a:
         ca:0e:09:82:27:32:03:93:18:8b:a1:44:23:9e:34:96:f9:1b:
         4a:92:f8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:48:54 2026 by rpki-client