Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
File:                     2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft (raw, json)
Hash identifier:          uO+RxvXPWCKnuuavi3weiG4IBhdr8gQbqyG+5Sq8qzM=
Subject key identifier:   00:5E:F6:45:57:7A:B0:8E:25:BC:57:06:D4:7E:E0:BB:56:9A:81:E0
Authority key identifier: DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E
Certificate issuer:       /CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E
Certificate serial:       010A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
Manifest number:          0101
Signing time:             Fri 17 Apr 2026 05:52:39 +0000
Manifest this update:     Fri 17 Apr 2026 05:52:39 +0000
Manifest next update:     Fri 24 Apr 2026 05:52:39 +0000
Files and hashes:         1: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl (hash: PiBvopBzJCZ+rIKpnAG1XV0C+i4TNjl1ThxVcCrLOO8=)
                          2: 50B93FA8B5EE11EF9AC9D812C4F9AE02.roa (hash: ajdGzJbwz5TOYdIi82plxkghmo/zXY3H1Me9aI3spR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl
                          rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FA96, serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E
        Validity
            Not Before: Apr 17 05:52:39 2026 GMT
            Not After : Apr 24 05:52:39 2026 GMT
        Subject: CN=69e1caa7-9334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:41:13:37:34:44:3d:d9:8b:60:f9:35:b1:
                    1d:b9:18:7b:d7:30:e1:17:7e:86:85:4f:fb:51:f6:
                    9e:45:3b:71:df:b3:ac:38:89:ef:1f:0e:b1:0c:d0:
                    d3:a3:41:2a:94:90:14:b8:72:3c:1f:09:cd:b3:ee:
                    3c:84:87:fd:53:e7:33:90:70:d7:76:27:c6:2b:54:
                    ed:57:7f:8a:f0:94:0f:8d:da:fb:4c:31:ad:eb:2d:
                    d9:b6:4e:b8:71:29:9c:18:e8:be:58:39:1a:78:39:
                    9a:5f:5e:74:50:0e:8c:f5:d1:ff:0c:a4:b6:cf:c4:
                    41:24:6a:a2:9d:05:67:8f:a3:22:a6:0e:24:82:33:
                    1a:0b:9f:e3:c8:9d:13:a7:67:29:bc:74:02:95:b5:
                    43:07:03:9a:49:fe:1b:35:fe:92:6a:88:18:b2:c4:
                    2c:bf:ca:6e:59:d2:27:9a:98:12:c7:9b:34:1e:78:
                    78:9f:a3:d0:7c:a8:ed:65:fd:bb:9c:bc:b2:fa:68:
                    9f:7f:af:1a:80:ea:50:b4:00:0f:59:05:70:9a:0a:
                    bb:a3:89:71:85:e5:0c:54:14:0e:5f:4c:42:94:74:
                    92:26:f9:1b:5e:18:0e:92:68:e1:d0:d0:13:35:dc:
                    88:d3:99:32:c8:e4:23:c6:a7:aa:cc:ef:ba:f4:ac:
                    51:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5E:F6:45:57:7A:B0:8E:25:BC:57:06:D4:7E:E0:BB:56:9A:81:E0
            X509v3 Authority Key Identifier:
                keyid:DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4c:60:b4:08:d1:8f:7f:fd:fc:37:d3:5d:e4:98:e1:b0:cd:
         dc:9f:52:6e:58:0a:de:20:4e:b6:39:04:52:4a:31:60:fd:74:
         d7:7e:a5:8c:3b:15:d8:e9:47:a6:5b:28:b6:f4:97:34:ba:d9:
         30:3c:63:49:13:96:23:69:79:57:fb:09:5c:19:3c:48:11:e4:
         c7:71:04:e3:01:58:23:bd:63:90:70:a7:f9:f3:e6:3a:57:82:
         e4:c7:f7:1d:3e:99:37:43:e1:05:b0:f8:f0:95:0f:a3:2a:47:
         41:0d:ee:65:85:32:0d:45:65:2d:dd:9c:1d:da:dc:59:59:de:
         53:62:06:50:38:77:93:a5:47:87:d8:ec:59:2b:c5:e6:7e:15:
         8e:9f:d6:ae:f7:cf:03:3a:48:3d:2e:e7:b0:01:79:9f:81:c4:
         36:1a:4c:1f:58:c0:e5:50:32:7d:3b:8e:f5:bb:87:09:4b:0f:
         d1:af:8d:c5:5e:d4:25:e7:67:a1:9c:1e:5b:b4:8c:93:0e:ba:
         13:da:52:42:4f:29:5f:79:f6:a3:fd:1e:4c:34:b1:6f:c1:74:
         b1:92:ad:ab:3c:db:79:88:94:cf:fb:bf:51:de:02:6c:7c:3d:
         65:75:f8:55:1e:45:ee:da:24:49:f6:35:bb:a6:bb:a2:78:eb:
         83:88:b1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:30:29 2026 by rpki-client