Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
File:                     2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft (raw, json)
Hash identifier:          rRVTXgL8jHEQ6K3BIwKrJodED8zUhTiQ4YlAGtkQMQk=
Subject key identifier:   15:42:8B:26:E0:97:26:72:04:FF:D3:8D:9B:D1:2A:0F:6F:E4:45:B1
Authority key identifier: DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E
Certificate issuer:       /CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
Manifest number:          011F
Signing time:             Sat 13 Jun 2026 05:49:56 +0000
Manifest this update:     Sat 13 Jun 2026 05:49:55 +0000
Manifest next update:     Sat 20 Jun 2026 05:49:55 +0000
Files and hashes:         1: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl (hash: CFmisJbidO6gYVrdfM5Xa5mjIA17z68U783AaXXvaBc=)
                          2: 50B93FA8B5EE11EF9AC9D812C4F9AE02.roa (hash: zIvaOMrJj6tNY8+g0C9uE13uNUrzvq9Y4fdiG+e+9uY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl
                          rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FA96, serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E
        Validity
            Not Before: Jun 13 05:49:55 2026 GMT
            Not After : Jun 20 05:49:55 2026 GMT
        Subject: CN=6a2cef83-f7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f4:e4:9a:37:c4:96:fa:2a:57:4f:63:e6:35:
                    6a:82:0a:eb:82:f5:8e:4c:c5:4f:f5:57:37:c7:46:
                    ec:5f:c0:c6:75:46:fd:0d:86:32:fd:ef:fa:06:26:
                    9a:52:c0:a4:e3:b0:01:30:7f:ad:21:55:c1:a7:3c:
                    d2:99:2f:ff:f2:10:ae:bb:db:50:27:8b:75:3d:a1:
                    6d:24:84:34:63:1c:ab:f7:cf:ec:76:6f:ef:28:cc:
                    69:e8:33:2b:5a:58:5d:b9:c1:45:32:14:57:15:40:
                    cd:70:c4:f8:b7:96:e6:51:82:c0:31:b7:2c:85:b2:
                    67:28:f8:00:94:fa:cd:33:24:e3:bf:35:fd:0e:81:
                    48:c8:77:77:0b:f0:c0:77:a8:83:12:37:54:5c:fa:
                    72:56:14:fa:24:2c:79:95:9a:9b:fb:76:44:2e:f5:
                    44:b8:ab:1d:f6:cd:71:05:57:b9:63:f9:e0:26:b7:
                    70:2c:b4:b7:5a:4b:d3:fd:87:a6:b3:60:3c:3c:24:
                    2d:4d:5f:d1:32:46:b0:80:19:5d:f8:a6:18:69:2e:
                    27:1e:0f:f3:09:79:85:57:81:93:3a:e7:82:dc:a4:
                    15:14:21:e4:dc:12:62:8d:68:81:45:fb:66:e6:94:
                    db:f2:73:10:dd:11:8c:88:11:13:f3:61:ce:eb:74:
                    22:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:42:8B:26:E0:97:26:72:04:FF:D3:8D:9B:D1:2A:0F:6F:E4:45:B1
            X509v3 Authority Key Identifier:
                keyid:DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a2:e5:9a:04:7e:37:c2:dc:6a:92:f3:70:e7:27:36:e7:bd:
         1e:08:43:b7:48:0e:e3:95:e7:b5:89:92:cb:9c:1f:72:83:f5:
         66:a4:d3:9b:f4:80:8c:d3:60:f4:76:b5:6c:4c:5e:cc:e2:de:
         e4:79:b0:89:dd:3a:16:6d:30:22:7a:84:85:c2:5e:01:15:0d:
         f0:25:2f:52:ac:96:f3:8c:cb:8a:bd:6f:c9:4c:37:d1:c8:88:
         d0:c1:78:d9:db:b8:b0:3b:fd:e7:9b:06:2f:e3:f5:5e:7f:80:
         94:19:85:f0:7d:c9:f9:f5:a4:63:a0:40:48:23:48:32:b7:fc:
         b7:66:10:95:08:88:04:73:c9:b9:8d:53:4c:8d:7d:6e:13:2b:
         6e:a0:2a:e5:4b:2b:67:a0:0d:76:b7:4d:da:34:bc:26:8d:fd:
         c1:be:ec:4d:82:0a:80:49:31:b2:f1:19:6e:68:1d:78:d9:8a:
         5d:85:d9:21:e7:f5:05:e5:76:80:d9:b5:0f:9b:83:9a:47:bc:
         b9:13:95:22:ee:ff:2b:3a:6f:06:ee:35:45:d6:74:26:07:a6:
         8c:70:94:61:ab:c6:9f:61:16:c5:25:f9:c2:41:4d:ce:60:8e:
         d0:fb:76:d4:fd:78:9c:1f:54:da:ef:b7:1e:d6:97:63:fb:0a:
         25:99:61:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:05:05 2026 by rpki-client