Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft
File:                     r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json)
Hash identifier:          1iLMokVmXEzrToafxE98v9n79HbdyY3IvG8DkRMX0zk=
Subject key identifier:   49:14:2B:21:6B:E4:FA:35:25:C8:83:EB:70:DA:5D:C4:5A:D3:91:24
Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15
Certificate issuer:       /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815
Certificate serial:       2B4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft
Manifest number:          2B19
Signing time:             Wed 14 Oct 2026 15:35:03 +0000
Manifest this update:     Wed 14 Oct 2026 15:35:02 +0000
Manifest next update:     Wed 21 Oct 2026 15:35:02 +0000
Files and hashes:         1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: ZnCQCh5MbV775lejR/twqJEal0BDHfXaaZnxQove5zw=)
                          2: 3701B6ECAB3511F18DD665A26C11F970.roa (hash: AtFyjSzJpmwJS5++D9ZwxOebly4i8uSwVic2GM31Rrg=)
                          3: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: mi5Z8QiyFyePXfXFb5bmVuyq1rksFrDBMyBn1iuDnTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl
                          rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 15:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11084 (0x2b4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91620ED, serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815
        Validity
            Not Before: Oct 14 15:35:02 2026 GMT
            Not After : Oct 21 15:35:02 2026 GMT
        Subject: CN=6acfa126-9d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2d:3f:08:3f:ac:6c:cb:9d:51:65:5a:51:71:
                    27:72:15:d5:64:36:76:8d:04:41:a2:06:8b:7e:d2:
                    15:53:26:df:70:85:73:a7:f9:95:e1:e4:e2:8a:b5:
                    54:2b:d1:24:66:36:e6:ed:25:fb:f8:4d:42:ec:d3:
                    a1:21:9c:09:3c:f8:90:53:28:31:a5:e8:62:88:5d:
                    af:65:8e:72:63:c7:45:12:29:e7:78:b7:45:4f:22:
                    49:df:02:b9:3e:45:11:ee:8e:69:7c:2f:ac:71:3a:
                    72:38:b4:59:f8:d0:88:00:99:1a:e1:e9:a2:be:be:
                    ba:88:47:1c:65:04:7b:3b:63:02:a4:da:35:a6:a2:
                    31:42:2d:ae:76:12:4d:f9:36:ee:cf:76:3f:23:63:
                    7f:32:a6:0a:6b:7b:27:44:16:4a:65:43:b8:1d:16:
                    81:aa:ff:19:6f:c9:f1:6a:06:70:12:e1:78:27:8b:
                    8f:ad:6f:27:61:73:79:00:af:8a:b4:9d:8e:08:74:
                    1c:45:e3:b1:99:83:1f:37:9a:3c:eb:ac:33:25:15:
                    81:52:46:90:4b:d1:73:e1:08:56:1e:87:4b:b1:19:
                    b4:35:2c:99:57:f2:92:3a:08:73:89:73:ad:1e:a1:
                    58:1c:87:7b:07:ae:5a:44:4d:7a:56:e3:21:15:93:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:14:2B:21:6B:E4:FA:35:25:C8:83:EB:70:DA:5D:C4:5A:D3:91:24
            X509v3 Authority Key Identifier:
                keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:52:fc:7f:2b:62:4a:6c:fc:49:67:20:6d:be:ec:e5:81:02:
         55:0e:2d:44:6c:09:6a:ea:02:3e:89:e2:95:d9:ee:6d:ac:7e:
         f7:3b:76:ff:82:6b:8f:a3:4d:cf:e2:4c:b6:53:0f:46:73:c1:
         36:97:bb:8d:6c:47:9d:3c:65:99:94:2f:92:16:db:c5:7d:fe:
         28:ab:1b:6e:14:32:60:32:03:d1:84:81:85:64:58:86:03:f9:
         03:9b:6e:a9:6b:16:85:19:93:1c:6a:0d:25:9d:49:d6:3b:f1:
         6b:a8:5a:7b:44:7a:4b:1f:ac:50:dc:08:b4:1e:f9:ee:f9:93:
         b9:82:7f:1d:47:7d:28:97:e6:99:e6:d0:0f:10:3c:bf:cc:6f:
         63:f3:b0:e8:b4:e1:64:86:bc:db:7f:d2:11:96:29:c1:2e:f1:
         2c:0c:81:d6:66:be:ae:ce:46:7b:da:bf:f5:47:11:58:bf:14:
         09:c8:f8:57:31:a3:46:a5:0e:81:c8:3b:54:8b:23:b4:df:e9:
         48:bb:0e:b7:a9:a4:5c:59:a4:b4:a6:bb:39:ae:3b:0f:57:3a:
         14:d8:e8:8d:d9:73:57:fb:e0:60:91:a2:d4:59:b1:76:22:79:
         a0:cb:22:8e:6f:37:fc:ae:4f:3f:9b:14:40:44:e9:89:eb:a4:
         7f:77:c0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:34:37 2026 by rpki-client