Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
File:                     2kObzwPK_LW-ftCuezKPafiMGys.mft (raw, json)
Hash identifier:          UAigrRB4kkY7EnwMrIjdfgMUg3dYHL+c3WDuLUSUnyg=
Subject key identifier:   37:2A:7A:ED:EE:1E:55:5D:01:0E:B5:78:B6:DE:E3:5A:C6:7C:ED:AD
Authority key identifier: DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B
Certificate issuer:       /CN=A9188EB6/serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B
Certificate serial:       0590
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
Manifest number:          0588
Signing time:             Wed 14 Oct 2026 23:39:52 +0000
Manifest this update:     Wed 14 Oct 2026 23:39:52 +0000
Manifest next update:     Wed 21 Oct 2026 23:39:52 +0000
Files and hashes:         1: 2kObzwPK_LW-ftCuezKPafiMGys.crl (hash: oUoEYOfdO6hEgwwhyq5nE2hXBqV+3bbxwIT1+D21RXQ=)
                          2: E9E440F2411511ECBC2FB20BC4F9AE02.roa (hash: 1+kyZfwlYYLpY6rDzV9OldQ7LOSPDOBQp0/0LVGDmAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl
                          rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 23:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1424 (0x590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188EB6, serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B
        Validity
            Not Before: Oct 14 23:39:52 2026 GMT
            Not After : Oct 21 23:39:52 2026 GMT
        Subject: CN=6ad012c8-b27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c9:84:bf:53:19:b5:e3:c4:cb:25:eb:35:65:
                    32:d8:4c:00:3a:8a:1c:2a:ed:14:5e:1f:34:35:b4:
                    36:8d:07:ac:59:03:a9:af:06:f5:bd:ea:13:c6:34:
                    0b:2c:b4:8b:38:8e:3a:f0:57:71:53:2f:9a:28:0e:
                    6f:52:c9:d5:6f:ce:cc:43:cf:07:dc:d0:9f:a7:0c:
                    a3:cd:c9:1c:c6:41:0f:39:c2:ae:bb:12:6f:65:45:
                    5d:ff:da:cf:0c:4f:6a:98:38:90:36:0e:af:3d:88:
                    a6:62:59:70:5d:36:f5:b2:08:f9:63:02:f1:f8:25:
                    ab:6e:33:eb:29:90:5a:92:f7:6e:11:94:ab:38:bc:
                    99:38:c0:78:86:5e:70:24:7c:fd:e5:b6:ce:54:31:
                    87:95:ae:cb:71:4f:7f:e6:ac:30:da:bd:a9:f8:f1:
                    0b:98:cb:b5:bb:6e:ff:8a:7a:92:a0:ab:0d:98:34:
                    ff:74:81:94:65:54:90:f1:bb:46:e2:20:18:bd:27:
                    26:e3:bd:5e:c3:09:25:a1:d2:e0:12:99:c0:10:46:
                    0f:5a:1c:e2:a6:92:be:66:0d:a9:34:0e:37:c3:50:
                    d8:69:56:01:3c:90:3f:cf:77:3e:dc:fb:ec:4b:18:
                    01:ed:35:7c:57:85:91:e1:5d:48:44:fa:9d:68:a0:
                    a4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2A:7A:ED:EE:1E:55:5D:01:0E:B5:78:B6:DE:E3:5A:C6:7C:ED:AD
            X509v3 Authority Key Identifier:
                keyid:DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:fa:c3:d5:67:0a:74:66:78:cf:8e:53:e6:5a:c3:da:a9:4d:
         a9:01:e6:6e:c1:bd:98:ae:a2:bb:13:1e:9c:a0:c1:f7:6f:e7:
         4b:aa:48:5a:33:26:48:50:15:65:83:09:43:1f:b8:79:70:2c:
         41:58:14:73:56:5b:91:97:92:e1:4a:4a:22:ff:7e:e3:49:1a:
         35:2d:d2:b9:da:60:0d:e4:42:2a:5e:42:eb:eb:d2:db:f4:6d:
         18:93:c8:8e:51:f7:8f:eb:9a:72:cd:06:e1:29:04:79:fc:b1:
         a0:41:a3:e2:24:97:59:5c:74:1c:d0:4e:49:93:56:49:d7:4d:
         49:e8:7e:d4:fd:cb:9d:77:f8:69:58:d4:0a:b4:f5:ef:bc:7e:
         c2:35:70:5f:79:3e:4b:02:87:e7:33:a5:d1:24:d4:d6:2c:63:
         f6:69:33:e9:c5:9e:a8:a7:a5:4a:43:84:39:92:d0:02:20:ed:
         05:12:f3:fb:a2:f8:6e:2c:b1:90:b6:fe:18:51:69:7d:97:2c:
         95:32:06:dc:6d:2c:85:8d:d3:40:68:ca:0d:e9:6a:36:15:ae:
         19:96:e9:9f:2f:31:d6:6c:27:3c:15:ae:71:c6:db:49:9e:80:
         c7:5c:97:4e:94:74:4e:5e:a0:d1:f4:d6:75:fe:dc:01:e7:54:
         3c:a7:3e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 22:07:55 2026 by rpki-client