Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
File:                     2v3gvG4K06iVvHVtbDGh5httODs.mft (raw, json)
Hash identifier:          qa5fB0qYC8kSW5LD2/mZUfCeuKuxw6tJAv6SWFCMkXU=
Subject key identifier:   9A:2A:2E:7B:0B:BA:30:C4:BC:44:04:9C:0F:0E:73:7E:EC:28:A9:02
Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
Certificate issuer:       /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Certificate serial:       0913
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
Manifest number:          08FA
Signing time:             Thu 16 Apr 2026 20:16:10 +0000
Manifest this update:     Thu 16 Apr 2026 20:16:10 +0000
Manifest next update:     Thu 23 Apr 2026 20:16:10 +0000
Files and hashes:         1: 2v3gvG4K06iVvHVtbDGh5httODs.crl (hash: JUC+c3FXkHYfZGTfYvhttz3TOXa7i7YomlNk/h0Y6o8=)
                          2: 312D1714A6F211EFBD311B19C4F9AE02.roa (hash: KoKgWmsxfkCkbgWCHOo/9Lqsa6nPc6n6w00K8LYdEf4=)
                          3: 311DA6AA78F611EFAFD81B5BC4F9AE02.roa (hash: 4vuTCUAhfJT3HGv5tLVBeeb3AAx6C5qUisVfSfItWZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
                          rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2323 (0x913)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
        Validity
            Not Before: Apr 16 20:16:10 2026 GMT
            Not After : Apr 23 20:16:10 2026 GMT
        Subject: CN=69e1438a-be78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:73:4a:6b:38:89:7c:c1:ee:b5:b7:b5:6f:8d:
                    5f:80:c4:57:c5:05:5b:2c:44:cf:97:30:ad:31:96:
                    0a:ef:40:2c:15:65:44:69:4b:77:e7:b3:e8:4f:99:
                    e4:c5:a7:f0:33:32:14:96:f9:4d:37:0e:76:b3:f5:
                    fe:f2:01:9b:db:bc:07:f0:0d:4a:d2:36:e8:eb:0b:
                    77:a3:4b:e0:e3:ed:d0:cc:7f:d3:e2:4a:b0:c5:f0:
                    89:b0:9a:42:67:2f:5e:ff:33:98:de:81:be:c2:46:
                    47:05:31:54:7c:75:02:65:c0:a2:11:3d:71:67:31:
                    9d:dd:64:42:75:8e:fc:94:a1:72:ab:00:16:9f:c5:
                    bc:74:9a:df:aa:84:96:f7:43:0c:6c:01:62:e9:3e:
                    20:d1:30:c9:cf:77:ef:3e:0e:82:7b:fc:09:c5:8f:
                    c2:95:50:07:cf:52:34:5d:5b:26:2e:d4:4a:50:d3:
                    a0:c7:c6:45:6c:29:9b:37:f5:1a:49:7e:d1:17:b2:
                    2d:4d:75:5b:db:89:05:e4:19:ad:f2:6a:15:32:2c:
                    61:e6:78:5d:d2:84:be:cb:20:43:88:25:9f:56:c6:
                    fa:62:bb:fa:27:9b:4e:cf:49:6b:0b:e9:72:93:75:
                    27:08:a7:5e:53:8f:c1:1c:1f:eb:cd:5d:44:71:e6:
                    c9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2A:2E:7B:0B:BA:30:C4:BC:44:04:9C:0F:0E:73:7E:EC:28:A9:02
            X509v3 Authority Key Identifier:
                keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:35:6b:d6:af:78:da:2c:8f:0d:81:9b:78:9d:eb:a6:33:0a:
         81:38:5c:51:02:3e:15:28:ac:b9:31:4c:9c:29:eb:ce:02:89:
         b2:7d:a6:b8:73:98:31:cf:81:b1:69:c8:b7:0a:27:54:0a:d9:
         c5:da:34:76:3f:0c:fa:bf:7b:03:1a:a9:46:c7:56:36:9a:64:
         3a:f9:9c:ab:a9:73:8a:5d:a1:bf:c8:a4:a0:6c:6c:8a:b7:73:
         03:40:88:08:b1:39:ae:33:50:ff:cf:6f:a2:36:37:d2:9f:8c:
         71:6c:58:2f:05:81:be:06:8c:0c:5e:da:91:98:97:7b:9f:77:
         30:b9:1b:13:a9:ff:fa:f3:d4:0e:6f:1e:4a:f5:ba:7f:af:93:
         1f:90:00:34:d1:36:3a:4a:78:61:c4:25:5b:a9:ed:2b:5a:56:
         b0:a2:99:4b:20:12:f7:5a:57:f2:c8:42:31:6d:99:95:8e:5a:
         fb:80:a1:89:86:6b:09:64:88:e1:54:ce:e6:53:d4:cb:4b:27:
         cf:8a:65:eb:8d:19:cf:6d:6d:a5:1d:66:4a:38:be:5d:33:50:
         1b:9c:90:49:39:a8:28:23:0a:ab:5d:61:fe:49:50:90:5f:e1:
         38:fa:a4:01:ed:92:c7:ab:2f:18:b3:5a:20:0a:0e:df:42:e3:
         20:2c:27:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:25:30 2026 by rpki-client