Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
File:                     N2LeNhaqS6BLeurLVIuGpi5vFw4.mft (raw, json)
Hash identifier:          0XweyIb3h0jrAmOoqPJGHwtL03F8jg3TxZLNiBCSbZo=
Subject key identifier:   71:03:2F:B5:03:7F:D7:6F:16:94:D0:2F:02:A8:AF:5A:13:69:C5:22
Authority key identifier: 37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E
Certificate issuer:       /CN=A91A3660/serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
Manifest number:          2D
Signing time:             Fri 17 Apr 2026 08:28:28 +0000
Manifest this update:     Fri 17 Apr 2026 08:28:28 +0000
Manifest next update:     Fri 24 Apr 2026 08:28:28 +0000
Files and hashes:         1: N2LeNhaqS6BLeurLVIuGpi5vFw4.crl (hash: 2woQCORt9caaBwCJASDoOHGZ3KGHrE9SXBTJSrmN6SA=)
                          2: AA175058274911F1878D13C8B4833773.roa (hash: kTIz7rz7OZ8EQKnSrQuhCggmlAoEm989ju8R+p6peKU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl
                          rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3660, serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
        Validity
            Not Before: Apr 17 08:28:28 2026 GMT
            Not After : Apr 24 08:28:28 2026 GMT
        Subject: CN=69e1ef2c-c01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:e2:a8:1b:a0:e1:35:70:af:96:8b:b8:4b:
                    4e:30:0b:de:ad:be:62:ac:bb:5c:b7:8a:5e:60:2c:
                    65:93:ef:c5:f6:04:8d:ee:0b:cd:65:7a:6b:12:78:
                    d1:ce:11:d0:71:a7:fd:8b:58:4d:2b:13:2a:f0:0a:
                    13:7b:9f:3a:01:6b:31:63:1d:68:88:a6:a0:2a:62:
                    4f:ef:1a:67:ab:c2:11:74:81:c8:87:df:c9:de:de:
                    39:dc:1a:ed:c5:f5:54:ba:d4:38:76:a5:5e:98:41:
                    e0:a9:2b:8b:a3:63:4b:16:80:76:a2:05:72:9b:cd:
                    54:2d:fa:88:19:46:26:2f:a0:8a:88:19:df:d9:d2:
                    ee:20:b1:76:09:7f:38:f5:65:60:db:aa:4b:f5:99:
                    42:55:7d:ba:c8:8b:6f:c4:2e:b4:c9:0a:8c:d7:b3:
                    3f:20:10:b4:e3:22:2b:0a:46:c6:67:bb:4f:7d:7a:
                    67:fa:e3:54:04:b0:da:6b:0a:67:f3:63:40:85:e7:
                    e7:5a:e1:ea:17:d8:6e:be:03:92:7d:e2:2f:34:dd:
                    21:00:13:c1:03:fb:84:37:28:78:bb:27:7a:65:a1:
                    d7:67:0c:b6:9c:7b:d3:61:62:fa:a9:9f:70:a4:cd:
                    20:3b:11:02:f8:f1:8a:81:75:d3:7f:04:c1:39:ab:
                    6c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:03:2F:B5:03:7F:D7:6F:16:94:D0:2F:02:A8:AF:5A:13:69:C5:22
            X509v3 Authority Key Identifier:
                keyid:37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c1:e9:00:51:b7:5d:8b:cf:db:d6:55:cb:79:b2:e0:af:20:
         2b:5d:5e:76:8e:d0:f5:ec:a9:d9:ec:0b:23:f1:2a:ef:4c:59:
         78:05:69:66:c2:b7:3b:c7:bf:09:a9:65:0f:26:5b:af:62:69:
         18:b4:50:b0:83:12:d6:5e:5c:86:b9:29:2a:cc:64:32:4e:17:
         92:07:1d:52:62:a0:73:1e:13:2b:38:c2:cc:38:31:44:76:28:
         d6:e1:4b:7a:c9:ef:d0:c1:90:04:82:f6:22:05:07:3c:22:d3:
         82:c0:67:14:77:be:6f:fc:d9:c2:ac:07:3a:82:20:1d:ce:b3:
         fe:8e:7b:87:a2:13:cc:5e:07:ed:82:cd:5d:3a:67:11:d5:47:
         55:70:1c:61:39:65:b2:5b:73:2b:36:1c:81:5a:da:f7:36:db:
         93:53:8b:5d:01:97:c4:06:dc:da:04:56:30:c5:7e:ab:49:9a:
         2c:d5:fa:1d:09:ce:07:61:a8:da:51:98:78:a3:9e:48:f2:ba:
         ac:47:c7:58:9f:20:52:60:1b:14:fe:56:16:2c:40:4d:e0:28:
         9d:28:0f:a6:d4:3b:a5:eb:b9:90:5f:df:76:19:b1:84:c9:e1:
         61:de:a1:b6:9c:ad:ff:00:a2:e5:17:ef:40:c0:81:c9:c3:1d:
         20:7d:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:53:57 2026 by rpki-client