Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
File:                     r2ctqMXR1sgNUGF4yefLdE9uOOY.mft (raw, json)
Hash identifier:          rlkyqlgAqIMslC7XteByP5HmK9ociQwwFKgKoJljyYc=
Subject key identifier:   CA:06:A9:BC:1E:47:AC:DD:17:D2:C9:D3:36:C9:2E:89:F4:A4:5B:3E
Authority key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
Certificate issuer:       /CN=A91A6F2D/serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
Manifest number:          0109
Signing time:             Thu 16 Apr 2026 22:27:56 +0000
Manifest this update:     Thu 16 Apr 2026 22:27:55 +0000
Manifest next update:     Thu 23 Apr 2026 22:27:55 +0000
Files and hashes:         1: r2ctqMXR1sgNUGF4yefLdE9uOOY.crl (hash: 3Oe3JSFTh4Brmlbo9PT6Pf9DUl2LYVanPCJkQxHMKrI=)
                          2: FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa (hash: ASL8/2HCWAJCmthowgFWIUdkitcmGIEB/XyIsZpt42w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F2D, serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
        Validity
            Not Before: Apr 16 22:27:55 2026 GMT
            Not After : Apr 23 22:27:55 2026 GMT
        Subject: CN=69e1626c-251a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:f9:7e:cb:af:4f:66:9c:91:00:e2:00:3a:
                    5f:26:e3:91:0f:d3:b2:b0:84:72:dc:4b:83:a1:2c:
                    d0:52:6b:6d:88:d4:88:f7:c8:33:a1:b8:4d:63:06:
                    c6:17:2e:c5:b0:0c:5d:45:1a:2a:c5:22:d6:8a:4c:
                    a4:28:11:0c:bb:53:15:84:00:5a:9f:5a:e6:5f:b2:
                    d4:4a:84:59:81:65:e9:ae:d9:4d:22:6a:0e:ac:a9:
                    11:7d:a7:a1:20:09:1d:05:8c:11:e8:d4:b4:25:c4:
                    a8:8d:7e:00:f5:1e:8c:49:f9:f1:ec:ba:4d:b1:b0:
                    f2:f4:91:c3:71:21:0e:ce:17:ab:ca:6d:67:dd:b5:
                    56:a9:8e:15:57:52:b5:ae:29:25:41:81:3c:8e:4c:
                    a5:63:2d:24:64:c9:cd:14:f9:c9:ff:a2:cd:a3:a4:
                    cd:fa:11:55:50:56:f4:ca:e3:48:fe:5f:ae:e5:0a:
                    9f:48:77:df:ee:19:57:b1:01:9c:7d:ec:4b:60:bc:
                    21:5d:e0:02:f6:3d:af:39:2e:68:85:53:35:7a:52:
                    87:fa:16:1f:5e:1d:d5:cd:9c:7c:ab:1d:73:19:c0:
                    ca:cd:32:e2:bd:79:63:2c:f6:94:b0:15:f6:6f:49:
                    01:c2:89:2d:9f:5d:02:9d:cb:99:58:77:03:96:52:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:06:A9:BC:1E:47:AC:DD:17:D2:C9:D3:36:C9:2E:89:F4:A4:5B:3E
            X509v3 Authority Key Identifier:
                keyid:AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:22:ec:96:99:e8:00:dd:39:f0:c3:8e:21:d7:5f:73:71:a7:
         cb:7e:9b:5c:78:ba:0f:ef:16:90:a3:23:aa:80:dc:92:da:14:
         37:a1:fd:25:30:bd:6d:89:0a:66:56:03:24:44:d2:9d:1a:a9:
         46:ca:be:fa:52:0b:5e:d6:61:e7:1b:53:9a:d4:72:13:9c:aa:
         33:8a:9a:9d:b6:a7:b4:9e:35:8a:29:da:27:d9:ab:d3:99:9c:
         90:71:31:04:e0:d6:d4:a0:f9:92:99:cd:14:f8:ca:f0:43:43:
         b4:ec:54:76:de:ee:c1:de:a8:ef:bd:af:ee:1e:7a:5c:76:95:
         de:64:24:a0:d9:ec:5b:91:e1:cf:72:ab:d0:04:6d:b5:57:68:
         bd:96:e7:df:e9:d3:67:a9:85:0c:05:9e:46:74:b5:38:bd:6d:
         37:42:78:47:be:2d:a8:3b:28:c8:19:70:a0:42:71:1a:ae:b9:
         30:7d:97:ee:7d:bc:1d:c4:de:86:72:a4:9a:8a:3c:6e:af:48:
         c2:59:08:27:af:6f:b7:8d:33:68:6b:bd:ff:3c:7f:00:91:59:
         b4:21:86:bc:f7:5d:fc:d1:b7:b2:2c:e1:a1:b9:f2:9e:62:90:
         b8:8d:72:42:a3:fe:34:82:b5:98:dc:01:a7:c3:7e:52:9c:e1:
         09:a8:0b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:03 2026 by rpki-client