Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
File:                     2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft (raw, json)
Hash identifier:          NewrkmxAEzq039pU5Tz6Sbzd+J1PHI0zi66dKfZKqyg=
Subject key identifier:   32:E6:81:A3:E4:21:62:13:66:9A:4C:48:7E:98:DC:05:C7:6A:DB:27
Authority key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
Certificate issuer:       /CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
Certificate serial:       0715
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
Manifest number:          06ED
Signing time:             Thu 16 Apr 2026 22:04:41 +0000
Manifest this update:     Thu 16 Apr 2026 22:04:40 +0000
Manifest next update:     Thu 23 Apr 2026 22:04:40 +0000
Files and hashes:         1: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl (hash: CQNDCFCkcJJ0Ui/Y9Kdrl/NVjfpVXCzBTxELCgwTwtY=)
                          2: 0A7BC528913611EBBD9B811AC4F9AE02.roa (hash: Axv4ofsSe90yP+Tj74eBTq7TDNPSfa7eV4MAl8BctRE=)
                          3: 8A345D2891A111EB87E23C38C4F9AE02.roa (hash: mIm/bbZcQkFrDlz9RJ874pUYBEB1ADCrlxMEBQ9UkoE=)
                          4: 09A1853E913611EBBD9B811AC4F9AE02.roa (hash: EIzNMKDFWXT+xpDDB3WLdazu32oeLTAqnJXbS3MPXsE=)
                          5: 08DCE5BC913611EBBD9B811AC4F9AE02.roa (hash: kK1XQ5Qi/71Yzi7I23BLNly3sjDmgPxSxXxrn5KrS+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl
                          rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1813 (0x715)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEAE7, serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
        Validity
            Not Before: Apr 16 22:04:40 2026 GMT
            Not After : Apr 23 22:04:40 2026 GMT
        Subject: CN=69e15cf9-8e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:08:29:08:f7:af:ab:31:a3:a2:e1:c5:54:
                    5e:56:58:9c:30:8b:46:66:57:ba:c5:7e:26:61:6f:
                    0c:e5:67:44:30:04:54:5b:e1:1f:a3:94:b5:c3:eb:
                    ed:44:4a:71:79:ac:ad:6d:f9:7d:84:26:5a:e7:52:
                    41:26:be:16:72:13:8b:ed:e6:fb:d3:56:bf:55:ba:
                    42:f9:ff:e6:31:67:4c:25:7c:f4:1d:a0:bd:9e:07:
                    70:8b:fb:6c:60:ac:f6:11:b7:1d:ef:05:65:a7:75:
                    b0:60:28:4a:82:17:b9:78:3b:3a:45:8b:09:6f:bf:
                    51:5a:88:9c:eb:ed:31:5c:44:e4:f0:68:8a:5f:be:
                    82:01:1d:5f:7b:11:55:6a:b0:24:0e:5f:e6:82:57:
                    09:9a:54:79:d5:3f:ce:e9:69:91:9b:d7:86:c7:96:
                    3f:f3:2e:85:82:1b:e8:24:6a:d9:df:eb:ad:8b:eb:
                    7f:82:09:bb:4c:18:5b:01:96:82:32:d0:b9:53:02:
                    dc:14:8a:0c:67:e7:a0:76:12:df:d0:3d:ff:a8:55:
                    d0:c7:d1:ee:fe:58:a9:23:c9:22:f2:6c:f7:b6:b7:
                    87:10:73:b9:10:e5:ff:51:13:70:d4:e1:60:7d:e3:
                    90:fd:21:9c:57:13:90:8a:92:22:22:1b:f9:f8:e5:
                    3e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E6:81:A3:E4:21:62:13:66:9A:4C:48:7E:98:DC:05:C7:6A:DB:27
            X509v3 Authority Key Identifier:
                keyid:DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:7e:be:4f:c2:75:97:24:a6:bc:7c:f4:6e:8e:8e:51:92:cc:
         eb:c7:5f:18:79:ba:ac:75:66:be:8b:29:f2:4d:b8:34:68:52:
         72:7d:83:66:ba:0f:33:a8:39:c0:84:14:44:d0:ec:9f:95:e2:
         96:3c:39:46:d9:06:c5:4f:d9:eb:6c:04:69:4e:ed:e7:c5:e8:
         63:7a:95:49:0f:29:82:fb:d9:e0:98:9f:84:14:09:7d:91:15:
         59:69:a0:2f:92:69:37:f8:ca:19:60:67:0b:f7:d5:6a:51:9a:
         9f:d6:b9:09:0b:d7:61:e8:da:cb:f5:bb:3f:62:66:ff:18:0f:
         6b:9b:c4:a3:7d:89:e9:c3:88:c2:8f:fa:a8:90:86:44:d4:62:
         49:da:dd:a0:6a:2f:9c:fc:b8:6f:86:b7:b9:d4:99:b2:81:ae:
         9b:b0:b7:98:dc:eb:32:f2:6b:2d:97:09:ce:d3:6e:62:dc:0a:
         1e:36:fa:a5:14:71:59:ce:b2:7f:b4:f8:a2:e6:b3:0c:2b:98:
         1e:f5:31:e5:fc:3b:47:59:ed:29:a9:06:1b:47:60:6a:20:b4:
         71:ef:b5:d5:2b:84:03:05:93:f7:9f:24:d6:6f:30:4d:1b:2f:
         3f:dd:bd:e9:39:11:76:a3:23:fd:56:42:fa:14:d3:b2:87:08:
         07:2f:aa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:05 2026 by rpki-client