Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft
File:                     2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json)
Hash identifier:          sv0DDx5RlNM183IrdYng7N4k91MnSlbniNTgd/sF8j0=
Subject key identifier:   FA:20:C0:6C:AF:96:B2:96:77:C3:57:2B:E7:B1:5A:C1:94:1D:54:D6
Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C
Certificate issuer:       /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C
Certificate serial:       1691
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft
Manifest number:          167F
Signing time:             Thu 16 Apr 2026 16:38:55 +0000
Manifest this update:     Thu 16 Apr 2026 16:38:54 +0000
Manifest next update:     Thu 23 Apr 2026 16:38:54 +0000
Files and hashes:         1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: mOPuaqxPkpqtID/8cgu6YaKAhLUA9u3fit5uGLCBssw=)
                          2: 7F3ED5DE9C4411ECBD85CE4FC4F9AE02.roa (hash: R5LqOdOqksS9vnhA2t5gWvk4nnnpRsAdMKKtSSAeL3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl
                          rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5777 (0x1691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C
        Validity
            Not Before: Apr 16 16:38:54 2026 GMT
            Not After : Apr 23 16:38:54 2026 GMT
        Subject: CN=69e1109f-68f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:fc:fa:48:17:4c:46:bd:6b:c5:a6:b5:b9:
                    64:a8:53:c3:60:d4:1c:e7:82:88:85:56:1e:9d:6f:
                    71:59:7d:5d:f9:44:60:9d:53:3c:4c:a3:93:16:56:
                    90:15:f4:b9:18:5b:63:08:ef:40:bc:9a:55:6c:c7:
                    2a:13:83:af:7b:4e:8e:9c:0d:7b:60:47:88:68:7e:
                    e6:46:ed:c4:a7:98:90:d4:57:12:c8:a7:3c:2b:e8:
                    3d:16:bd:b2:81:ee:8b:97:78:18:9d:df:c5:3f:d4:
                    b4:5b:52:87:8c:94:73:f7:81:44:6c:60:61:3a:32:
                    3c:2e:9c:ff:7e:12:f2:d0:e8:19:4f:09:39:7b:9e:
                    26:7a:26:23:b5:67:4e:01:43:d6:e1:dd:5d:7e:4d:
                    d2:21:f9:59:7a:ce:78:ae:4b:a3:88:b9:40:b4:80:
                    84:b8:3f:2e:1a:16:86:0d:cb:28:13:2c:1d:38:de:
                    19:03:e6:31:e6:c3:2b:36:15:2a:51:9c:73:f4:fa:
                    0a:c5:83:2b:5e:82:9f:73:be:e1:3f:f9:e8:cb:11:
                    42:77:e9:c2:64:14:ea:c4:d8:a8:7f:15:dc:a2:ec:
                    4f:07:66:b7:a9:7c:c0:8c:f1:0f:cb:20:79:94:00:
                    44:04:f1:ec:3f:76:d6:fc:0b:60:8a:3d:27:d7:d8:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:20:C0:6C:AF:96:B2:96:77:C3:57:2B:E7:B1:5A:C1:94:1D:54:D6
            X509v3 Authority Key Identifier:
                keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:54:1e:04:28:9b:bd:da:fa:25:49:cc:20:d0:04:ca:58:e1:
         76:62:ff:b0:49:f4:6b:56:26:be:18:16:3f:ca:73:36:3c:87:
         58:b6:b4:47:e2:0b:a7:4b:a3:c2:33:d9:06:3b:f9:d5:a3:71:
         12:de:19:3f:9a:3d:d1:0d:35:9b:b7:49:51:d7:7a:ff:c1:37:
         8a:2f:20:06:e1:24:95:9d:31:98:49:46:cd:65:51:59:d4:3f:
         ea:3e:3a:e9:2b:c3:48:b4:94:2b:36:8e:f4:b0:8b:ea:d3:0f:
         05:89:7e:43:45:31:af:7f:0f:71:24:5c:81:c1:e6:76:cd:f0:
         68:12:15:50:a5:aa:25:f2:cf:fe:e3:ed:2f:73:7a:6d:e7:b3:
         7f:e9:1a:6e:5e:46:d3:f1:1a:75:0a:b2:22:83:52:3d:2e:9f:
         b9:ae:e8:0f:9d:de:65:4c:53:e3:b8:75:90:4f:dd:47:ad:bf:
         03:7f:4d:ef:d5:b7:85:73:5a:f8:51:25:af:fd:87:3f:e2:35:
         0b:b4:10:23:de:b4:67:c7:37:2a:13:56:9e:6e:69:bf:b4:68:
         29:d1:35:9e:ca:70:8e:07:4c:57:58:2e:16:d0:7b:65:81:b6:
         8a:d5:ad:88:31:5c:13:4a:e0:50:7c:52:75:40:15:c7:1b:b3:
         3f:aa:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:30:07 2026 by rpki-client