Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
File:                     2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json)
Hash identifier:          mB1ldUvt57Coq2cuC9OvVfk48YcdR0jtGNrU8Xt4gbo=
Subject key identifier:   86:AC:6D:51:7A:F6:BC:B2:AD:C2:1C:BE:EA:CB:78:F6:D6:4F:5D:BE
Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
Certificate issuer:       /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Certificate serial:       0258
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
Manifest number:          0252
Signing time:             Fri 17 Apr 2026 02:01:53 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:53 +0000
Manifest next update:     Fri 24 Apr 2026 02:01:53 +0000
Files and hashes:         1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: Md/nahkOBHFTTxbPI9nUfVQO6dKyb98D2o7UX/8a4Vg=)
                          2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: lg5BmvJvKTTVfM5jqqI1swljGGFx139JD9z+JtbKwVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
                          rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
        Validity
            Not Before: Apr 17 02:01:53 2026 GMT
            Not After : Apr 24 02:01:53 2026 GMT
        Subject: CN=69e19491-d527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c0:20:57:a2:c3:cb:98:a0:6f:ce:bc:31:c9:
                    f9:13:53:5e:35:38:39:5d:d7:26:8d:94:dc:fb:bf:
                    24:21:72:b5:7f:e8:23:e7:05:30:e2:ec:d5:0b:3e:
                    22:81:04:a6:e4:6c:98:fe:c1:e2:f7:b1:bf:b2:48:
                    fd:e2:be:8c:82:8f:fc:21:60:1c:4f:c3:5d:67:21:
                    aa:77:01:cd:b0:b2:9d:ea:9c:b8:b2:11:b5:eb:57:
                    f1:62:b6:ed:bd:4a:db:a0:8b:b7:31:d3:90:05:54:
                    b8:ec:03:c5:81:a2:17:3c:22:09:3c:f6:fd:6c:c4:
                    b2:e0:50:12:fa:07:0d:01:72:da:22:3c:b4:ae:0f:
                    ac:6d:7f:bf:2b:b8:60:50:f6:83:76:0f:0a:59:1a:
                    41:83:e6:50:40:37:d7:16:73:71:4a:31:f2:3c:98:
                    54:4e:b1:7b:5d:a8:46:e5:c4:a2:3d:3b:9d:59:bd:
                    71:61:c1:07:44:59:1e:cb:0d:e5:2b:ac:64:94:25:
                    e3:1b:9a:fe:75:22:cf:67:b0:c1:a7:ee:5d:00:01:
                    4d:f6:c4:dd:6e:a6:1a:42:5e:98:fa:24:31:29:ba:
                    bf:29:87:97:6f:50:2a:9a:24:8c:0a:7e:09:f2:8e:
                    93:3d:ef:a8:6a:e3:1d:9a:66:05:5c:93:c3:e4:1b:
                    50:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AC:6D:51:7A:F6:BC:B2:AD:C2:1C:BE:EA:CB:78:F6:D6:4F:5D:BE
            X509v3 Authority Key Identifier:
                keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ce:2a:82:ed:2a:d7:c7:a9:3a:2b:72:17:19:85:34:d3:8b:
         3f:4f:2d:c1:5f:93:d8:05:09:4a:10:3c:dc:c2:9c:6e:67:e0:
         1c:9e:43:8b:1f:b1:94:bb:a2:21:c4:ae:e8:4e:2a:e7:de:25:
         65:fa:73:d8:1d:27:00:d2:3b:17:7f:13:5a:a3:ad:80:3b:37:
         70:02:3a:7c:f8:c6:0e:ec:30:a5:2b:df:44:70:fb:11:d5:f7:
         26:5e:85:b0:78:0f:64:d3:fa:ea:70:7f:77:46:6a:ba:e2:c4:
         e9:8c:68:16:83:41:6f:3a:b0:35:48:57:7a:24:b3:45:9e:bf:
         b5:76:50:a8:cf:6f:da:97:3f:95:db:3c:5e:7d:c4:ca:22:d0:
         73:46:19:2a:f5:bd:7c:a5:9c:f3:38:73:fb:ef:b5:60:77:f9:
         12:39:0f:25:ca:25:c7:7a:73:68:70:e7:e6:37:5b:c6:61:88:
         15:66:41:55:d2:25:38:0e:ab:f5:db:49:f7:74:d5:85:be:18:
         bb:f9:23:db:d2:44:da:db:c4:64:5f:ef:ea:34:d2:90:d8:08:
         fd:ea:cc:b2:69:ca:18:a5:91:42:45:fa:66:81:8f:ea:91:1c:
         ee:a2:97:12:08:8c:9a:86:76:35:85:65:50:fc:ce:57:24:cc:
         bb:66:47:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:08 2026 by rpki-client