Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft
File:                     2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json)
Hash identifier:          t19Ww38NN8fIHRaXW/jDsKvGRRSeOPg0PUVWywCldKo=
Subject key identifier:   DC:13:54:06:2C:23:DF:03:79:15:3F:4A:10:E2:89:B1:6E:38:65:28
Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21
Certificate issuer:       /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321
Certificate serial:       02F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft
Manifest number:          02E8
Signing time:             Sat 13 Jun 2026 01:18:01 +0000
Manifest this update:     Sat 13 Jun 2026 01:18:00 +0000
Manifest next update:     Sat 20 Jun 2026 01:18:00 +0000
Files and hashes:         1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: pdWpQkTHmVI8wi+e6lvLMQzVs1EKG967r6MaajhgVoI=)
                          2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: 41XnV0Dfd97uGyPbDbqHHH2dJuzZIdcHH6ek0SjFVbQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl
                          rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 754 (0x2f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321
        Validity
            Not Before: Jun 13 01:18:00 2026 GMT
            Not After : Jun 20 01:18:00 2026 GMT
        Subject: CN=6a2cafc8-4e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2b:12:05:d1:29:6b:46:a7:04:1d:6b:b5:76:
                    03:ff:52:58:ec:e1:b2:70:6a:a4:97:e8:76:98:34:
                    1a:47:48:38:ce:89:14:40:09:6e:f2:96:45:ed:06:
                    79:c5:98:13:fa:b4:45:b4:7b:54:9e:f9:51:8c:50:
                    8e:b3:b8:9f:09:96:51:a7:ee:b6:50:38:03:dc:81:
                    09:85:aa:be:6d:47:2c:77:68:45:4e:05:e5:fc:76:
                    ee:59:75:de:42:8a:4e:e5:21:6e:17:d6:cd:81:52:
                    bd:d9:cc:fa:de:93:d2:27:ec:cc:83:00:db:62:2e:
                    11:c6:46:67:e8:02:5d:25:0f:2a:36:69:7d:e1:4c:
                    09:a9:c6:93:6f:db:aa:a6:34:b6:15:2f:82:c2:5b:
                    bc:3c:c7:e4:6f:04:8a:02:21:bb:01:35:69:c1:31:
                    4c:ca:fb:53:a2:9b:bb:62:28:e8:ec:66:fc:83:cb:
                    99:22:ae:db:3f:83:70:78:90:25:1d:ed:22:7e:2b:
                    1c:be:48:11:e2:a4:b3:f7:59:47:8e:f0:b8:b2:26:
                    65:e0:6f:37:8e:a9:41:c7:25:1f:55:9e:cb:b9:fc:
                    6d:8a:9b:9d:b9:36:7c:e2:62:d0:11:5b:af:46:54:
                    92:15:d4:f9:51:ab:90:83:53:03:6f:bc:19:31:eb:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:13:54:06:2C:23:DF:03:79:15:3F:4A:10:E2:89:B1:6E:38:65:28
            X509v3 Authority Key Identifier:
                keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c6:34:c6:26:0a:a7:be:ca:25:72:f4:51:b7:c2:83:24:79:
         0c:cb:51:19:4c:ef:1d:cf:50:fb:ba:63:fd:5b:2a:32:69:f9:
         24:bd:4a:88:f4:8c:bc:9d:d6:b1:36:1c:e3:b1:35:2d:9f:40:
         aa:20:74:13:d4:60:9d:d8:75:c9:7c:98:bd:46:dd:0c:82:b4:
         13:fd:bf:d9:3c:0a:ea:9b:40:dc:e1:31:50:fd:a2:b3:37:48:
         e6:b5:d4:53:89:4e:00:a3:05:ba:62:0c:33:53:57:6d:cd:2e:
         79:4d:6e:f3:70:6d:68:65:c0:8d:fb:82:22:74:d9:59:2a:9f:
         d2:37:c5:c8:0d:97:d9:67:c7:09:5e:31:d4:ba:94:5e:46:8a:
         6e:67:1a:45:c1:79:80:74:05:ff:64:fc:18:2b:bf:0e:d8:da:
         8a:31:23:a0:8b:be:53:01:ff:24:66:2d:c9:44:de:9d:9a:26:
         d3:1b:ce:34:e3:ee:a5:2a:c3:14:c1:29:7c:0a:66:0b:7f:39:
         ea:c8:87:bc:c5:a9:92:9e:eb:29:78:58:ec:72:1c:7a:26:c4:
         aa:00:7e:15:30:24:03:4b:a9:46:17:72:6a:53:8d:7a:11:78:
         2a:6c:65:b4:21:2c:50:96:c3:55:f5:6a:5c:03:83:8f:83:80:
         1e:99:30:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF
RTU4RDczMjEwHhcNMjYwNjEzMDExODAwWhcNMjYwNjIwMDExODAwWjAYMRYwFAYD
VQQDEw02YTJjYWZjOC00ZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuSsSBdEpa0anBB1rtXYD/1JY7OGycGqkl+h2mDQaR0g4zokUQAlu8pZF7QZ5
xZgT+rRFtHtUnvlRjFCOs7ifCZZRp+62UDgD3IEJhaq+bUcsd2hFTgXl/HbuWXXe
QopO5SFuF9bNgVK92cz63pPSJ+zMgwDbYi4RxkZn6AJdJQ8qNml94UwJqcaTb9uq
pjS2FS+Cwlu8PMfkbwSKAiG7ATVpwTFMyvtTopu7Yijo7Gb8g8uZIq7bP4NweJAl
He0ifiscvkgR4qSz91lHjvC4siZl4G83jqlBxyUfVZ7LufxtipuduTZ84mLQEVuv
RlSSFdT5UauQg1MDb7wZMet2awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNwTVAYs
I98DeRU/ShDiibFuOGUoMB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF
NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO
MU1Id2phRzhGcF91V05jeUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtMY0xiYKp77KJXL0UbfCgyR5DMtRGUzvHc9Q+7pj/VsqMmn5JL1KiPSMvJ3W
sTYc47E1LZ9AqiB0E9Rgndh1yXyYvUbdDIK0E/2/2TwK6ptA3OExUP2iszdI5rXU
U4lOAKMFumIMM1NXbc0ueU1u83BtaGXAjfuCInTZWSqf0jfFyA2X2WfHCV4x1LqU
XkaKbmcaRcF5gHQF/2T8GCu/DtjaijEjoIu+UwH/JGYtyUTenZom0xvONOPupSrD
FMEpfApmC3856siHvMWpkp7rKXhY7HIceibEqgB+FTAkA0upRhdyalONehF4Kmxl
tCEsUJbDVfVqXAODj4OAHpkwSQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:18:39 2026 by rpki-client