Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
File:                     2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft (raw, json)
Hash identifier:          DHpLb6iIMQcJnCtPwQ0Ma45u/eR0rM6VToq9a+ywA5E=
Subject key identifier:   44:FA:89:8B:2C:FF:B2:08:FD:42:76:52:B6:A0:01:81:F8:F4:F3:C5
Authority key identifier: DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
Certificate issuer:       /CN=A91E802C/serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
Certificate serial:       B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
Manifest number:          B6
Signing time:             Mon 21 Sep 2026 07:02:20 +0000
Manifest this update:     Mon 21 Sep 2026 07:02:19 +0000
Manifest next update:     Mon 28 Sep 2026 07:02:19 +0000
Files and hashes:         1: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl (hash: 6pHRZgmxBpK/3i8kpPYRBezfcclTkb3VMZ16mzJ5xa8=)
                          2: 22F249F2899611F1B0B035B43911F970.roa (hash: oZYYlZ0lHZLtiZ1LM6QQKnCi3gZIOsKSkb1+bXM96No=)
                          3: AE11F062738111F18BB794EF6BA30FBC.roa (hash: s9d5gC7hYaCvUgvmb9o9rutS4rMSCmVuPTuxjMy4QDw=)
                          4: 39FF8508738211F1B422FE586CA30FBC.roa (hash: RPhN7NCY5097529W89+5q3UwkqjueIe7ky2HFF/vGtQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl
                          rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E802C, serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
        Validity
            Not Before: Sep 21 07:02:19 2026 GMT
            Not After : Sep 28 07:02:19 2026 GMT
        Subject: CN=6ab0d67c-2c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:a5:2d:da:5a:8a:71:0d:00:5f:5a:d6:c3:
                    4f:8d:ad:26:81:13:17:53:62:96:89:7c:bb:1f:dc:
                    28:e6:ad:f0:37:4e:7c:81:5d:01:3c:a9:2b:21:b2:
                    97:33:22:f8:f4:38:49:c2:3b:32:70:6d:69:57:1d:
                    db:1a:ae:20:c3:ed:b5:6a:22:4f:ab:3e:03:2d:9f:
                    50:fb:15:df:fd:71:28:2f:67:a5:1a:f4:3e:d3:a1:
                    ed:d1:c4:4f:93:6d:38:ef:6e:63:bc:24:41:90:d2:
                    5a:f6:7f:9d:36:f7:9b:b2:e7:d3:72:7c:94:cf:0a:
                    5f:c1:42:ca:b2:3d:dc:6b:98:37:54:5d:92:12:62:
                    4e:74:fc:03:c2:da:67:4d:3b:ab:e9:13:2d:c9:4c:
                    fe:32:fd:3f:11:4c:bf:13:a8:a6:47:e8:bb:c6:eb:
                    d9:8e:fe:17:41:c8:78:b9:99:b7:d2:af:1d:72:33:
                    99:06:53:7c:fe:cd:b9:d0:a0:d0:d6:83:f1:b9:31:
                    eb:9d:e1:79:8d:4b:cf:fe:55:ae:16:b5:5a:21:b1:
                    7c:1b:5f:d1:dd:38:66:72:57:84:91:ef:f8:f2:ae:
                    46:f2:82:d2:1f:e4:cb:8a:39:e0:3e:6c:83:11:4f:
                    ce:cb:34:79:60:c1:52:4f:63:ec:ac:05:51:89:a5:
                    9e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FA:89:8B:2C:FF:B2:08:FD:42:76:52:B6:A0:01:81:F8:F4:F3:C5
            X509v3 Authority Key Identifier:
                keyid:DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:3b:69:17:63:d3:e4:9e:87:dd:b3:76:12:7a:c1:d3:1a:d8:
         61:58:c8:ce:ed:a4:57:e8:02:92:95:03:cd:57:e3:d4:c2:4c:
         19:d3:5c:df:15:11:e9:b8:f7:d3:86:75:0a:e6:e7:18:de:fd:
         d6:9b:b9:63:8b:31:ef:a8:fa:ac:d3:58:1c:1e:c5:9e:be:9a:
         9f:3f:b3:b3:4f:8f:54:5a:e6:21:48:c4:8e:4b:26:fa:56:cc:
         9e:d8:19:85:77:9b:a4:b7:25:50:ba:ab:7c:0f:21:5c:65:a4:
         c1:20:00:e9:20:7a:53:bb:2d:94:4b:b0:c9:57:f9:d8:df:12:
         69:cb:5a:48:16:1d:41:bd:4d:83:25:5c:05:f3:a0:06:a5:14:
         b7:66:91:27:9c:77:20:3a:b7:00:56:72:0d:2b:14:a0:dc:a3:
         32:2a:b4:0f:53:cb:23:e8:c5:e6:7b:5d:0e:9c:91:de:05:dc:
         2e:fb:a4:da:db:83:eb:84:e6:44:b8:0a:3e:5e:a4:0b:af:33:
         14:7a:70:0d:c4:12:b6:d5:90:d7:ca:c8:67:0c:37:16:f9:b6:
         af:dd:da:9e:d8:44:c1:64:ec:45:b7:b1:12:c3:87:83:eb:33:
         aa:93:45:ea:11:82:cb:bb:7d:b7:d2:3c:5a:7a:b8:ab:09:25:
         dd:40:ac:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:29:28 2026 by rpki-client