Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft
File:                     t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft (raw, json)
Hash identifier:          QQNHx9XTgigpxgsRxEF7N1AQ9OkTLlSIhLzZzwyHdnY=
Subject key identifier:   40:2A:4B:CB:AD:C6:24:04:78:51:4B:E5:78:F9:38:29:09:26:DC:2C
Authority key identifier: B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35
Certificate issuer:       /CN=A91EEC3B/serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235
Certificate serial:       07FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft
Manifest number:          2E40
Signing time:             Thu 16 Apr 2026 16:20:38 +0000
Manifest this update:     Thu 16 Apr 2026 16:20:37 +0000
Manifest next update:     Thu 23 Apr 2026 16:20:37 +0000
Files and hashes:         1: t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl (hash: F/il5SCSykyLbNagtgZnLWrcvjwdIFg+HWUbPA0VVqc=)
                          2: 4F7B7728DD5D11EF9312601BC4F9AE02.roa (hash: 5xZOfUroHpeE/D4uGz1bEl15IcZj3gdTHW1LZL25guE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl
                          rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2045 (0x7fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEC3B, serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235
        Validity
            Not Before: Apr 16 16:20:37 2026 GMT
            Not After : Apr 23 16:20:37 2026 GMT
        Subject: CN=69e10c56-4e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:38:6f:93:f9:3d:ad:23:fa:b3:fe:56:45:ee:
                    2c:2e:33:f8:b6:41:8b:97:79:81:15:10:5e:c3:8f:
                    b4:c3:fa:fa:e2:7a:c8:b5:e6:97:d1:84:48:af:6b:
                    38:1b:73:a5:08:82:ff:5c:db:ab:f7:58:4f:43:09:
                    a4:30:b8:6f:a0:a9:99:08:30:02:02:6e:85:3c:31:
                    27:36:ff:62:2b:89:0f:2e:f8:31:9d:c7:ef:8e:25:
                    e0:9a:48:a7:98:b7:7a:78:eb:c1:6a:54:32:3e:ff:
                    06:41:71:ce:92:1a:7c:d6:1e:94:8a:d4:22:b5:dd:
                    d5:7c:73:a5:82:11:8b:97:a5:05:c6:46:a5:0b:07:
                    9b:51:73:f1:b5:ed:05:82:d8:92:9e:cb:53:23:41:
                    fb:38:5f:a4:06:1a:99:44:2f:e2:dc:33:26:57:18:
                    13:c7:dd:77:75:01:15:b1:94:5c:5b:44:14:b1:e1:
                    50:02:c4:1b:54:e5:23:64:e4:60:df:46:61:c3:92:
                    5b:a7:14:2c:4c:c0:6d:56:12:08:c7:80:62:bc:6a:
                    26:e4:00:c9:15:73:9f:7f:8e:99:98:e7:49:b2:99:
                    d2:3b:01:8a:5e:bb:c0:8a:97:fe:45:2a:f0:ed:1d:
                    60:8f:10:ef:fb:1b:0f:1f:6f:a8:16:b0:06:92:e1:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2A:4B:CB:AD:C6:24:04:78:51:4B:E5:78:F9:38:29:09:26:DC:2C
            X509v3 Authority Key Identifier:
                keyid:B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:cb:98:ee:57:2a:30:bb:9d:95:82:36:e7:5d:e8:71:f2:5e:
         38:5c:c8:c5:b6:02:fe:f9:c8:95:ea:1e:82:5b:cd:a1:0b:c3:
         a3:6d:29:2a:df:ed:76:df:a3:3b:0b:9d:a6:de:80:15:e7:d2:
         1b:64:54:34:5f:c0:ca:06:0f:db:1e:7a:2f:40:2d:4d:ae:ed:
         5d:de:4f:3c:80:cd:a4:69:91:1c:39:3b:52:8b:70:0e:60:63:
         f5:45:b3:20:48:a8:44:c4:69:ea:a3:7e:cd:72:e7:0a:69:f8:
         c0:f5:8d:cf:4e:53:77:dd:8e:27:a0:be:31:ae:4e:43:2d:1c:
         4c:10:1e:45:32:e3:72:09:fd:f1:76:97:41:70:37:af:1f:08:
         06:af:48:e3:2f:ff:f2:86:6d:fa:d0:fd:8e:2d:47:61:82:8b:
         e5:6e:a1:c9:22:03:07:fa:19:c6:71:16:b0:ba:4d:23:53:ee:
         99:c2:d3:4c:9b:a1:f0:86:4e:3d:ec:5c:3d:17:06:7e:37:56:
         46:6f:41:4d:4b:ad:42:72:a6:20:aa:7d:e5:54:27:0d:cf:30:
         32:16:1e:68:57:d7:ee:02:a5:ac:b9:e6:4b:0d:f1:46:67:e2:
         ad:87:8d:15:f0:63:0a:6d:ba:6f:4d:2a:7c:78:fe:48:5e:57:
         83:8a:d8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:35 2026 by rpki-client