Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
File:                     etee6zuSg1TZUNxuT4vsyyXC_Es.mft (raw, json)
Hash identifier:          fgaBj2xvNmdqBUGAj6vpoADF6JiUR8r9S4bex8htwO4=
Subject key identifier:   6D:6E:84:5B:66:A1:D3:31:D1:4B:3E:7E:71:29:6E:38:0C:C8:FF:10
Authority key identifier: 7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B
Certificate issuer:       /CN=A91F3CB1/serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
Manifest number:          D2
Signing time:             Fri 17 Apr 2026 06:40:04 +0000
Manifest this update:     Fri 17 Apr 2026 06:40:04 +0000
Manifest next update:     Fri 24 Apr 2026 06:40:04 +0000
Files and hashes:         1: etee6zuSg1TZUNxuT4vsyyXC_Es.crl (hash: PDPCcsozJkYd7rdhFrxY0NK9sXWhsdaH96v3TgeN9/k=)
                          2: 9217B6681AA811F0B10C6412C4F9AE02.roa (hash: 1J7nQsHlQuAiAvo5aIiZqNyCzq3jV+3T1c+Q4mzMQvk=)
                          3: 395D655C7E7D11F09D59515FC4F9AE02.roa (hash: wISzL57CKfWjmFG51rfgbb3uCs7qMuabttb3dl/m4bU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl
                          rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3CB1, serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
        Validity
            Not Before: Apr 17 06:40:04 2026 GMT
            Not After : Apr 24 06:40:04 2026 GMT
        Subject: CN=69e1d5c4-b8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e1:19:6b:14:fc:38:57:ea:0a:56:28:df:1a:
                    ab:0d:c0:ab:f0:b6:8d:ad:fa:0d:58:62:19:7c:ce:
                    2e:00:db:80:74:f3:5f:64:95:55:0f:4a:6a:48:f3:
                    ed:e4:07:41:50:ce:e2:03:9f:eb:61:8b:0f:9d:0a:
                    ea:ad:2f:b3:0b:dd:be:04:4a:1e:8d:e9:11:15:6f:
                    c1:90:71:5e:1b:53:ad:70:d8:5f:f3:0c:7a:40:6a:
                    08:b9:5f:e4:37:05:b9:5a:56:45:0d:fa:1e:ad:23:
                    fb:65:f0:fe:74:27:fd:87:b5:8d:01:95:dd:d8:dc:
                    20:26:b6:46:d6:ec:0b:91:28:c6:41:58:bf:15:e6:
                    a4:23:57:3c:b3:05:84:b3:72:6c:f9:1f:bc:ff:f5:
                    de:b7:f5:14:48:33:f0:16:ef:fd:70:92:7d:d3:ee:
                    06:0f:ca:54:09:9e:0c:eb:0d:12:13:d0:9f:f4:5b:
                    00:44:3b:a7:a1:0c:20:29:f3:8e:98:78:9d:05:e7:
                    cc:cd:cb:0f:83:b5:6e:1f:7d:8d:a4:0d:4c:3d:99:
                    a0:32:b4:7b:13:a2:06:13:0a:ab:42:46:31:0d:85:
                    b6:2c:18:dc:8f:ec:82:b1:3f:b0:21:cc:cd:c4:1b:
                    c3:7f:16:cb:eb:20:34:db:3a:34:45:91:14:31:15:
                    9c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6E:84:5B:66:A1:D3:31:D1:4B:3E:7E:71:29:6E:38:0C:C8:FF:10
            X509v3 Authority Key Identifier:
                keyid:7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ad:d7:43:72:a8:29:4c:29:8c:81:36:41:3a:c0:e0:d6:22:
         1c:79:75:9f:5f:ac:6a:7c:9b:ca:08:91:e8:16:83:a5:6b:22:
         96:76:19:33:a4:1b:5c:08:b1:01:b6:1a:e1:a8:54:55:37:2d:
         fa:de:a8:1e:08:bb:9d:e4:70:d2:bf:0b:5c:d8:de:03:2d:7b:
         0a:b6:5c:7a:76:de:b5:72:7c:7a:f7:60:92:ed:b0:ae:bf:22:
         6e:c2:9c:d5:13:d8:d1:8d:a1:5a:84:ba:80:61:c7:29:ea:49:
         1e:7b:db:3d:bd:37:53:90:6c:39:96:a0:3d:51:3e:c9:c6:bf:
         ea:70:81:b7:3d:cc:34:7d:4e:14:ee:49:d6:9f:1c:88:cf:51:
         6c:0e:91:10:2b:75:5c:19:29:2c:8e:1c:88:84:45:ee:a8:b6:
         42:a0:96:f8:fc:d2:ad:65:91:9d:7c:7e:15:e1:86:d2:41:f6:
         b7:d0:d8:41:3a:b9:86:7c:03:53:64:49:5e:c1:84:9b:3a:61:
         a0:71:c6:fa:af:b6:74:00:a0:ca:71:d9:19:54:a8:cd:49:f3:
         30:7d:9a:33:51:fd:19:7c:cb:0c:dc:24:51:da:67:f1:ba:b3:
         3a:19:72:f5:3e:9c:17:c8:ef:2a:81:71:0c:9e:fc:b3:80:4e:
         8c:40:02:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNDQjExMTAvBgNVBAUTKDdBRDc5RUVCM0I5MjgzNTREOTUwREM2RTRGOEJFQ0NC
MjVDMkZDNEIwHhcNMjYwNDE3MDY0MDA0WhcNMjYwNDI0MDY0MDA0WjAYMRYwFAYD
VQQDEw02OWUxZDVjNC1iOGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAluEZaxT8OFfqClYo3xqrDcCr8LaNrfoNWGIZfM4uANuAdPNfZJVVD0pqSPPt
5AdBUM7iA5/rYYsPnQrqrS+zC92+BEoejekRFW/BkHFeG1OtcNhf8wx6QGoIuV/k
NwW5WlZFDfoerSP7ZfD+dCf9h7WNAZXd2NwgJrZG1uwLkSjGQVi/FeakI1c8swWE
s3Js+R+8//Xet/UUSDPwFu/9cJJ90+4GD8pUCZ4M6w0SE9Cf9FsARDunoQwgKfOO
mHidBefMzcsPg7VuH32NpA1MPZmgMrR7E6IGEwqrQkYxDYW2LBjcj+yCsT+wIczN
xBvDfxbL6yA02zo0RZEUMRWcTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG1uhFtm
odMx0Us+fnEpbjgMyP8QMB8GA1UdIwQYMBaAFHrXnus7koNU2VDcbk+L7MslwvxL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0NCMS8yRDg0MzY5ODE2
ODYxMUYwODkxNjk4NUJDNEY5QUUwMi9ldGVlNnp1U2cxVFpVTnh1VDR2c3l5WENf
RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V0ZWU2enVTZzFUWlVOeHVUNHZzeXlYQ19Fcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
M0NCMS8yRDg0MzY5ODE2ODYxMUYwODkxNjk4NUJDNEY5QUUwMi9ldGVlNnp1U2cx
VFpVTnh1VDR2c3l5WENfRXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAga3XQ3KoKUwpjIE2QTrA4NYiHHl1n1+sanybygiR6BaDpWsilnYZM6QbXAix
AbYa4ahUVTct+t6oHgi7neRw0r8LXNjeAy17CrZcenbetXJ8evdgku2wrr8ibsKc
1RPY0Y2hWoS6gGHHKepJHnvbPb03U5BsOZagPVE+yca/6nCBtz3MNH1OFO5J1p8c
iM9RbA6RECt1XBkpLI4ciIRF7qi2QqCW+PzSrWWRnXx+FeGG0kH2t9DYQTq5hnwD
U2RJXsGEmzphoHHG+q+2dACgynHZGVSozUnzMH2aM1H9GXzLDNwkUdpn8bqzOhly
9T6cF8jvKoFxDJ78s4BOjEAC+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:25 2026 by rpki-client