Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
File:                     2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft (raw, json)
Hash identifier:          qlDaJYOzPUKSLdngGV790VPMSwxsQQYJvIBQM7EyeD4=
Subject key identifier:   2F:80:14:CA:32:8E:65:B2:99:D1:6E:1B:8A:5E:60:2B:E7:E6:02:AB
Authority key identifier: D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84
Certificate issuer:       /CN=A91F89A2/serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84
Certificate serial:       020D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
Manifest number:          0206
Signing time:             Thu 05 Nov 2026 03:56:15 +0000
Manifest this update:     Thu 05 Nov 2026 03:56:15 +0000
Manifest next update:     Thu 12 Nov 2026 03:56:15 +0000
Files and hashes:         1: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl (hash: jKWXPmdBswCTK4cOP0C59a9Stk6DSqrYw2uTb2duu+s=)
                          2: 6C363C0CF85911EE9EAE731BC4F9AE02.roa (hash: Nm/9k1bK/nJvJq+EeJ6k6OoJJzoZhznxyzIVifoqxa8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl
                          rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 03:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89A2, serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84
        Validity
            Not Before: Nov  5 03:56:15 2026 GMT
            Not After : Nov 12 03:56:15 2026 GMT
        Subject: CN=6aebfe5f-0c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:8d:d9:37:fe:60:03:1b:96:83:e2:f9:69:
                    a2:7d:80:4d:32:ef:2d:8b:5d:6c:25:ed:96:4d:68:
                    cd:eb:a5:eb:7c:6a:2f:25:c0:15:c4:33:72:d4:af:
                    72:54:c3:a0:44:ec:31:77:c3:5f:bd:9e:6e:3a:b5:
                    48:eb:e5:e6:6d:1b:dd:8e:55:14:09:35:08:c3:c7:
                    9c:39:9a:7d:3c:61:b1:a4:0f:27:ae:c8:38:22:56:
                    f1:46:51:8d:87:35:2f:76:e3:2e:8e:8f:39:8e:72:
                    95:18:e6:a1:47:7e:cc:14:1d:35:00:57:68:89:17:
                    9d:c6:07:89:d5:95:fe:05:cd:33:0d:e6:11:3d:a0:
                    70:76:dc:02:c7:4f:09:ac:cc:35:d0:56:85:56:7d:
                    f2:46:76:e0:ed:34:94:1b:96:7c:cb:3f:9b:2f:2a:
                    d0:49:4c:cf:bd:ec:95:a3:de:cb:eb:a8:21:ee:d9:
                    87:eb:34:22:a8:09:70:e4:7b:58:88:41:61:45:f6:
                    2d:ab:71:21:79:ce:26:04:96:0d:74:93:ba:4d:cf:
                    1f:d1:9a:2f:f5:c8:df:92:97:2a:ee:47:47:25:9f:
                    59:64:93:4e:2a:84:fc:0d:bc:dd:9d:cf:56:a1:4d:
                    f9:02:26:34:86:16:74:c6:70:66:13:40:ce:24:23:
                    31:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:80:14:CA:32:8E:65:B2:99:D1:6E:1B:8A:5E:60:2B:E7:E6:02:AB
            X509v3 Authority Key Identifier:
                keyid:D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a8:0c:7b:9a:ca:96:6b:de:ec:b9:45:bf:7e:9e:95:20:50:
         fa:12:b9:ec:bd:01:12:38:2c:b1:b9:9a:39:12:43:87:d7:70:
         3d:c9:f6:f8:4c:81:6d:ca:e1:56:a6:f0:d4:e6:60:e9:12:f1:
         fb:92:64:0d:61:73:45:15:0f:7c:35:05:88:33:5c:73:c9:c5:
         48:ea:01:ff:9f:8c:29:d9:d5:ac:a0:95:70:77:63:c8:39:9e:
         11:79:03:cf:2c:56:88:1b:fc:96:6d:a2:91:77:37:c1:04:7f:
         0e:ee:22:22:19:1d:f8:bc:2d:73:ec:88:6f:f6:c3:42:fa:39:
         c0:25:55:db:fd:99:2a:dc:e3:b5:b3:43:35:fe:ec:2c:9d:cf:
         5b:fa:7c:69:30:41:15:31:dd:fb:8e:4d:70:77:a5:19:a2:81:
         67:5d:1a:28:6d:c3:8e:47:c4:95:67:73:68:35:09:4f:b2:a8:
         77:e4:91:de:ff:64:42:18:b0:4d:3f:f2:77:ed:a6:7f:18:af:
         54:6d:83:8e:00:23:0d:bf:06:b8:27:08:83:c5:d1:ce:62:39:
         e7:4c:d0:ae:9f:5a:58:b3:89:95:f3:28:af:59:ae:99:d1:4a:
         98:2f:90:70:82:cf:c2:cf:fe:0f:51:5b:11:85:06:f9:cf:7c:
         c2:5a:a6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:48:47 2026 by rpki-client