Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
File:                     2VWVxglbTfriy5tFuQicwmI9lKM.mft (raw, json)
Hash identifier:          mh1eGHTaL/M5b8EVcH+1og2iXZ98K30HepbUfQvkB3A=
Subject key identifier:   B6:3E:65:A6:BE:BD:44:3F:62:85:58:59:E1:7B:EB:5D:80:C4:D2:6F
Authority key identifier: D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3
Certificate issuer:       /CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3
Certificate serial:       0F3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
Manifest number:          0F32
Signing time:             Sat 04 Apr 2026 17:27:32 +0000
Manifest this update:     Sat 04 Apr 2026 17:27:31 +0000
Manifest next update:     Sat 11 Apr 2026 17:27:31 +0000
Files and hashes:         1: 2VWVxglbTfriy5tFuQicwmI9lKM.crl (hash: AKgjWZEX/4v4itXzOXq3g6jtB1ZYLkPiQoVwfVP8zCQ=)
                          2: D7E41D6A788411EA9186C910C4F9AE02.roa (hash: vay/YGVV/WsH1QnstajT3hVBCLiNp9w6Bpg2Y+e345U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl
                          rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3902 (0xf3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144E38, serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3
        Validity
            Not Before: Apr  4 17:27:31 2026 GMT
            Not After : Apr 11 17:27:31 2026 GMT
        Subject: CN=69d14a04-9407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:1b:bc:28:b0:00:d5:1d:22:07:c4:02:a1:
                    33:a6:1a:f1:53:37:f3:85:a6:ae:3f:2d:71:36:3d:
                    bd:56:ca:04:68:9d:d3:d1:02:7b:4e:a1:cb:55:38:
                    55:4a:f9:a9:3e:ab:90:6b:f8:f8:ee:19:6e:ff:9b:
                    36:b0:20:d4:d2:87:61:ae:0d:18:fa:2c:f4:28:77:
                    be:59:fd:11:c4:e7:cb:9e:21:f1:b3:c6:1e:a3:1e:
                    89:2b:03:af:40:50:bb:57:57:32:55:b2:b0:5d:69:
                    66:c4:74:b7:c8:65:1f:dc:af:5a:eb:7c:d9:47:21:
                    2a:48:b8:28:3d:b6:ff:7d:87:bf:87:49:c3:55:94:
                    7b:5d:7b:a2:f9:8e:68:4e:3b:f8:83:78:4d:e5:e6:
                    67:95:46:4f:0e:e1:11:ca:61:81:d8:f7:6f:28:41:
                    0a:68:7e:3c:7d:b3:15:f0:59:43:a5:bc:6b:06:c7:
                    32:0c:62:f5:22:83:46:4e:52:5f:6d:ed:9a:45:19:
                    b8:af:57:d0:13:44:96:c8:4c:92:b7:0a:9d:2a:e6:
                    a0:42:82:dc:07:f9:b8:a4:24:55:a2:7d:a5:68:3c:
                    c7:f4:60:3b:02:de:84:4c:d1:c7:56:73:03:9f:56:
                    64:71:29:a7:02:54:9b:71:80:1d:0d:f8:ca:65:35:
                    6b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3E:65:A6:BE:BD:44:3F:62:85:58:59:E1:7B:EB:5D:80:C4:D2:6F
            X509v3 Authority Key Identifier:
                keyid:D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:02:65:42:75:84:4f:a4:c8:a0:0c:16:45:e3:e3:10:ef:e1:
         41:74:33:ac:33:64:27:f6:4e:0e:ff:a5:e9:34:5a:dc:85:e6:
         6d:c0:e6:e1:80:94:af:b1:73:c6:2c:5f:80:3f:e1:c0:d7:45:
         2f:34:2a:6e:a1:a7:39:75:0f:65:97:ac:3f:81:74:3e:c4:ad:
         e6:e6:62:e5:c6:06:46:b7:0a:86:fe:9f:38:73:45:a9:81:83:
         84:cc:9a:32:4d:14:bf:f5:93:2b:92:2c:21:42:6a:bc:7c:a8:
         55:7d:47:d3:bb:65:81:d0:e5:b3:fb:b0:7c:c2:53:fc:5b:9c:
         f9:9c:64:da:52:0c:8b:f0:27:b4:61:d7:7b:f2:b0:62:3e:b2:
         21:6a:4f:08:eb:9e:50:2d:96:31:51:5d:01:f2:63:60:96:07:
         d4:be:29:2b:86:15:e9:61:f4:77:f5:e4:e5:e7:1b:a0:c3:22:
         eb:a9:91:1f:20:f8:6a:72:8b:8c:84:07:f4:68:59:45:96:0a:
         a6:a7:4e:77:27:e3:b8:b1:8f:c2:2a:1b:b5:ba:b1:ca:e4:74:
         7a:bb:d8:a3:2f:f5:03:e2:fc:ba:08:5f:0c:b1:22:0c:c4:b9:
         fa:4d:0f:7b:49:dc:b1:2b:1a:7c:cb:d0:7c:27:82:3c:e2:60:
         0e:6d:2a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:15:38 2026 by rpki-client