Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
File:                     2kObzwPK_LW-ftCuezKPafiMGys.mft (raw, json)
Hash identifier:          tEJBIYFjdVrg8y68ZfsHAVx78ZZSOET1K5xPp+NSYa8=
Subject key identifier:   9E:A7:A2:2D:F4:7C:AD:94:C6:E4:38:84:CC:9C:B2:8F:81:68:D2:45
Authority key identifier: DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B
Certificate issuer:       /CN=A9188EB6/serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B
Certificate serial:       052E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
Manifest number:          0526
Signing time:             Sat 04 Apr 2026 23:20:36 +0000
Manifest this update:     Sat 04 Apr 2026 23:20:35 +0000
Manifest next update:     Sat 11 Apr 2026 23:20:35 +0000
Files and hashes:         1: 2kObzwPK_LW-ftCuezKPafiMGys.crl (hash: geAzRDHL3aerXCeI9JP/S5aIWFqEATo5TztZfcg7jbI=)
                          2: E9E440F2411511ECBC2FB20BC4F9AE02.roa (hash: 1+kyZfwlYYLpY6rDzV9OldQ7LOSPDOBQp0/0LVGDmAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl
                          rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1326 (0x52e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188EB6, serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B
        Validity
            Not Before: Apr  4 23:20:35 2026 GMT
            Not After : Apr 11 23:20:35 2026 GMT
        Subject: CN=69d19cc4-f6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:71:b3:c7:69:a7:59:d3:ed:85:a3:19:0d:80:
                    d3:1c:c5:35:e7:41:9e:ff:1f:d3:8f:d5:86:57:01:
                    22:7e:ae:fd:63:91:ae:db:3d:56:72:aa:c1:ae:e3:
                    72:50:96:b6:6b:4c:a7:c0:02:0c:68:57:72:0e:f0:
                    e0:44:a7:56:44:29:8c:53:3e:a5:06:53:2f:f3:b7:
                    c5:3e:a5:d9:3a:9e:5c:32:d1:be:91:1b:64:cf:1c:
                    9c:a5:cc:d7:cf:31:98:3c:b9:d5:7c:89:c4:e1:d5:
                    f6:58:5f:21:de:0e:e0:c1:4b:d5:99:f2:b9:bf:bd:
                    05:9e:e3:8e:5e:d1:68:32:31:8f:d1:ad:c8:58:53:
                    ba:3e:f7:86:23:a5:17:54:e6:6f:05:51:dc:9d:77:
                    1c:33:31:3f:b4:fb:e2:be:6e:27:c5:a5:c5:4b:a2:
                    a9:50:da:ee:7e:af:39:f6:0e:19:ac:7c:6a:71:b9:
                    b2:45:dd:03:c8:c2:18:a2:64:89:46:9c:18:6f:b4:
                    78:5c:eb:5d:6e:4b:85:92:49:22:22:29:7e:ce:a1:
                    40:10:47:e0:2e:34:06:ee:de:ee:86:44:88:4a:48:
                    ad:2f:4d:fe:c3:2e:3c:e3:b6:71:fc:50:00:15:10:
                    6f:bc:8a:e2:e2:e8:3a:f0:b6:17:0f:22:29:8c:c3:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A7:A2:2D:F4:7C:AD:94:C6:E4:38:84:CC:9C:B2:8F:81:68:D2:45
            X509v3 Authority Key Identifier:
                keyid:DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ed:5c:ca:0c:94:ba:2d:f0:22:84:ad:be:af:f9:64:89:4b:
         fe:f0:3e:ce:3b:1d:e9:fb:34:82:40:89:35:e1:82:0d:be:ee:
         18:3b:5e:64:89:03:2e:ed:fa:80:94:f9:11:d0:bc:22:66:1a:
         f2:ac:5f:64:8d:f0:3f:ba:a2:29:96:08:9e:37:4d:a1:d7:01:
         cd:9a:15:bc:95:fb:1a:6f:13:f1:6c:61:ff:cd:15:ac:15:18:
         e6:1d:cf:a8:ab:38:df:38:6d:bf:71:5a:b9:02:40:87:cc:a3:
         4a:c7:26:ec:50:74:fc:b3:78:21:08:02:bf:dc:2e:c2:18:d3:
         7c:1d:9f:e8:da:e1:6f:38:3b:2e:3b:1f:85:1f:74:d0:8c:d9:
         c0:50:ad:54:77:39:9a:6c:9e:c3:d9:f7:19:fc:5b:06:1e:f7:
         ea:8b:97:66:d8:7e:eb:57:64:c5:ca:d7:d1:13:be:cf:7a:4d:
         a6:0f:04:a4:77:f6:b8:4c:00:a9:ad:fd:bd:b7:e0:da:c9:c3:
         2e:73:99:f2:23:85:47:b6:4f:1b:3b:fc:39:4a:dc:0d:be:81:
         d0:d7:a1:45:6e:83:e4:5d:24:cd:15:3e:ec:69:af:a7:9e:92:
         f4:e3:30:66:11:a5:9c:50:1f:5c:ed:da:cd:96:f0:df:7f:b2:
         00:8b:9c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:01 2026 by rpki-client