Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
File:                     2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json)
Hash identifier:          oiEYY4JX9tLUNZVMuLWbMJBX1vMcJ1RNIxgf9P2uZ7U=
Subject key identifier:   26:F5:3C:12:F1:16:2E:65:94:00:8D:A1:A4:CE:CF:9C:F7:F3:27:4F
Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
Certificate issuer:       /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Certificate serial:       0372
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
Manifest number:          0366
Signing time:             Sun 05 Apr 2026 00:39:28 +0000
Manifest this update:     Sun 05 Apr 2026 00:39:28 +0000
Manifest next update:     Sun 12 Apr 2026 00:39:28 +0000
Files and hashes:         1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: jrYMgFOIPoerRI+7ppiQa2+RVwc6/+zZqaYkmL46ZTk=)
                          2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: B+EK2a9s5cpD4dbFXqEBGct1LhuPCRVc5c4XOhND9Sc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
                          rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:39:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B241, serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
        Validity
            Not Before: Apr  5 00:39:28 2026 GMT
            Not After : Apr 12 00:39:28 2026 GMT
        Subject: CN=69d1af40-2842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:70:cf:98:91:30:1c:98:19:87:0d:6c:e3:
                    43:5b:f0:42:60:67:fd:73:31:b0:54:47:49:cf:d8:
                    3c:0d:58:8c:1c:a0:b6:96:ad:81:26:0d:c1:e5:55:
                    23:47:71:db:58:e3:77:af:a2:7b:09:fb:22:bf:5e:
                    a9:ca:49:42:93:b8:ba:4e:13:17:75:a7:e5:9d:aa:
                    d7:b6:9a:c9:cb:9a:16:9b:2a:0b:a1:9d:5f:56:fb:
                    de:b1:e2:f6:ac:23:32:e5:d3:8a:cc:60:1d:6c:45:
                    c3:71:7a:73:f1:89:27:f8:f5:7a:45:60:5d:a6:3d:
                    84:6a:f1:85:19:fc:42:d0:b6:68:4f:1b:ca:97:a7:
                    94:d5:f4:9a:f2:46:de:b1:6f:c7:7a:2e:0e:84:ed:
                    1a:4e:95:66:37:df:e3:2f:a8:62:e7:1e:2e:8f:12:
                    f7:62:95:f4:4c:12:64:bb:0d:97:3a:b8:bd:a5:7c:
                    9d:8f:7c:27:64:59:84:f5:41:79:17:78:92:50:97:
                    f0:59:a4:85:ab:d2:75:e6:4d:9e:c9:0a:27:84:0f:
                    44:e7:2a:44:a0:a9:a6:2e:1a:d0:76:9e:4c:34:17:
                    fe:ad:d8:83:ec:7c:da:6d:a8:9e:c1:05:44:4d:92:
                    09:f7:fd:3f:b7:28:be:0b:b8:d1:36:f3:59:d6:c0:
                    05:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F5:3C:12:F1:16:2E:65:94:00:8D:A1:A4:CE:CF:9C:F7:F3:27:4F
            X509v3 Authority Key Identifier:
                keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:84:51:48:b1:a1:c8:8a:a6:af:75:a5:d0:ae:b2:f4:82:9b:
         c4:52:97:38:e4:f6:72:10:de:cc:d3:3f:67:69:be:a1:fb:82:
         2c:9d:1a:a5:93:85:77:16:a7:6a:20:b1:ce:48:99:9b:79:44:
         54:32:4f:36:d7:f1:55:f7:8b:ba:27:37:fa:1d:bc:4e:53:f3:
         81:67:01:8a:6c:f3:9e:44:4f:34:f4:51:11:2c:0f:98:bc:4d:
         2f:30:29:fb:b6:bb:92:b1:35:8d:fd:45:6e:89:fc:eb:d8:eb:
         45:c1:80:0b:d8:92:6a:cf:e8:76:83:84:a3:13:81:af:be:51:
         40:8d:c1:00:0d:f4:b0:9e:db:88:1e:74:c9:2a:fb:f7:08:b0:
         65:f2:bf:ff:fe:ce:d7:88:55:34:fb:70:c0:7c:d4:b7:67:cf:
         97:fe:0c:0c:92:b7:b6:67:56:2f:00:e4:fc:bc:30:3a:f9:f7:
         b0:29:90:a9:b6:c7:ea:f0:b9:cd:84:2b:0f:ec:20:79:d5:b1:
         13:50:77:ff:55:d0:d1:61:98:cc:a1:3d:c7:86:a3:be:4a:99:
         08:ee:00:15:f9:12:02:f3:dc:36:35:c8:7f:37:8a:82:8f:19:
         a6:7c:a6:d7:39:6b:c9:0d:fc:6a:b2:37:02:ab:7f:6c:7d:c5:
         ec:89:48:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:11 2026 by rpki-client