Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft
File:                     2-ETC8fG27LbfLvxTgH2GG_9vRA.mft (raw, json)
Hash identifier:          Ru3BcjCDIXnNMzGJFXJbmgrWu5Y0qMud1IuFcEwbnCY=
Subject key identifier:   14:B6:A8:21:90:29:74:D6:43:36:64:C7:65:80:EC:D2:D7:6D:D8:B8
Authority key identifier: DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10
Certificate issuer:       /CN=A9115480/serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10
Certificate serial:       0315
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft
Manifest number:          030F
Signing time:             Sun 05 Apr 2026 00:56:58 +0000
Manifest this update:     Sun 05 Apr 2026 00:56:57 +0000
Manifest next update:     Sun 12 Apr 2026 00:56:57 +0000
Files and hashes:         1: 2-ETC8fG27LbfLvxTgH2GG_9vRA.crl (hash: 7Y9UIIwOs4q5QZU57covQWVwR9nPOuZavETgxAIeqGQ=)
                          2: D1D6719A10DD11EDBC7EA35FC4F9AE02.roa (hash: EiWPIZ15zMY14DDKe2/rDs1zl9dckvx9dIVPiNm4WIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl
                          rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789 (0x315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115480, serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10
        Validity
            Not Before: Apr  5 00:56:57 2026 GMT
            Not After : Apr 12 00:56:57 2026 GMT
        Subject: CN=69d1b359-d424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:49:99:66:9a:e5:81:4f:6c:24:f3:85:f9:c1:
                    16:ce:04:aa:d8:9e:16:f5:c9:a0:9b:73:0d:a2:ad:
                    6e:00:f9:c3:a2:09:91:d5:16:95:af:16:05:d9:57:
                    f2:51:57:10:b6:78:0e:29:46:59:ef:30:aa:bb:be:
                    d3:a3:b5:e4:8c:41:92:f2:36:ed:2e:86:91:e0:5d:
                    15:ab:d3:d0:96:e0:b0:78:97:6d:b3:52:ac:44:67:
                    78:b1:82:91:ae:a8:37:ae:40:29:71:aa:08:7c:8e:
                    e4:7e:ae:9e:fd:68:2d:79:1f:5f:b9:01:7d:0b:57:
                    f3:d7:e8:c1:ce:87:79:e1:18:bb:73:4c:7f:02:a2:
                    27:a7:5a:a3:90:62:63:93:64:86:5b:d7:91:09:93:
                    0a:08:a7:80:af:1d:fb:bf:ea:88:d8:f4:37:d7:2e:
                    2e:c1:01:e1:ed:16:bf:fc:92:78:d8:24:89:85:78:
                    b1:f5:30:b7:73:7c:e5:01:9f:0d:8e:52:fe:35:7a:
                    04:98:0f:c4:e9:be:98:2a:bd:4a:7d:a4:e9:06:df:
                    6f:3d:c1:78:3f:3a:5f:7f:ae:9c:44:74:90:47:23:
                    89:bf:f4:ad:86:50:e4:30:e2:1a:25:e4:2b:0d:1e:
                    a4:a0:29:a0:5d:f2:2f:24:6c:bb:bd:50:ce:3d:de:
                    f9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B6:A8:21:90:29:74:D6:43:36:64:C7:65:80:EC:D2:D7:6D:D8:B8
            X509v3 Authority Key Identifier:
                keyid:DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a6:82:5c:0f:8f:ed:6f:2f:eb:fc:89:1d:da:38:4c:80:18:
         04:6c:74:b8:32:c5:8c:99:00:a3:8f:49:5d:57:03:3e:03:98:
         76:78:2e:0c:69:23:31:59:51:14:95:ff:37:03:95:a0:4b:5e:
         ec:62:53:da:8e:cf:2b:9b:1b:ec:b6:26:32:e3:05:6e:6c:f1:
         2f:9f:a8:55:e8:4d:bf:54:d3:1c:c6:74:3b:85:a5:0d:d4:a8:
         8b:ef:0e:a6:56:86:7e:e7:d5:0b:0e:3f:34:dd:f1:97:60:4c:
         bb:94:a0:3a:53:e9:c6:ae:31:8c:e1:33:33:cc:4c:34:6f:6d:
         67:95:49:f0:f0:9e:f5:0c:13:73:b0:a4:15:30:19:1d:cd:27:
         45:2f:5f:b9:ff:cc:7b:6e:de:c5:dd:ac:ce:be:b3:56:2f:b7:
         d7:b8:72:67:61:fd:61:76:99:97:12:34:0f:02:45:5d:e2:7c:
         e7:e5:52:26:a7:f0:8e:bf:76:2e:a8:dc:99:01:a9:9b:78:02:
         8d:92:67:b4:04:82:dd:1e:32:cc:93:0f:94:f9:4c:bc:a3:bf:
         31:8f:2d:6b:f1:14:bf:45:07:ba:88:9a:80:2c:b8:57:91:68:
         90:c2:2a:71:7c:81:6d:fd:de:2c:76:81:90:1c:16:bb:9e:71:
         53:c0:26:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:00 2026 by rpki-client