Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
File:                     n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json)
Hash identifier:          cO+/MHmonJC38rT/pir6IjrAR4RecV0t10bTTZjJYJA=
Subject key identifier:   05:1A:26:99:E6:CB:1E:A7:51:18:11:E1:07:D5:6E:FC:1B:8C:3A:09
Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
Certificate issuer:       /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Certificate serial:       2BE8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
Manifest number:          2B94
Signing time:             Wed 06 May 2026 15:31:32 +0000
Manifest this update:     Wed 06 May 2026 15:31:32 +0000
Manifest next update:     Wed 13 May 2026 15:31:32 +0000
Files and hashes:         1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: 79eVn1FSFNAfmoP+24pGm+1oTzZkEvFFUtx3Tnx5i4M=)
                          2: F1BA2EAC353311EBB895B082C4F9AE02.roa (hash: XMn1rTIy3jaeKDZE05M5b8eeprfjm2rfHPZwQzTw2V8=)
                          3: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: RaV0EBH4fa+l9u1AYk3sjgFpJfu7SSd3dDIQo14KDEs=)
                          4: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: 25oLu27CZ0gv2qJnkcUs4150C/CVxdIojsajwReLNXs=)
                          5: BB799DA8844011F09054B049C4F9AE02.roa (hash: VrRFOlut3uTJjQcCOu3xElVoNRFtaOUQQFsO7k9dNnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
                          rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11240 (0x2be8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
        Validity
            Not Before: May  6 15:31:32 2026 GMT
            Not After : May 13 15:31:32 2026 GMT
        Subject: CN=69fb5ed4-402e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a4:5a:b9:cb:a2:c0:ef:97:62:e3:9f:30:2d:
                    bc:a6:17:5d:0b:f5:a5:2b:1f:36:2c:d9:05:82:74:
                    80:0f:8c:d9:41:f4:d2:86:24:4e:99:82:f6:9d:7f:
                    e1:2d:af:02:17:19:e4:bb:9a:de:34:91:8f:61:18:
                    7b:43:19:70:63:ef:96:42:3e:60:a2:ff:29:96:75:
                    78:f8:98:a8:3f:10:23:39:75:dc:df:35:5a:c7:55:
                    9b:e2:9c:44:fb:91:c7:85:dd:1f:97:be:06:17:3e:
                    b0:fc:48:87:f7:76:3a:67:0d:69:f7:f3:39:39:9a:
                    f4:d1:a7:88:07:58:60:32:a2:ea:96:99:ce:92:dc:
                    c5:5b:07:17:da:57:52:a6:e1:53:a4:70:15:9d:7f:
                    ca:f8:d0:56:1d:76:59:61:8a:4b:63:1f:a1:a8:d3:
                    a9:38:89:62:9c:55:e2:4e:85:46:50:ed:72:77:e4:
                    2f:9c:b9:74:8a:d7:52:3c:06:09:b1:ef:97:69:44:
                    1b:70:72:9c:40:26:08:7c:d5:78:b7:da:e9:59:4f:
                    79:d7:24:43:8d:f9:fe:e2:45:c3:f3:9e:57:bc:ae:
                    f2:39:30:6a:9c:a5:ee:4d:8a:e1:cc:89:ea:7a:15:
                    08:82:56:80:31:60:f4:e4:a6:b6:5a:5f:34:99:d0:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1A:26:99:E6:CB:1E:A7:51:18:11:E1:07:D5:6E:FC:1B:8C:3A:09
            X509v3 Authority Key Identifier:
                keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:91:32:05:52:47:b2:27:4c:32:7f:3e:29:0d:ef:2e:5c:8d:
         d8:c2:13:b3:74:4b:22:7d:67:10:5b:9a:ec:18:dc:bb:14:8c:
         89:6d:c9:41:20:c7:6f:71:f2:da:b0:31:d6:c8:d2:b3:79:b7:
         8f:f6:bb:a2:c4:06:e2:99:cc:33:32:21:53:4c:70:f1:da:b7:
         f2:d0:56:b7:39:43:af:5c:23:39:bb:4a:2a:da:7c:78:50:00:
         36:99:07:d2:b5:27:b8:f9:3b:47:93:b9:8d:0c:65:bd:16:e3:
         f2:ed:e0:98:f8:d0:2b:8b:eb:07:2e:a0:cd:56:e1:9e:0a:9e:
         8e:56:34:73:a4:e3:2f:a0:03:2e:2c:7f:5a:60:61:dc:b1:41:
         20:a5:d8:f1:db:07:f4:ed:14:24:5e:07:8b:ba:7d:9b:1f:fa:
         f0:85:43:d3:a2:cd:86:98:74:c2:5b:39:3d:be:43:94:0b:54:
         36:66:97:2a:a4:1f:ab:23:95:8a:7e:7e:62:18:8c:9c:f4:4b:
         06:2f:af:1b:4e:ae:3d:8e:f3:32:92:f4:50:06:6f:87:cd:f9:
         ec:11:15:8c:57:2a:2a:25:a5:7b:a7:d5:f1:33:f4:ac:8a:ca:
         0d:a8:18:9c:05:4f:4c:db:91:14:75:2f:0c:98:d0:dd:00:d6:
         88:fc:0c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 06:32:06 2026 by rpki-client