Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
File:                     2Qg5PFuoA1r2i37ACVWOgS7QleA.mft (raw, json)
Hash identifier:          N2kKSaPvDWJ6+xTkPk0EVzddk3jxAOmC7/GN3Oba2uM=
Subject key identifier:   0F:0F:F1:0E:C4:AE:99:AA:94:5B:05:F5:AF:8F:D1:B1:DA:DB:85:FC
Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
Certificate issuer:       /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
Manifest number:          0128
Signing time:             Sun 05 Apr 2026 05:24:27 +0000
Manifest this update:     Sun 05 Apr 2026 05:24:27 +0000
Manifest next update:     Sun 12 Apr 2026 05:24:27 +0000
Files and hashes:         1: 2Qg5PFuoA1r2i37ACVWOgS7QleA.crl (hash: O9ynNt9Sr35uJZTrrMpNuovImw4dNUSqWLRdSI0iX3E=)
                          2: 90C06632E59811F0B79FD920496F56BC.roa (hash: Z/MTCzTXGo9DzTVFAZ1qXdgIiz2vNTTF/MPMd5PghNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
                          rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
        Validity
            Not Before: Apr  5 05:24:27 2026 GMT
            Not After : Apr 12 05:24:27 2026 GMT
        Subject: CN=69d1f20b-5488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d0:e1:03:f0:a5:8b:35:8e:b7:e4:28:6e:31:
                    bb:29:6f:3e:28:34:d2:a6:eb:09:f2:74:6b:70:8c:
                    18:42:26:4c:7a:66:7c:f4:cd:96:fe:33:5b:a9:55:
                    ef:a4:ed:e9:6c:fe:6f:cd:f1:69:eb:bd:6a:b5:a1:
                    09:af:c8:43:e5:b5:ed:52:b6:f5:99:55:4e:52:17:
                    d0:17:38:dc:44:2d:0f:b6:ec:3e:83:a8:55:6c:72:
                    7b:db:d6:49:28:41:e0:2f:50:db:d1:b6:0d:9f:db:
                    58:a9:8b:53:8e:5b:86:f1:b2:f3:f6:5d:cc:14:bf:
                    73:24:b5:bc:00:de:f8:39:d5:df:11:62:5f:c0:26:
                    a1:76:75:58:28:4f:90:9c:72:81:f4:d1:b3:bb:41:
                    d1:df:c6:f4:75:e3:51:7d:c7:37:6e:00:44:75:44:
                    13:00:63:56:21:90:f7:ba:9d:cd:d0:6b:cb:c3:91:
                    41:e1:09:c1:f2:f7:41:9c:76:6c:b2:39:fd:fa:84:
                    02:0a:bc:88:0d:d9:90:49:a3:b0:6e:23:c7:35:a5:
                    82:ca:82:7e:bc:7c:28:e1:d2:84:95:16:08:ca:eb:
                    93:b7:8b:ae:51:e9:bd:07:c9:c7:57:19:b3:18:ea:
                    bc:bb:ca:a5:af:e8:d4:ca:a7:85:ae:0a:a1:70:ae:
                    7c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0F:F1:0E:C4:AE:99:AA:94:5B:05:F5:AF:8F:D1:B1:DA:DB:85:FC
            X509v3 Authority Key Identifier:
                keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:43:ca:0b:e0:90:a4:96:a2:86:d8:f8:17:45:61:86:43:cd:
         11:1a:74:9f:d3:d4:c3:cb:ab:b9:6b:f8:38:9f:a1:1a:6a:9e:
         17:88:78:41:7a:e7:bc:87:b2:d6:95:3e:22:6a:da:42:1a:b8:
         40:c5:7b:f1:ec:26:fb:da:20:bd:b6:46:a6:e8:b8:99:bc:d6:
         68:20:fb:f6:ca:76:9b:7a:ee:82:5b:8d:b9:e3:6f:00:05:18:
         3a:68:67:5f:7b:41:45:22:88:46:36:56:ac:4e:5a:cc:f6:71:
         d6:7c:49:38:55:b9:17:2b:c3:3d:10:de:4e:f3:31:dc:fb:a6:
         4c:91:1a:c5:dd:67:b7:c2:49:f3:27:bc:1d:f1:7f:6f:d9:75:
         51:e5:3a:b6:87:e0:c2:47:28:2a:92:90:05:99:4f:2b:63:e9:
         32:b8:a3:10:7c:e5:41:54:7a:1d:4a:9b:e9:ef:25:70:5d:4d:
         ed:2d:90:39:7f:7b:0d:24:82:72:a7:ea:25:cd:96:e6:b5:db:
         a8:53:a3:01:c5:23:aa:aa:de:91:a8:b3:86:03:46:49:b8:18:
         20:7a:c2:50:09:17:08:37:01:1c:9c:3e:4a:c0:95:97:00:f5:
         58:5c:8e:10:d1:98:92:5c:3a:01:9c:b7:9b:00:7d:7b:23:16:
         4a:95:7a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:34:33 2026 by rpki-client