Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
File:                     2RBlAbU10PfK1XyOenR8oGnQTVk.mft (raw, json)
Hash identifier:          9f5tcfYYF73mbFGHVS0N3ayUCgeBi34wGVgEMrBgyQA=
Subject key identifier:   2E:A3:89:C2:CA:18:CC:DD:03:5A:06:F2:37:FC:DE:17:24:CF:BA:4C
Authority key identifier: D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59
Certificate issuer:       /CN=A916FACB/serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
Certificate serial:       045C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
Manifest number:          0455
Signing time:             Sat 04 Apr 2026 23:58:19 +0000
Manifest this update:     Sat 04 Apr 2026 23:58:18 +0000
Manifest next update:     Sat 11 Apr 2026 23:58:18 +0000
Files and hashes:         1: 2RBlAbU10PfK1XyOenR8oGnQTVk.crl (hash: WcMcnFH0xzmUq9iS/8rv7ak/7007fpcdhJxqPFfD/zg=)
                          2: 97D35382924311EC927C972FC4F9AE02.roa (hash: L7w9U1xIcAkgr7iuuigChOuAKtORsk2v9sh89ZFvz9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl
                          rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1116 (0x45c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FACB, serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
        Validity
            Not Before: Apr  4 23:58:18 2026 GMT
            Not After : Apr 11 23:58:18 2026 GMT
        Subject: CN=69d1a59b-8196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:90:c9:cd:d9:e1:80:fa:aa:15:3a:2d:d1:b3:
                    90:c1:32:70:9b:d7:a5:84:7d:69:4c:c4:92:7c:a3:
                    a5:b9:1f:9a:78:b5:6d:28:06:be:56:10:6e:52:11:
                    50:c0:a8:2c:b9:1b:f7:a3:61:0f:fe:dd:24:85:06:
                    fa:c9:7c:c5:e7:be:c6:08:19:d2:c7:20:9b:6f:5f:
                    52:db:81:c5:8f:90:93:a0:1b:de:8f:10:2d:35:1c:
                    69:9a:ff:b8:bd:01:6d:85:02:0b:09:41:62:a4:96:
                    06:8b:32:de:d9:77:0e:55:34:d7:95:31:e9:34:5a:
                    11:65:fd:83:7a:b5:5e:3b:32:5d:75:3a:bf:c6:f8:
                    3f:06:50:04:13:0c:a2:5d:9f:c0:d8:98:bf:6a:ee:
                    f0:bc:d3:35:33:13:81:c7:b0:08:72:23:db:99:a9:
                    c6:41:45:dd:5e:9b:16:4f:41:c9:ba:1f:29:42:91:
                    da:f4:9a:88:1a:45:d1:37:63:0a:e7:d5:30:a5:54:
                    40:8b:d3:60:03:2a:ce:de:7e:f9:06:dc:91:8e:74:
                    a8:ad:d2:20:9d:ed:0b:13:b6:f7:37:5c:fa:57:83:
                    89:19:52:eb:a6:93:a0:db:29:fc:e3:60:33:a8:05:
                    c4:3d:a2:4a:b4:62:89:7e:da:f3:00:f9:c6:34:fd:
                    96:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A3:89:C2:CA:18:CC:DD:03:5A:06:F2:37:FC:DE:17:24:CF:BA:4C
            X509v3 Authority Key Identifier:
                keyid:D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:50:13:0b:49:6c:6a:b9:86:d1:e7:be:5b:79:44:8b:f8:bb:
         5a:54:1c:a8:53:ca:c6:a3:e6:9f:a0:1d:80:4c:99:55:5c:5c:
         21:56:85:fa:42:bd:04:88:53:31:8a:39:96:12:eb:ce:a7:7a:
         00:ac:46:d2:99:98:e8:21:ca:c0:7d:b3:c4:8e:9e:57:b4:b7:
         62:07:25:be:13:7f:4e:d9:5f:4e:fd:7a:37:11:6f:06:fc:b1:
         49:c8:9c:97:35:59:d7:b1:13:24:66:33:a4:75:75:77:cf:39:
         66:5d:49:92:18:9b:50:b0:1e:cd:c3:ea:6e:d8:f1:d7:cd:f6:
         64:9d:3c:73:b5:8b:68:d9:5c:d7:ce:b5:b7:77:67:b0:14:2b:
         bd:09:63:a6:7d:0b:fc:0f:2a:84:5d:f5:92:0b:4e:38:45:7a:
         ab:af:c4:24:8b:a4:ea:2a:f6:98:31:bc:9c:24:fa:ea:f6:31:
         9c:4b:ae:24:59:ef:66:8a:6f:a2:37:e2:6a:86:e1:2b:6a:68:
         60:76:ca:76:41:e1:a9:4a:7e:12:af:77:28:dd:33:dc:8a:32:
         72:00:01:82:b7:95:74:d7:75:9d:16:4c:03:9c:1a:48:e5:30:
         66:1f:a2:6c:1e:99:8a:80:c0:0b:fb:1a:e3:20:ac:3c:73:dd:
         fc:c9:09:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkZBQ0IxMTAvBgNVBAUTKEQ5MTA2NTAxQjUzNUQwRjdDQUQ1N0M4RTdBNzQ3Q0Ew
NjlEMDRENTkwHhcNMjYwNDA0MjM1ODE4WhcNMjYwNDExMjM1ODE4WjAYMRYwFAYD
VQQDEw02OWQxYTU5Yi04MTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi5DJzdnhgPqqFTot0bOQwTJwm9elhH1pTMSSfKOluR+aeLVtKAa+VhBuUhFQ
wKgsuRv3o2EP/t0khQb6yXzF577GCBnSxyCbb19S24HFj5CToBvejxAtNRxpmv+4
vQFthQILCUFipJYGizLe2XcOVTTXlTHpNFoRZf2DerVeOzJddTq/xvg/BlAEEwyi
XZ/A2Ji/au7wvNM1MxOBx7AIciPbmanGQUXdXpsWT0HJuh8pQpHa9JqIGkXRN2MK
59UwpVRAi9NgAyrO3n75BtyRjnSordIgne0LE7b3N1z6V4OJGVLrppOg2yn842Az
qAXEPaJKtGKJftrzAPnGNP2WGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC6jicLK
GMzdA1oG8jf83hckz7pMMB8GA1UdIwQYMBaAFNkQZQG1NdD3ytV8jnp0fKBp0E1Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkFDQi9GNTU5OEQwODky
NDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQZksxWHlPZW5SOG9HblFU
VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJSQmxBYlUxMFBmSzFYeU9lblI4b0duUVRWay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RkFDQi9GNTU5OEQwODkyNDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQ
ZksxWHlPZW5SOG9HblFUVmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL1ATC0lsarmG0ee+W3lEi/i7WlQcqFPKxqPmn6AdgEyZVVxcIVaF+kK9BIhT
MYo5lhLrzqd6AKxG0pmY6CHKwH2zxI6eV7S3YgclvhN/TtlfTv16NxFvBvyxScic
lzVZ17ETJGYzpHV1d885Zl1JkhibULAezcPqbtjx1832ZJ08c7WLaNlc1861t3dn
sBQrvQljpn0L/A8qhF31kgtOOEV6q6/EJIuk6ir2mDG8nCT66vYxnEuuJFnvZopv
ojfiaobhK2poYHbKdkHhqUp+Eq93KN0z3IoycgABgreVdNd1nRZMA5waSOUwZh+i
bB6ZioDAC/sa4yCsPHPd/MkJNA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:24 2026 by rpki-client