Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
File:                     2kdUAUEh0yaH2X05LZBgSagU_MM.mft (raw, json)
Hash identifier:          X1QOK+KkD9esLgJZHr2wwjnjukLpxcVJFTtIbrHJ1Q4=
Subject key identifier:   44:3D:B6:AB:59:79:1E:43:07:4A:3E:DE:6B:E8:53:6F:FF:9B:39:82
Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
Certificate issuer:       /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Certificate serial:       02E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
Manifest number:          02E0
Signing time:             Sun 05 Apr 2026 01:05:30 +0000
Manifest this update:     Sun 05 Apr 2026 01:05:29 +0000
Manifest next update:     Sun 12 Apr 2026 01:05:29 +0000
Files and hashes:         1: 2kdUAUEh0yaH2X05LZBgSagU_MM.crl (hash: 58e3u7sJDNqG+NmziSmGcxtq8baQLTGHA7ax3X1FhLU=)
                          2: 930770F4244C11ED95AA5569C4F9AE02.roa (hash: QRN3d7Kp62mAA4UY2PHj6uAygWUxtpM/GbpwgYao/0w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl
                          rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743 (0x2e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91777A6, serialNumber=DA4754014121D32687D97D392D906049A814FCC3
        Validity
            Not Before: Apr  5 01:05:29 2026 GMT
            Not After : Apr 12 01:05:29 2026 GMT
        Subject: CN=69d1b559-1ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:53:b0:c1:45:83:ac:a6:49:be:fe:11:ff:
                    38:51:a1:f4:b4:7f:f8:fa:17:e2:1d:3e:fb:9b:60:
                    13:be:12:e8:da:71:f3:1a:24:58:08:46:b1:0a:96:
                    a9:5f:15:b5:5c:94:27:82:0d:70:4e:aa:a4:62:e0:
                    5f:f8:a9:8a:ab:0e:e5:90:f5:fc:f3:5a:87:8a:9c:
                    1b:e1:6e:f2:53:05:f5:97:54:ba:de:8c:1f:63:74:
                    12:9e:23:63:45:6d:23:1c:e9:15:02:8e:8c:e0:f1:
                    e4:0f:39:94:1d:7a:15:94:f3:81:f2:5b:69:e9:4c:
                    25:3d:c0:e9:d1:0f:4a:82:5b:98:c0:de:35:a7:56:
                    3b:b4:d5:52:fa:15:20:c3:b9:92:e2:a4:0c:1d:d8:
                    5c:7d:2d:bb:3c:3c:2c:ab:d0:96:9f:d6:9d:dd:6a:
                    7a:69:0a:da:a3:f1:a1:06:32:af:29:09:41:e1:76:
                    2b:e4:7b:8e:e9:13:42:1d:ff:18:a1:8d:bb:d9:2a:
                    81:63:10:b7:1a:1c:bf:57:9c:dc:a8:ed:7e:93:6c:
                    3b:b1:e9:d8:a1:21:61:f4:3b:5a:73:ee:24:13:b3:
                    6c:9a:0b:95:60:38:25:ad:13:cd:03:db:6d:4d:d2:
                    ec:17:69:45:76:a6:75:40:e8:5e:b7:13:aa:bd:78:
                    65:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3D:B6:AB:59:79:1E:43:07:4A:3E:DE:6B:E8:53:6F:FF:9B:39:82
            X509v3 Authority Key Identifier:
                keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:29:62:cb:62:55:90:0b:a6:6f:1c:8c:6d:79:88:ce:85:3e:
         44:95:bf:96:5d:c8:f3:a7:ab:c4:2b:bf:92:a7:28:42:ae:89:
         91:b0:05:cc:6b:a6:6b:1c:cb:dd:a6:9c:90:d8:88:28:39:84:
         66:71:c7:c9:0e:70:1f:24:9b:d1:73:05:82:74:97:8c:52:20:
         d1:13:14:e7:0b:22:e8:8e:77:1e:a2:5f:81:ba:5e:53:ba:9d:
         fe:d3:b2:10:3e:e4:40:4f:8f:fe:f9:ac:35:97:21:08:9f:99:
         df:ac:1b:a7:0d:ea:6f:6d:2a:21:58:f5:f8:8f:fa:ab:4f:ce:
         65:05:2a:a7:17:00:00:cd:21:bb:c9:0c:ca:5a:f9:5b:52:45:
         57:3c:1f:48:48:9e:b2:d6:4c:9b:e9:c1:c2:06:04:9c:dd:82:
         b2:2b:39:e5:b9:3a:90:89:ff:c6:51:58:e9:c6:d5:e2:af:63:
         4d:87:b1:19:b7:66:cb:14:10:18:09:80:3f:8a:a1:ac:66:d8:
         b4:fe:41:88:17:0c:b2:23:32:86:38:ba:7d:cb:66:f9:3f:0b:
         ed:91:c7:bb:06:98:c1:d0:ba:74:06:ee:5c:cb:1c:d3:51:ba:
         8e:94:fe:13:5e:de:42:c1:69:3c:b8:3e:e3:f4:70:11:13:8a:
         81:41:d0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:22 2026 by rpki-client