Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
File:                     s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json)
Hash identifier:          Hh7m7Ucv1tpLHcbpmBVROEkJ6x4xIQyCknBf5sF8LQw=
Subject key identifier:   4C:EF:B4:46:26:1E:D3:A1:76:39:CF:81:9B:7C:39:B1:67:C9:02:33
Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A
Certificate issuer:       /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
Certificate serial:       0261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
Manifest number:          025B
Signing time:             Mon 25 May 2026 02:14:24 +0000
Manifest this update:     Mon 25 May 2026 02:14:23 +0000
Manifest next update:     Mon 01 Jun 2026 02:14:23 +0000
Files and hashes:         1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: oJpDGoCZ43c9iOA0V38qvJylhXPpKzC1LYinSddJFSc=)
                          2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: bO2Khb7UpFTYk62drwjeihb7yhCn+p7oDMwlC5AtqAI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl
                          rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 01 Jun 2026 02:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
        Validity
            Not Before: May 25 02:14:23 2026 GMT
            Not After : Jun  1 02:14:23 2026 GMT
        Subject: CN=6a13b080-5bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bd:54:f6:f0:94:54:46:c0:70:6c:8d:61:ac:
                    44:7e:e6:87:84:aa:22:f9:44:cf:45:d8:fc:0f:80:
                    f4:1c:37:fa:9f:4d:b1:54:fd:38:a4:65:47:34:6f:
                    2c:0c:06:22:d7:81:ff:67:a3:b0:72:d1:2e:21:d8:
                    30:05:89:a4:b8:8f:ed:a2:bf:32:76:d1:81:84:d0:
                    6b:e5:88:c1:c9:3b:e3:4c:0c:dd:f2:40:6a:37:46:
                    2e:81:99:fe:49:e9:d0:47:91:1c:af:f3:6a:6c:fb:
                    be:53:de:c9:22:21:94:64:99:fc:c8:0c:24:ad:ac:
                    ef:52:2f:d7:1f:ae:a9:54:a7:0b:aa:59:65:23:d0:
                    cb:4f:b6:d7:62:2d:a6:ca:50:66:fe:3b:80:8f:59:
                    46:d4:d9:4e:75:49:d0:98:94:cd:5a:15:58:3b:40:
                    54:dd:85:29:2e:21:4e:92:ec:35:df:bd:9f:56:0f:
                    c1:95:c8:77:1b:d2:4d:0b:70:7a:6f:1f:8c:f2:99:
                    3c:20:1d:02:03:41:15:ac:b4:4f:7c:4e:4d:33:2b:
                    e1:50:5b:9f:5a:5b:6f:fb:e5:c0:f3:a0:a9:1f:4d:
                    47:3d:20:82:0d:72:5b:58:90:27:45:13:00:38:33:
                    9d:32:78:54:52:a9:96:f9:2e:bc:4c:8a:27:48:a4:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EF:B4:46:26:1E:D3:A1:76:39:CF:81:9B:7C:39:B1:67:C9:02:33
            X509v3 Authority Key Identifier:
                keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:09:91:e4:9d:d5:27:bf:b4:5d:2f:5e:2d:cb:5c:4b:af:0b:
         e2:30:03:fb:22:74:56:bd:a2:3e:64:ed:78:ae:c3:df:ab:1f:
         49:91:9b:ca:42:60:49:4f:80:f4:da:6c:86:39:0e:c6:40:81:
         59:9b:fb:06:20:d7:7e:58:88:1d:0f:7e:f5:d2:9b:7e:18:0a:
         33:86:b1:46:fb:c3:8a:80:ac:15:18:13:14:17:97:60:3c:2d:
         b5:7b:26:38:b3:97:6c:62:94:20:f8:35:e7:e7:fd:86:fc:c1:
         72:14:b7:8e:a1:67:1b:76:3e:52:6d:0a:d8:a6:06:2b:23:fc:
         18:d3:28:69:ef:c7:58:60:67:4f:23:e3:8a:01:8b:38:b5:0e:
         dd:eb:f0:20:f2:f9:d4:4f:7c:e3:51:85:89:68:eb:2e:17:33:
         57:28:db:67:29:f7:7f:3a:1e:9e:af:4c:2c:e2:91:4c:ed:9c:
         a2:72:2f:c0:6f:85:89:ac:f5:e2:71:e6:e8:01:3f:26:44:7c:
         da:10:b1:81:04:8e:6a:64:bf:80:fa:85:ee:5b:25:3b:e9:bb:
         76:e4:9a:cb:06:ba:24:8d:5d:28:03:e1:3f:b6:11:08:dc:23:
         da:69:a6:b4:01:5b:7e:25:bb:99:c9:a2:6e:ef:2b:b0:f2:c3:
         80:b9:65:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 01:35:46 2026 by rpki-client