Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
File:                     2v3gvG4K06iVvHVtbDGh5httODs.mft (raw, json)
Hash identifier:          iDNouZspXoU311xePQWzsBVFNIvuuHaw0zFDBujNwCo=
Subject key identifier:   A0:DB:9D:B2:93:47:F8:FD:1C:1F:4C:C7:56:04:55:93:BD:68:A6:21
Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
Certificate issuer:       /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Certificate serial:       0921
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
Manifest number:          0908
Signing time:             Thu 14 May 2026 20:22:43 +0000
Manifest this update:     Thu 14 May 2026 20:22:42 +0000
Manifest next update:     Thu 21 May 2026 20:22:42 +0000
Files and hashes:         1: 2v3gvG4K06iVvHVtbDGh5httODs.crl (hash: jswBKKfUPeVO2/Q5iAysxPI0tJM7V1L2GNsXqEdyCNY=)
                          2: 311DA6AA78F611EFAFD81B5BC4F9AE02.roa (hash: 4vuTCUAhfJT3HGv5tLVBeeb3AAx6C5qUisVfSfItWZ0=)
                          3: 312D1714A6F211EFBD311B19C4F9AE02.roa (hash: KoKgWmsxfkCkbgWCHOo/9Lqsa6nPc6n6w00K8LYdEf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
                          rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 21 May 2026 20:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2337 (0x921)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
        Validity
            Not Before: May 14 20:22:42 2026 GMT
            Not After : May 21 20:22:42 2026 GMT
        Subject: CN=6a062f13-e258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1b:ec:f1:19:5f:c6:5f:be:84:47:df:1c:9c:
                    f2:f0:c1:96:db:e6:f3:99:9c:c0:57:5a:24:81:e0:
                    e0:04:a0:e8:5f:d7:a1:d4:b7:f2:2d:ea:7e:c3:10:
                    fa:e7:41:ba:d5:10:9f:23:83:b4:33:47:95:66:b5:
                    6b:55:36:dd:1a:9e:6b:14:cb:e1:bd:e2:9b:64:63:
                    f7:4e:aa:22:e7:0a:97:e4:b8:a1:d7:b9:24:d1:66:
                    66:18:f9:fc:d1:c0:36:2d:ad:bc:1a:50:02:f6:f8:
                    ce:a7:99:fb:76:75:5e:17:b6:a7:f9:99:e2:61:67:
                    cf:51:2a:19:6d:97:43:3b:70:8c:0b:47:bb:31:dd:
                    4e:d2:12:4c:8d:39:ae:9b:ac:c7:c7:ea:3f:13:4d:
                    b8:7d:b0:0a:02:fe:9a:6e:05:df:a8:6a:5d:e7:39:
                    90:0a:87:6a:e6:c4:ec:3f:8e:76:6a:c2:18:9c:d6:
                    bd:66:e1:08:b6:8c:9f:f2:37:5b:eb:1a:bf:9a:65:
                    6f:44:ec:5d:d2:d7:f9:b8:96:cb:f3:ec:2f:24:19:
                    4a:68:65:e9:18:11:9e:fb:af:4c:c0:b4:8a:85:12:
                    9c:6a:b9:bd:97:d9:0a:80:e4:01:04:82:d5:58:fb:
                    3f:70:b1:c6:d3:39:dc:40:d5:fd:73:4d:52:43:dd:
                    ac:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DB:9D:B2:93:47:F8:FD:1C:1F:4C:C7:56:04:55:93:BD:68:A6:21
            X509v3 Authority Key Identifier:
                keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e3:18:06:ec:1e:3d:ea:d1:c3:53:50:35:88:53:e9:a7:89:
         c7:1d:7c:cb:e4:04:5f:fb:9e:04:ea:fb:1b:ec:cd:f8:fe:30:
         7f:85:71:48:c4:85:7d:8e:3a:cc:7f:0b:25:51:ad:2c:76:70:
         bd:d1:db:f3:d0:ff:ce:7e:2c:a8:39:02:6d:77:41:d6:4d:70:
         eb:c9:f7:c7:d8:6c:01:d0:5b:4d:e6:ee:63:4b:1d:d7:66:d7:
         ed:fa:de:63:3a:4b:cd:11:37:b1:18:20:18:ee:57:71:bb:4f:
         42:80:cd:5e:27:ce:72:c4:0e:fa:99:f5:29:9a:4f:2e:43:f0:
         4e:d4:6e:f1:18:93:e1:c7:3d:dc:93:4c:bc:c0:d6:5c:43:e5:
         3c:c8:72:1b:6e:a6:f3:6b:ce:d3:a3:cd:0c:03:7a:7f:f8:a7:
         6b:1f:19:db:0b:ec:09:6c:30:bd:e4:f5:ae:b5:de:1e:ca:7c:
         a5:c7:00:b6:5a:5e:27:66:b8:38:4f:e4:9f:ba:e2:f6:fe:e4:
         b7:3b:c6:70:4a:ff:45:1a:e0:7d:28:2e:b3:32:ff:d1:19:f1:
         4c:67:72:08:97:f2:55:e4:68:35:be:63:57:46:fa:93:f5:2c:
         3d:97:bb:35:0b:d7:2c:20:46:c9:54:fa:f4:a3:6e:6f:ab:73:
         de:5b:07:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 23:12:15 2026 by rpki-client