Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft
File:                     2wYwePe5d1L7gdAPqb18UjsclwM.mft (raw, json)
Hash identifier:          TXGJtVCd/aq+OlwPuuFtaLkk5GUYm7KgeymOvGJK7mI=
Subject key identifier:   FD:13:4C:5E:73:97:AD:92:95:97:98:3A:26:CC:FD:45:6E:96:B8:B5
Authority key identifier: DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03
Certificate issuer:       /CN=A9192698/serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703
Certificate serial:       0165
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft
Manifest number:          015F
Signing time:             Sun 05 Apr 2026 04:23:30 +0000
Manifest this update:     Sun 05 Apr 2026 04:23:29 +0000
Manifest next update:     Sun 12 Apr 2026 04:23:29 +0000
Files and hashes:         1: 2wYwePe5d1L7gdAPqb18UjsclwM.crl (hash: EC4i2Y0aLkfIzvz2T35GtdMbVa4ZA5CoOLqE9jx1fjo=)
                          2: CE042A841E5611EFBEDD1F39C4F9AE02.roa (hash: k9o+QZZOY/GVuUjyky+6WbWrZg7L8fx0wCEliNfXDKk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl
                          rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192698, serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703
        Validity
            Not Before: Apr  5 04:23:29 2026 GMT
            Not After : Apr 12 04:23:29 2026 GMT
        Subject: CN=69d1e3c2-fd66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:93:85:5f:f7:88:0d:f5:44:a2:12:d9:56:38:
                    d1:c0:79:24:d8:ca:79:0c:7a:4a:29:d2:cf:99:ff:
                    64:4b:28:ac:a7:4a:71:01:91:a1:f6:b5:94:b0:16:
                    ca:20:92:48:b9:0f:81:33:32:d0:3f:9a:63:33:8c:
                    8c:5d:1e:c0:2d:f8:cf:e8:aa:1e:27:34:1e:f4:03:
                    1f:67:5c:95:03:87:8e:91:5b:c1:5b:bb:96:fc:1b:
                    80:31:6c:e8:42:ba:4d:5b:f8:87:ea:1c:56:75:c7:
                    40:02:e0:66:e3:07:06:1c:7c:56:3a:3b:c0:90:5d:
                    b6:cf:da:80:fb:c9:0b:61:a7:e6:1e:81:bc:2b:8b:
                    2b:06:63:5b:1a:4b:12:b6:b7:1c:c8:4c:1e:d8:8f:
                    6c:d0:e3:48:36:d1:ab:bf:b7:dd:a2:a6:49:43:cd:
                    83:f4:59:93:cf:dc:96:ec:ca:85:00:03:ac:27:dd:
                    5f:aa:dd:8e:0b:9a:4b:6f:cb:5f:0d:01:e0:b7:5d:
                    77:21:81:5b:6c:65:27:49:2e:11:50:9f:38:c3:d3:
                    ab:9b:69:e6:c2:ab:ac:ff:42:cb:44:4c:f0:ea:7e:
                    10:bd:1b:40:c8:14:6a:87:d8:f7:ea:07:2b:ef:f8:
                    bc:17:1f:de:47:77:86:74:30:5d:10:16:48:95:9e:
                    78:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:13:4C:5E:73:97:AD:92:95:97:98:3A:26:CC:FD:45:6E:96:B8:B5
            X509v3 Authority Key Identifier:
                keyid:DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:6a:64:17:3f:2d:44:1b:7b:ec:bd:64:56:cd:b7:77:ea:4f:
         86:18:72:22:39:8f:11:38:71:65:72:5e:cd:90:9d:c7:6b:74:
         94:05:7e:8f:e2:7d:2d:37:b0:d9:97:88:98:71:ae:bf:7c:14:
         c0:b7:ec:40:00:57:72:fe:36:90:d5:31:8d:e1:25:38:4b:64:
         79:9a:15:73:1a:6b:e1:43:83:dc:a3:fd:f2:37:0c:7d:b8:33:
         de:b5:29:4b:6f:02:cb:e6:2c:af:f8:05:71:50:4b:ca:88:8d:
         f7:dd:fe:76:35:57:9a:32:d8:03:1d:c3:4f:18:2e:f2:f1:e4:
         ff:e9:8f:f9:39:a2:8b:35:32:9e:c9:48:cc:4d:8b:f3:83:9d:
         e6:07:ba:b3:ff:cc:3d:cc:55:73:de:6f:c5:d8:e3:81:88:44:
         78:30:91:be:3c:a6:05:99:4a:d4:f9:07:95:40:a5:e7:8f:c5:
         eb:df:18:49:ba:90:bf:e3:fd:30:06:28:04:a7:1e:f5:b2:24:
         fd:ad:5c:2f:58:cb:d4:f2:97:a8:c2:ab:00:57:d4:e1:80:b9:
         dd:96:5f:e8:46:b2:bd:4e:07:a6:b0:f8:3b:8a:a1:c2:aa:3c:
         b7:c7:a6:98:1b:b3:c8:4f:99:db:fc:fb:c7:34:d2:97:a5:13:
         e8:6b:f6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:33 2026 by rpki-client