Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft
File:                     2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json)
Hash identifier:          uhjeY46GvsYkHO3hyU087jvoKSTfi9l/i0LaQ1A9Nsw=
Subject key identifier:   39:55:93:77:F4:69:79:2E:01:49:B3:F1:EA:84:95:D9:AB:C5:E2:69
Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8
Certificate issuer:       /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8
Certificate serial:       0CD2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft
Manifest number:          0CBB
Signing time:             Sat 04 Apr 2026 18:19:56 +0000
Manifest this update:     Sat 04 Apr 2026 18:19:55 +0000
Manifest next update:     Sat 11 Apr 2026 18:19:55 +0000
Files and hashes:         1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: /k28YVBnc5Z1KwxZUNjMiMSPkA21ujKHS+AhjCoEz10=)
                          2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: DDz9ughOCNkxK48b2+kTl6B6v6gBnr7afj8fRQjJsr0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3282 (0xcd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8
        Validity
            Not Before: Apr  4 18:19:55 2026 GMT
            Not After : Apr 11 18:19:55 2026 GMT
        Subject: CN=69d1564c-1d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:54:6c:c2:0e:a4:9d:b0:d2:86:b9:9c:f9:e5:
                    c9:27:21:c4:e7:7d:d1:90:e8:03:5d:a0:0c:d1:07:
                    f6:8f:a6:56:36:61:41:74:9c:e5:b1:63:e4:a4:b4:
                    53:24:4f:b1:5b:24:ef:d0:76:3f:15:43:cf:6f:ed:
                    ed:a9:71:04:a1:72:ca:c1:aa:f7:42:a9:a7:f2:4e:
                    e9:6c:9b:54:64:ad:23:15:fc:ac:73:8c:4a:5b:a1:
                    57:5b:fa:7d:67:20:6c:2b:89:92:ee:43:a9:df:c1:
                    fc:d5:ac:01:96:97:08:8a:88:56:c5:80:79:6f:db:
                    c8:59:6a:e8:b8:8f:89:a8:4d:1e:3c:24:06:3f:a5:
                    13:43:0e:f5:3c:23:ef:03:14:fd:87:99:07:1c:f9:
                    92:85:dd:63:bb:14:5a:25:07:de:7f:c5:7d:8c:20:
                    d8:b8:41:2c:b7:41:4d:cb:23:04:ea:1f:63:b7:21:
                    36:00:33:61:53:c5:46:8b:a0:bb:61:cf:5e:b6:a6:
                    05:ce:7b:86:e2:92:8f:60:aa:57:a8:d5:09:b2:3c:
                    7d:d8:cf:c2:68:85:db:84:a5:12:b4:a9:54:74:ef:
                    5e:0e:53:29:4e:34:a4:17:28:98:31:c1:b1:e9:f4:
                    c1:08:9c:c8:af:0c:0c:87:49:b0:d4:5b:bc:5e:e8:
                    d6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:55:93:77:F4:69:79:2E:01:49:B3:F1:EA:84:95:D9:AB:C5:E2:69
            X509v3 Authority Key Identifier:
                keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:04:9d:0d:48:e2:4b:c7:bd:22:d7:49:d2:b6:e0:37:a0:8a:
         93:1c:08:b0:a7:a1:30:de:dd:ca:54:13:34:9c:07:a1:1a:d3:
         74:42:36:f4:3e:14:45:40:a4:60:23:b5:20:d5:52:78:5e:b2:
         8f:c0:ee:9f:1b:b1:2c:7e:55:31:94:dd:b3:ff:3b:7d:8f:88:
         89:49:f4:11:f4:a0:e0:95:94:54:de:4f:a5:70:f8:dd:02:63:
         53:de:e5:27:da:6b:87:5b:96:06:5d:75:92:20:06:13:f7:f3:
         0d:17:0a:3e:e8:8a:6e:16:87:30:09:02:2f:bb:3e:96:3e:5a:
         ef:8f:8b:b1:0e:a7:28:c7:fa:ca:e1:2f:41:f5:67:35:98:f5:
         e3:85:de:2c:45:6c:c6:73:8f:f1:b6:f7:06:fb:0b:cf:6c:e1:
         c5:48:b6:b3:d2:c4:61:46:a0:73:f1:f6:4c:9d:e8:9a:91:8c:
         b3:d5:9d:b9:fe:23:9c:b0:c5:12:b0:9e:82:3f:ad:b2:fd:16:
         28:89:bd:df:53:36:59:46:ed:ed:b6:38:c2:31:44:60:f0:a2:
         94:5d:9f:54:e0:58:fa:6b:00:73:1b:7e:f4:89:7b:5a:76:ed:
         c4:81:4e:d6:04:09:e5:1f:09:62:19:e4:f9:d7:99:6b:d4:de:
         8d:dc:08:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:01 2026 by rpki-client