Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft
File:                     2en59z7k9bHN8XYsLfODKVCja30.mft (raw, json)
Hash identifier:          EUCjIXioFTXsVK//rV8z7c/ZrDrfWkGYcjG7UpjfRfk=
Subject key identifier:   76:4F:A5:23:56:B7:4E:69:A4:84:29:15:71:94:27:3E:D8:A6:8C:85
Authority key identifier: D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D
Certificate issuer:       /CN=A91AACB2/serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D
Certificate serial:       3596
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft
Manifest number:          358D
Signing time:             Tue 06 Oct 2026 14:57:40 +0000
Manifest this update:     Tue 06 Oct 2026 14:57:39 +0000
Manifest next update:     Tue 13 Oct 2026 14:57:39 +0000
Files and hashes:         1: 2en59z7k9bHN8XYsLfODKVCja30.crl (hash: ix8h/Dakb5+JZUM9CxpFWxm3davPU2z3oY85/EljbTU=)
                          2: 76B5C744B45E11EAB71DF94AC4F9AE02.roa (hash: OrYwlHpiSmZNjD507c7+5SVsF6TOXtHT7d2m6BJQ+nQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl
                          rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 14:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13718 (0x3596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AACB2, serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D
        Validity
            Not Before: Oct  6 14:57:39 2026 GMT
            Not After : Oct 13 14:57:39 2026 GMT
        Subject: CN=6ac50c64-677d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:cb:67:8b:f3:ab:79:a1:8a:2d:b0:5c:d3:
                    ad:60:ab:19:10:62:cb:b5:2e:be:e3:fb:fb:b0:ad:
                    d8:0a:f1:91:ce:b5:db:6f:7e:dd:29:32:f4:30:67:
                    2e:96:67:5c:fc:14:13:25:c3:2d:5c:02:6b:d6:0a:
                    3d:9d:4b:60:99:cb:65:ad:15:e9:83:30:9d:53:91:
                    9f:38:7a:6c:1a:34:d2:18:81:9e:b2:62:83:08:89:
                    cc:93:07:c6:00:4e:ff:f8:ac:36:29:7e:23:34:8a:
                    64:5d:4c:3b:cb:31:a4:d3:55:c3:69:6f:d2:b1:f6:
                    2f:23:51:ea:75:26:f2:4e:ee:76:24:29:5d:71:7b:
                    e6:ad:cf:94:ca:61:54:da:b3:1d:d3:7e:ae:70:da:
                    5f:10:18:6f:bd:1c:94:c4:21:9f:e9:44:a1:30:a9:
                    da:8e:f5:3c:24:79:0f:32:c0:00:92:8c:79:3a:98:
                    ae:43:e0:59:2c:ee:fb:a7:44:ed:27:95:e5:21:45:
                    db:08:a1:d4:f4:93:46:89:c8:08:81:7c:01:95:e4:
                    73:2d:77:3d:57:10:1b:7f:43:57:ec:ec:46:cb:ea:
                    b3:0e:cd:10:98:c1:df:fc:3f:30:6c:5e:3c:49:e0:
                    1b:ad:cf:e7:f8:39:ff:63:67:7c:f3:2c:ab:c7:9b:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4F:A5:23:56:B7:4E:69:A4:84:29:15:71:94:27:3E:D8:A6:8C:85
            X509v3 Authority Key Identifier:
                keyid:D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a7:d9:2f:fd:06:8b:00:10:ee:05:1f:82:01:03:36:62:12:
         d9:c0:d2:9a:48:98:bb:e8:fa:a8:87:17:9d:70:45:98:82:12:
         bd:24:02:d6:a3:4f:01:1f:72:95:78:7e:e6:96:65:e9:41:9b:
         81:fc:19:07:16:f9:af:3f:ab:9d:74:b7:4f:52:3a:de:53:4d:
         1f:68:1f:5f:2f:26:c4:e2:f0:92:56:5c:dc:e1:f5:56:b6:42:
         fc:92:c4:f3:09:22:df:96:5f:5b:d8:46:c6:47:4c:e9:78:43:
         d3:87:9c:71:e9:cb:d8:39:ab:2b:7d:b1:be:ee:95:64:89:2e:
         57:73:66:5e:ef:29:f8:81:b9:ae:02:a3:59:75:c6:3d:d2:c9:
         df:c3:0d:cf:e1:7e:cd:22:cb:92:e0:45:c9:3f:71:40:38:5e:
         92:f9:8c:c0:a7:6a:81:d9:a1:51:9a:6b:76:9b:a9:d0:0b:6d:
         9d:9e:06:1b:71:f5:56:10:86:2c:78:48:a6:81:90:35:7c:0a:
         50:ce:9c:1b:f1:1e:71:8b:05:a1:b9:27:3f:83:66:f3:a3:05:
         06:1c:bf:bf:76:57:c1:57:94:82:73:f5:b8:33:c8:73:a5:f3:
         f5:a3:b8:f8:45:85:96:2a:57:26:f8:bd:96:ad:41:67:4b:ba:
         5e:7c:15:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:24:32 2026 by rpki-client