Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
File:                     aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json)
Hash identifier:          zlzbI4PWjglD4s1uqZ0EmBd+wSRgQvZYjBt8YSqBCN8=
Subject key identifier:   E7:57:E4:69:75:0B:0C:0C:B0:77:71:62:5A:E0:1F:D7:22:8B:46:0F
Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87
Certificate issuer:       /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
Certificate serial:       2348
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
Manifest number:          2339
Signing time:             Sat 18 Apr 2026 14:38:51 +0000
Manifest this update:     Sat 18 Apr 2026 14:38:50 +0000
Manifest next update:     Sat 25 Apr 2026 14:38:50 +0000
Files and hashes:         1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: G+Y0aynxgJga/4j7RszDOXgLXW0w+spS57asu6ovk98=)
                          2: FD36E81421D811F1A613849C243D8C67.roa (hash: JJMfeShYAnmCXRlBjx4h40MQ/VALdK8zOK54QosFsRU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl
                          rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9032 (0x2348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
        Validity
            Not Before: Apr 18 14:38:50 2026 GMT
            Not After : Apr 25 14:38:50 2026 GMT
        Subject: CN=69e3977a-c3a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:aa:94:93:f7:3f:c6:0a:5f:b6:34:b2:df:c2:
                    52:f2:ba:26:79:02:7d:5c:51:8c:70:00:71:e2:c9:
                    22:0a:fc:2d:b6:21:8a:96:7e:dc:aa:d9:59:2f:e2:
                    93:e2:6b:11:3a:7d:79:6a:94:ce:71:c4:be:23:0c:
                    56:bb:2d:93:2e:2d:d8:fb:29:b7:d3:39:3b:6f:e4:
                    e0:a9:61:86:ef:25:cf:c5:cd:ae:5a:32:64:bd:3b:
                    d0:97:12:bf:ec:2e:62:33:b1:75:6c:02:6c:aa:c5:
                    e8:7e:f0:89:0e:c1:6c:0f:2f:40:fe:46:ae:24:ae:
                    04:d7:02:ad:6c:9f:37:b1:3b:eb:fc:cb:33:57:78:
                    8f:9e:39:26:1f:b4:25:13:c1:3b:80:e2:77:ae:05:
                    60:a5:a4:0f:7c:b8:0f:27:30:c1:5f:b3:fd:0c:b4:
                    96:c8:57:95:9f:ea:f7:f8:82:4c:9f:6b:17:c9:88:
                    b1:e8:cf:4a:12:13:ad:50:5e:c3:0e:12:05:d5:f3:
                    a8:ac:b7:41:4a:c0:70:dc:8d:98:4b:dd:4c:c3:18:
                    c4:93:90:ce:96:a9:28:1a:63:67:dd:a1:85:0c:09:
                    1d:c3:4b:17:22:bd:cd:4e:c5:a8:c7:8f:18:be:af:
                    89:1a:9b:81:32:8e:ae:97:85:36:d7:fc:e0:55:11:
                    30:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:57:E4:69:75:0B:0C:0C:B0:77:71:62:5A:E0:1F:D7:22:8B:46:0F
            X509v3 Authority Key Identifier:
                keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:2a:2a:00:d5:f6:91:53:2b:4e:3e:8d:69:32:06:e4:4b:39:
         df:47:a5:54:65:77:f1:7b:97:2e:de:4b:30:99:b7:3c:85:0e:
         88:6c:8f:71:ca:5a:ce:00:5e:8b:7f:ca:d4:12:bb:af:72:8a:
         7d:4d:99:2e:b6:8f:19:0e:23:15:3d:fd:dc:64:ee:ae:74:3c:
         d3:64:b5:d1:b2:0c:0c:51:55:f8:96:13:1c:92:4a:0f:2b:01:
         67:1e:dc:74:9f:ca:b9:64:91:84:2d:99:8b:6c:32:70:4b:93:
         34:3b:d1:e3:c8:05:99:72:2b:5b:d8:1e:a1:09:9d:0b:68:37:
         ec:fe:ff:52:fe:bc:33:66:93:c8:fe:af:b2:00:5b:d4:7b:6b:
         f4:19:15:92:31:6a:19:5c:ae:15:46:75:f4:0b:2c:ae:28:44:
         12:31:59:cc:23:6e:a5:21:b1:47:9f:33:b4:d1:6d:a6:bb:ee:
         a6:9e:0f:dd:ea:cc:6f:8e:c8:f4:10:12:fa:ff:11:17:58:b0:
         56:9d:b0:0a:e1:29:97:8e:de:5a:f4:3c:7c:52:5e:89:ca:b4:
         65:a7:ac:14:b6:77:cf:ba:79:43:bb:aa:4a:76:b8:2b:6b:56:
         8d:b5:fa:b7:36:29:85:aa:5d:45:7a:97:01:79:47:f7:61:c3:
         5e:70:06:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:25:47 2026 by rpki-client