Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft
File:                     2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft (raw, json)
Hash identifier:          TYCc/1T8IFsGSjJWEQsin+laIRjvitOSKabXkpRKbdk=
Subject key identifier:   44:50:45:8D:4D:6A:71:38:22:19:CF:68:5E:DD:81:26:DD:90:19:23
Authority key identifier: DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE
Certificate issuer:       /CN=A91E6CCA/serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft
Manifest number:          DC
Signing time:             Mon 01 Jun 2026 07:25:18 +0000
Manifest this update:     Mon 01 Jun 2026 07:25:17 +0000
Manifest next update:     Mon 08 Jun 2026 07:25:17 +0000
Files and hashes:         1: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl (hash: rM9Pwc5veRSlQiswjwQ5fzBv/zu6N3F2EmQnMytiEPY=)
                          2: E9CF18DE0F7111F096BBCF24C4F9AE02.roa (hash: tWtaLRbtDVtWiOlLn3BiRHdz2Yx30phG2bPvS2Dv5GU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl
                          rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6CCA, serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE
        Validity
            Not Before: Jun  1 07:25:17 2026 GMT
            Not After : Jun  8 07:25:17 2026 GMT
        Subject: CN=6a1d33dd-f9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:5e:c9:53:4d:88:3a:19:fa:1d:ae:21:b3:
                    d6:50:22:17:c4:56:f2:db:4a:fe:d5:9a:13:22:26:
                    a9:08:86:ee:52:93:f7:ae:20:91:1b:d1:90:0e:36:
                    c0:a7:5b:56:66:a0:0f:b6:4b:1b:aa:6f:c7:37:55:
                    3f:12:56:bc:dd:72:8e:74:1f:48:65:e3:49:11:9a:
                    7e:e1:39:76:fc:d3:4c:39:ec:c2:26:a2:4c:1d:5f:
                    a2:7d:47:cd:0c:ab:e9:d1:31:91:66:6c:a0:9c:ce:
                    3f:c3:53:e8:9d:e1:0b:d3:b1:97:5c:45:7b:46:92:
                    c0:23:41:7d:85:52:95:24:79:4c:0a:83:44:27:5e:
                    58:16:6f:8f:0c:d8:40:3a:3a:fd:2e:1c:f7:c1:83:
                    19:da:51:1d:fd:07:9d:35:84:3b:5e:6c:3a:c0:fa:
                    b2:9a:ab:74:52:fe:ee:23:91:cc:07:09:fa:0d:64:
                    1b:97:3b:05:79:79:6d:d0:99:29:0f:7a:16:a9:57:
                    5d:8e:8f:e7:4d:af:2f:7f:31:77:cb:1d:c2:2c:89:
                    30:82:ce:f1:e0:e0:04:75:41:ec:3c:f3:91:dd:19:
                    62:bc:9c:2d:bb:3f:d1:9f:74:3b:5b:ca:db:ec:ae:
                    f9:15:37:71:12:1f:c3:c5:e1:6e:50:35:b0:4c:a7:
                    da:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:50:45:8D:4D:6A:71:38:22:19:CF:68:5E:DD:81:26:DD:90:19:23
            X509v3 Authority Key Identifier:
                keyid:DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:6f:27:0c:a7:b7:52:e9:db:3b:30:41:84:c7:d2:30:fe:08:
         b6:84:a7:52:0d:03:05:fb:2a:05:48:6c:24:b5:0d:75:0a:ce:
         51:04:a6:41:b0:25:3f:65:0f:f0:db:f5:c9:d6:74:8f:7c:7d:
         21:b7:e5:a0:2f:02:35:04:a1:d1:79:34:f8:49:5b:8d:cf:20:
         e2:dd:f6:34:82:dc:97:a0:bc:b7:8a:e0:98:be:dd:04:12:18:
         79:45:df:c3:6c:8c:62:a0:57:b7:8b:55:f0:93:dd:b5:7a:c3:
         52:32:96:cf:7f:27:38:e3:0a:86:9c:f8:6c:d7:2c:4d:1c:78:
         7a:cd:69:70:0b:be:eb:20:4c:e4:13:58:1c:67:a3:a2:0b:c3:
         9e:24:c5:e7:ca:62:d9:ba:fb:a1:40:2c:80:ed:42:59:7d:0e:
         23:5a:d9:e6:9f:68:e8:7e:1d:b7:43:7b:ed:a0:61:6f:c0:8a:
         0a:4b:82:28:1b:92:37:be:f8:2e:96:3b:d3:08:7f:ff:87:92:
         15:07:cf:a4:3c:90:20:3e:97:93:3b:22:e8:94:cd:ca:a0:2f:
         cf:35:2c:ce:c5:d2:54:7b:fa:44:e6:99:15:8d:51:f9:2f:7a:
         e2:47:b9:42:7d:16:50:0e:e2:ad:d7:14:6d:f1:bc:d1:19:68:
         08:3c:de:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:12 2026 by rpki-client