Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
File:                     2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft (raw, json)
Hash identifier:          dE8/sJwgH76ch0j0UmwfTpY4TVva/jb17xcLP34rnTc=
Subject key identifier:   90:61:8A:5C:79:45:76:E7:67:51:23:76:89:62:39:89:BB:88:B5:E3
Authority key identifier: D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84
Certificate issuer:       /CN=A91F89A2/serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84
Certificate serial:       01BE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
Manifest number:          01B7
Signing time:             Mon 01 Jun 2026 04:44:27 +0000
Manifest this update:     Mon 01 Jun 2026 04:44:27 +0000
Manifest next update:     Mon 08 Jun 2026 04:44:27 +0000
Files and hashes:         1: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl (hash: y91P3mz3wNwkXeIrzzT+2/EoOmP1+ICnSw5Z8wzgVUU=)
                          2: 6C363C0CF85911EE9EAE731BC4F9AE02.roa (hash: Nm/9k1bK/nJvJq+EeJ6k6OoJJzoZhznxyzIVifoqxa8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl
                          rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 04:44:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89A2, serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84
        Validity
            Not Before: Jun  1 04:44:27 2026 GMT
            Not After : Jun  8 04:44:27 2026 GMT
        Subject: CN=6a1d0e2b-988c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1c:ad:36:d1:21:49:2d:09:6d:61:80:bb:4a:
                    39:16:9c:34:26:81:9e:f3:3d:01:43:e4:1c:af:3f:
                    8b:a8:bd:4b:01:aa:43:0f:b1:35:01:c8:b0:df:9d:
                    13:8a:c8:78:7e:34:01:b5:4d:45:c9:f3:06:74:79:
                    ef:32:f4:f3:c4:e9:19:c7:4d:8a:bf:77:61:c6:47:
                    fb:fd:89:37:15:7a:f0:9b:34:57:8d:f1:d9:c1:52:
                    5e:68:2f:08:90:9f:18:8d:26:62:61:81:d4:72:f7:
                    e5:a0:cb:c5:39:a1:b1:b7:e9:fe:33:84:23:de:23:
                    54:55:e1:ee:d7:85:b4:97:3a:c1:e2:7d:cf:dd:4b:
                    57:e2:02:64:03:9f:30:43:7b:eb:63:30:9a:1d:c4:
                    d1:ef:6e:95:c2:51:cf:a1:5e:fe:54:de:ba:95:ab:
                    8e:c3:b4:ba:55:63:42:e6:17:88:e4:4d:68:ed:72:
                    ec:cc:42:90:12:e6:97:cf:8e:b0:88:aa:4c:cf:53:
                    11:01:dc:8f:3a:ab:25:fd:36:06:f9:5c:bd:77:4b:
                    f8:7a:83:e4:4d:19:13:d4:24:fc:0b:30:0b:76:d3:
                    45:fd:0d:e9:73:ec:88:5a:2c:46:ce:bb:52:10:fc:
                    d1:a1:6a:76:67:8c:20:0a:f5:8d:a2:9d:c2:16:24:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:61:8A:5C:79:45:76:E7:67:51:23:76:89:62:39:89:BB:88:B5:E3
            X509v3 Authority Key Identifier:
                keyid:D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:16:58:68:36:a1:51:5f:9a:4d:c9:44:71:4c:33:2a:19:5d:
         c0:27:81:cc:23:03:27:b9:72:26:f4:df:6a:ca:1e:82:af:a4:
         67:14:93:9d:09:f3:49:fb:9d:94:17:2e:10:c7:85:0b:16:06:
         40:10:b0:2b:17:d0:09:11:5b:99:3f:fd:3a:66:a2:bb:00:b2:
         e8:38:60:66:20:38:d6:eb:76:30:c9:c1:01:b3:6d:43:1b:af:
         cd:79:e1:5a:be:07:94:5b:bf:b3:4c:19:86:43:04:ee:e2:12:
         e6:33:8d:a6:8c:81:69:5f:3f:0c:58:3a:01:60:02:7b:9a:31:
         4a:59:aa:db:a5:2c:a1:fc:53:01:3e:0f:b9:9e:0b:8e:8c:51:
         2c:e1:a5:7c:e8:df:d0:45:28:22:88:d9:56:c5:64:e9:57:f3:
         4b:b5:c0:7a:77:05:0b:6b:32:6b:b2:27:07:39:ea:9e:a4:70:
         fd:50:3b:d2:db:97:31:d6:83:46:b6:20:c8:d3:2e:58:e9:91:
         40:cf:d8:8b:4c:55:7c:ed:03:16:bf:da:4b:ba:eb:5c:23:15:
         55:5c:ed:1e:33:c8:1d:52:b3:3b:2d:37:85:0a:f1:e9:c2:40:
         cf:8f:03:29:3e:76:36:4e:c8:7e:57:2f:af:ff:df:f0:62:31:
         c5:24:4f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:30 2026 by rpki-client