Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft
File:                     2-ETC8fG27LbfLvxTgH2GG_9vRA.mft (raw, json)
Hash identifier:          4hO2NHV43XfS7IG9A+G+CT3H2riLYYtEzcNdBGAULJ4=
Subject key identifier:   E0:70:18:AA:7D:71:61:DA:8A:82:76:6F:FB:A1:C3:A7:35:A1:49:04
Authority key identifier: DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10
Certificate issuer:       /CN=A9115480/serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10
Certificate serial:       02FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft
Manifest number:          02FB
Signing time:             Sun 01 Mar 2026 02:06:10 +0000
Manifest this update:     Sun 01 Mar 2026 02:06:10 +0000
Manifest next update:     Sun 08 Mar 2026 02:06:10 +0000
Files and hashes:         1: 2-ETC8fG27LbfLvxTgH2GG_9vRA.crl (hash: b1uq1z2UtZVGii7nA2CxkLUlRrAeQZ/93elVZAEQAdo=)
                          2: D1D6719A10DD11EDBC7EA35FC4F9AE02.roa (hash: l25pt6xsGqTRyB7Z9iKfisGtCqvwzSPP/vuUSztNwvI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl
                          rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767 (0x2ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115480, serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10
        Validity
            Not Before: Mar  1 02:06:10 2026 GMT
            Not After : Mar  8 02:06:10 2026 GMT
        Subject: CN=69a39f12-041d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:ff:6a:66:17:17:3e:24:08:df:66:95:88:
                    9a:58:9a:9e:fd:a6:c2:cf:0e:d3:84:e5:0c:64:6b:
                    7a:26:b1:b9:be:02:0f:d0:07:b9:01:8a:ce:81:96:
                    93:71:e4:61:c4:2a:fe:82:2d:c4:2a:d9:91:3f:4a:
                    a3:82:24:09:7b:50:6f:cc:44:7d:4a:8b:e1:ab:a4:
                    18:53:7c:b9:92:4a:9b:37:88:c9:41:fa:49:31:47:
                    b3:2b:6b:a2:52:cb:fb:1a:72:31:86:31:6c:7a:72:
                    d0:95:f8:f3:c5:a1:01:c1:b4:b5:20:f9:76:19:57:
                    31:7c:27:52:12:93:16:b4:52:b3:5b:39:19:85:3a:
                    35:b7:85:e2:e5:88:0a:b3:9a:50:16:d7:93:6b:ac:
                    7a:cc:94:be:b1:0a:92:44:07:04:c2:3f:8c:b4:7f:
                    d5:39:d5:58:e2:41:94:38:8b:90:6e:03:10:3d:5c:
                    66:9e:e0:13:0b:58:94:d7:73:71:09:ca:79:3a:d6:
                    66:ac:cb:98:af:b4:42:c0:16:ed:af:aa:68:36:b1:
                    a0:8c:bb:ea:28:ff:ac:26:a5:3d:5c:f9:68:3f:6e:
                    d2:d7:8f:89:d6:1c:fa:33:a2:88:ec:8c:0d:9a:c0:
                    8d:98:25:a4:15:0e:3e:48:f0:b3:da:c7:68:3e:e5:
                    14:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:70:18:AA:7D:71:61:DA:8A:82:76:6F:FB:A1:C3:A7:35:A1:49:04
            X509v3 Authority Key Identifier:
                keyid:DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:41:12:ca:c0:be:72:28:7d:ff:39:80:00:53:11:6a:c4:94:
         c3:27:d4:ec:36:07:de:39:78:82:4a:9e:6c:40:6f:43:54:2e:
         fb:9a:e1:f6:d6:20:6e:32:bb:ba:03:10:d8:b8:7a:7b:4a:d7:
         88:18:26:4a:6a:9a:83:3b:33:a0:61:df:1f:d9:4b:f1:8b:92:
         25:03:51:4c:05:84:fa:9c:ea:46:f1:00:3d:cf:50:fd:26:45:
         84:d4:12:fc:1d:69:73:ef:33:97:81:63:e3:d2:60:1a:a3:6a:
         1f:3d:58:56:ac:66:e1:c0:22:d0:cd:b2:d9:a5:e4:1b:c5:97:
         68:24:7f:f1:3c:80:cc:39:13:8f:ca:9b:06:77:dd:7e:24:e3:
         7e:b3:2f:a2:36:1c:e8:39:be:67:3f:c2:93:a2:a4:31:ab:5a:
         e1:49:82:c3:af:4c:8b:d5:f6:ea:80:e7:45:ad:b2:62:03:dd:
         37:d9:85:f1:8b:6d:1d:88:56:0f:28:8f:cc:54:a3:1b:99:9f:
         31:6b:2d:3e:db:4e:0f:a9:0d:b8:7d:5d:35:98:25:f4:c1:fb:
         8c:47:a0:f4:d9:09:f9:05:eb:98:16:56:26:f0:6a:b7:b4:9a:
         0e:ab:37:1b:6c:37:0d:bf:a7:57:76:12:90:ed:66:2f:8c:ef:
         a2:5a:bd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:31:14 2026 by rpki-client