Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
File:                     4YL5k2lSxCadZw2ldS3syGgjTxs.mft (raw, json)
Hash identifier:          Tdrc0PZYv0xEGQHoj+J1Q60EwHL1VOdH8Ay8AbWcntA=
Subject key identifier:   82:7A:87:B6:51:80:25:4C:60:8F:9F:31:29:0D:70:33:CA:8A:BD:24
Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
Certificate issuer:       /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
Certificate serial:       2267
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
Manifest number:          223E
Signing time:             Mon 02 Mar 2026 01:08:29 +0000
Manifest this update:     Mon 02 Mar 2026 01:08:27 +0000
Manifest next update:     Mon 09 Mar 2026 01:08:27 +0000
Files and hashes:         1: 4YL5k2lSxCadZw2ldS3syGgjTxs.crl (hash: 2GUIbEiMTh0AscD3hG7M1hGgKpp66E0PMFn9Pzyxy28=)
                          2: B72206B4554B11E791BA5861C4F9AE02.roa (hash: i8ynNvisFun6KLb9XReq+KAa11jwRPXK2t/Z0bHo3gM=)
                          3: A8E9DE704B8511E7BF406610C4F9AE02.roa (hash: IV9u+bL98dY9vhWPzSb2VF1m+KNoLGbMT7wCZc4XtUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl
                          rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8807 (0x2267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126F2B, serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
        Validity
            Not Before: Mar  2 01:08:27 2026 GMT
            Not After : Mar  9 01:08:27 2026 GMT
        Subject: CN=69a4e30c-0d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:35:28:27:50:22:9c:f2:73:20:61:9a:42:
                    30:be:16:fa:59:7d:19:ef:64:1a:7e:48:68:40:3d:
                    ef:f7:17:83:08:84:9b:2c:ea:69:73:2d:ce:53:de:
                    f7:bf:14:de:d6:42:bf:6d:d6:ea:56:47:c6:f8:57:
                    8f:bc:39:2b:a2:0c:82:a6:83:82:5b:3f:8d:ce:be:
                    5f:e7:4a:d7:e3:fa:38:99:8a:61:ed:33:b1:9f:e9:
                    1d:9c:14:a7:70:e0:2d:d2:7d:8c:13:51:c8:37:50:
                    28:85:22:a6:ea:72:c7:08:f5:52:e3:0d:ba:10:2c:
                    05:4b:1a:62:44:93:3a:f9:6e:c2:6b:01:33:a7:b7:
                    e9:a6:2a:5d:cd:e7:a6:a4:aa:81:2a:aa:25:59:95:
                    c4:ab:c5:fe:fb:d0:df:ce:3d:92:3a:c0:d8:1e:38:
                    db:83:01:5a:f0:18:7d:17:88:bb:c5:79:c5:a1:9f:
                    42:6c:77:e2:d3:a3:97:59:26:08:8f:18:51:38:7a:
                    42:f2:93:6f:8a:a4:73:c4:b2:ba:c1:50:4a:fb:c3:
                    59:02:2a:0b:ce:3e:1a:3d:62:46:d0:fe:a4:80:9c:
                    7d:5b:f2:30:9f:7f:4c:37:2e:f9:ae:f0:66:dd:b6:
                    fc:a8:ce:1a:63:b1:57:b3:41:ef:a3:bf:b4:4a:68:
                    ca:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7A:87:B6:51:80:25:4C:60:8F:9F:31:29:0D:70:33:CA:8A:BD:24
            X509v3 Authority Key Identifier:
                keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:61:fd:0d:c7:b3:e3:7a:a8:81:fb:89:00:10:07:1f:ee:49:
         84:2f:65:ed:6a:bb:c4:cc:44:eb:11:1f:71:c6:5a:c1:36:9e:
         f2:55:b6:36:e3:73:1e:e0:8f:51:77:0a:f8:bd:cc:45:a8:0e:
         59:16:86:d2:c1:86:97:d2:4e:c8:12:97:25:e1:de:84:3d:4d:
         a6:3b:02:df:21:15:8f:8d:22:60:15:ee:a6:9e:d0:72:e7:ff:
         60:46:99:b3:03:25:44:0d:56:fa:92:3e:c1:c9:6a:52:0d:3f:
         5a:8b:57:98:6f:6b:c2:ba:93:6b:51:f6:25:00:60:99:57:19:
         ba:76:55:32:0c:ea:34:b6:13:ad:ca:4c:fb:14:69:8d:97:e9:
         38:6d:0d:dd:0f:fe:8d:9e:55:45:94:31:a8:ef:2c:dd:df:52:
         ae:fe:44:a5:22:39:43:f7:76:2b:62:16:35:15:63:45:0e:86:
         c6:08:2d:d1:33:1d:cd:f7:12:ea:8b:c0:87:46:6d:6b:7d:4e:
         aa:f4:6e:27:99:a0:f0:0e:06:82:27:a4:8a:4c:d0:64:24:92:
         0e:bb:ee:91:0c:1a:56:3f:94:d5:d4:31:7a:f9:ff:24:1f:f1:
         14:19:13:96:af:b3:6d:7b:cc:ef:b2:38:5e:bc:51:2f:88:de:
         0f:05:23:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:03 2026 by rpki-client