Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
File:                     p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft (raw, json)
Hash identifier:          /VBsiOvi7Av/Lr5xikL3An2hbOidu/qNfRn4KR2UNGM=
Subject key identifier:   EA:A7:BF:E0:CD:3C:71:02:C6:B9:83:99:CD:29:1B:1E:C8:6A:71:C1
Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65
Certificate issuer:       /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
Certificate serial:       02B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
Manifest number:          02A8
Signing time:             Sun 01 Mar 2026 02:22:42 +0000
Manifest this update:     Sun 01 Mar 2026 02:22:41 +0000
Manifest next update:     Sun 08 Mar 2026 02:22:41 +0000
Files and hashes:         1: p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl (hash: EEBPKr+XxGsmhlppAIki7aqW5oL6zXakWCSlldJluY0=)
                          2: C11EB2BACB5911F0BEAC2433C4F9AE02.roa (hash: NlH/sj/YUu/p/8KIBHJXkag7VgICTRuX3xC9F1/t6lo=)
                          3: 2F902D58953E11EFA996495BC4F9AE02.roa (hash: 6CtQHuguxSUnTwF1xZmxqOd9O17RpALi4oubVA2Taoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl
                          rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 696 (0x2b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127142, serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
        Validity
            Not Before: Mar  1 02:22:41 2026 GMT
            Not After : Mar  8 02:22:41 2026 GMT
        Subject: CN=69a3a2f2-a094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:7c:df:f0:07:4f:60:ef:55:43:48:9d:1e:
                    9c:31:b8:d6:cb:ff:fd:95:e4:1a:f5:23:7d:63:bd:
                    1d:c7:16:87:61:48:d1:a5:85:02:d5:80:5d:c1:66:
                    c3:98:ec:4e:49:ee:6a:f3:01:4a:65:83:8c:ee:96:
                    e3:63:8a:e1:fd:02:e1:4d:eb:f0:33:d8:d9:86:ac:
                    5b:44:2e:8b:49:a2:24:90:73:0e:0d:bc:ab:d8:8e:
                    4e:25:3b:35:e8:d6:65:22:1a:59:98:5b:cb:f9:0a:
                    27:07:71:75:b7:fc:9e:a6:6a:1e:ea:41:03:38:37:
                    2b:70:be:8c:37:7e:b0:89:be:a7:66:40:ea:86:02:
                    75:c7:2d:83:58:a1:ba:06:9c:08:52:85:ce:83:36:
                    d3:27:0e:fe:ff:72:e0:74:68:7f:0a:17:cf:aa:89:
                    67:09:84:5c:2e:f9:0f:88:e4:2c:1c:1d:40:9b:e0:
                    d0:72:78:38:d6:dd:d6:56:b6:a2:ba:3d:6f:e9:6e:
                    4f:29:ab:d1:4b:13:c5:2a:4d:82:c4:2e:96:21:2c:
                    7a:ca:f7:70:2d:a2:0f:4e:93:0d:6f:26:d5:4a:13:
                    e8:3d:46:da:e2:34:a5:8b:a8:71:2e:8a:48:7d:4b:
                    bf:aa:4b:ef:11:e2:d0:40:b2:d1:52:df:e3:de:8e:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A7:BF:E0:CD:3C:71:02:C6:B9:83:99:CD:29:1B:1E:C8:6A:71:C1
            X509v3 Authority Key Identifier:
                keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:91:e6:18:1c:45:dd:0e:50:79:41:70:2c:e6:e5:4c:6d:8a:
         bb:3a:39:7e:15:26:f1:00:ce:5d:fc:4e:f1:97:2e:8b:f6:13:
         24:7a:da:0e:d0:de:e0:a5:5c:0f:36:e1:ca:6f:89:ba:dd:c9:
         3a:0b:94:2a:91:8c:50:2c:4e:28:8d:97:83:8c:20:5d:d2:12:
         2a:07:a5:4e:39:0d:f8:82:82:09:3d:e3:8a:cf:f4:3b:d3:ff:
         05:70:d8:6f:bb:98:23:df:d2:f9:71:c2:20:0c:7b:d2:dd:54:
         b7:08:fb:67:02:d7:e6:0f:ae:6b:bb:4f:99:b5:4d:12:1f:13:
         a1:ea:8e:5e:f4:ce:c9:6a:8f:e0:61:e6:40:34:58:6a:e1:31:
         b1:37:20:27:61:5c:9e:b9:5b:b1:df:ce:6a:13:15:59:d5:94:
         ec:49:63:7f:14:24:61:0c:da:19:61:ce:87:a8:7d:d0:25:b0:
         07:14:12:9e:00:4a:45:15:21:be:41:eb:a6:ca:8b:85:7a:e8:
         99:d1:20:68:af:d7:36:42:51:62:69:b2:96:82:d7:21:da:14:
         87:7c:b3:03:46:9b:7d:ba:b0:5e:e2:51:15:ad:14:e9:2d:39:
         23:e4:ad:b4:b7:c0:21:33:8a:24:93:e3:a7:ac:e9:8d:f9:02:
         00:f0:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:54 2026 by rpki-client