Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
File:                     p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft (raw, json)
Hash identifier:          Qiyj24AFUzEBSc84lxbBejnECCsq/oIHjoD6K4MONoM=
Subject key identifier:   19:A8:27:11:3E:03:59:4D:8F:3D:30:B4:D4:1C:BC:94:87:9F:7E:98
Authority key identifier: A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39
Certificate issuer:       /CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
Certificate serial:       0387
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
Manifest number:          0372
Signing time:             Sun 01 Mar 2026 01:46:58 +0000
Manifest this update:     Sun 01 Mar 2026 01:46:58 +0000
Manifest next update:     Sun 08 Mar 2026 01:46:58 +0000
Files and hashes:         1: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl (hash: 023Eo0okBUeojcI/f9ceHp3ZERoCeux6ikAOirpxaHc=)
                          2: 3824E928764711F0980D9877C4F9AE02.roa (hash: Vlt8E5RCfri6tIVkewPLLzIXYySBs5xXKD+pS8VKrVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl
                          rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903 (0x387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE25, serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
        Validity
            Not Before: Mar  1 01:46:58 2026 GMT
            Not After : Mar  8 01:46:58 2026 GMT
        Subject: CN=69a39a92-c36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:88:cb:23:b3:63:2b:79:62:b0:bc:23:37:5d:
                    dd:de:60:98:17:52:db:fd:66:85:ec:17:8e:9f:a6:
                    70:d5:9d:e0:e4:b3:d0:75:d0:00:1e:8c:4a:93:0e:
                    3d:3c:83:26:4d:e2:32:41:10:64:ce:07:e9:6d:59:
                    50:e8:70:8f:01:12:c2:02:04:55:54:63:67:21:61:
                    bb:91:5f:0f:ea:de:ce:8f:b6:c1:0d:4d:42:c5:60:
                    7c:ce:af:16:54:5e:48:4b:22:b1:19:41:a4:83:42:
                    11:46:f3:7c:9a:47:e3:45:37:04:cf:ce:3f:38:a1:
                    34:62:03:57:f1:b5:da:4c:1d:bf:21:6c:e6:92:61:
                    ea:22:01:87:de:50:e5:88:22:16:11:d0:75:b7:27:
                    9f:f9:a4:d8:ef:ec:72:b6:07:43:48:82:15:4c:26:
                    16:91:39:23:13:59:79:db:78:dc:13:32:69:f6:6b:
                    f7:21:25:2d:9c:4c:5b:2a:e5:c4:76:a4:88:70:0c:
                    70:d7:f4:a3:b8:3f:c0:78:ae:27:0b:68:47:d6:28:
                    30:38:ea:ae:45:a6:fa:d7:60:a3:62:1f:a3:69:8b:
                    e0:7a:cc:c7:95:ae:85:9b:3f:e2:d6:7e:24:6f:d0:
                    37:a3:bb:78:c9:c2:3a:75:07:b3:4f:98:67:5b:67:
                    7c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A8:27:11:3E:03:59:4D:8F:3D:30:B4:D4:1C:BC:94:87:9F:7E:98
            X509v3 Authority Key Identifier:
                keyid:A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5e:be:10:6e:5b:b6:d2:0a:9d:7d:a4:c5:69:b9:e7:06:e2:
         80:93:25:69:76:ff:46:4d:da:01:4b:c9:a3:2c:f5:be:01:d1:
         77:e1:cd:c5:7c:5a:bc:60:41:10:4c:b4:9b:cb:84:6e:b7:72:
         2a:19:3e:79:4f:cf:07:60:22:ba:dd:86:e1:27:38:48:10:c1:
         2a:3d:2b:90:63:9f:ae:d5:c6:c2:eb:0b:ae:6a:65:6a:d5:c5:
         34:0d:0f:ce:c0:8b:31:da:38:bd:6f:be:13:14:09:0f:ff:95:
         7d:cc:ad:ed:ae:d6:41:03:7e:2d:48:17:b7:9a:26:a0:a7:68:
         e2:0c:e2:c2:ad:13:58:e3:fc:02:fc:ae:8a:b6:6d:b8:16:17:
         cf:b8:f6:5b:34:94:74:21:4c:5f:be:bd:d7:80:a1:87:72:29:
         a8:dd:46:b8:c4:04:9f:eb:d8:a0:06:cb:f6:7c:93:d0:98:08:
         e2:b0:95:cb:2c:b6:2f:ac:c9:86:36:58:ce:09:06:5b:0a:9b:
         b9:c2:5c:8f:81:3f:22:1d:26:88:4a:b3:d7:e1:6c:d4:d4:0e:
         d1:ff:fc:91:86:e4:b0:93:6c:1e:09:f2:ab:ba:bc:3c:51:d2:
         02:c9:89:c4:bc:6d:fa:b0:48:e6:2c:4c:73:de:fc:f9:a0:97:
         bd:2c:92:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJFMjUxMTAvBgNVBAUTKEE3NjBBREUwQzlEMDVFRTY3OUVDMzA0MTIyQkMzMzUw
QzhEMkE0MzkwHhcNMjYwMzAxMDE0NjU4WhcNMjYwMzA4MDE0NjU4WjAYMRYwFAYD
VQQDDA02OWEzOWE5Mi1jMzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoYjLI7NjK3lisLwjN13d3mCYF1Lb/WaF7BeOn6Zw1Z3g5LPQddAAHoxKkw49
PIMmTeIyQRBkzgfpbVlQ6HCPARLCAgRVVGNnIWG7kV8P6t7Oj7bBDU1CxWB8zq8W
VF5ISyKxGUGkg0IRRvN8mkfjRTcEz84/OKE0YgNX8bXaTB2/IWzmkmHqIgGH3lDl
iCIWEdB1tyef+aTY7+xytgdDSIIVTCYWkTkjE1l523jcEzJp9mv3ISUtnExbKuXE
dqSIcAxw1/SjuD/AeK4nC2hH1igwOOquRab612CjYh+jaYvgeszHla6Fmz/i1n4k
b9A3o7t4ycI6dQezT5hnW2d8TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBmoJxE+
A1lNjz0wtNQcvJSHn36YMB8GA1UdIwQYMBaAFKdgreDJ0F7meewwQSK8M1DI0qQ5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkUyNS9EOTA1MjZFNEVF
MTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1WjU3REJCSXJ3elVNalNw
RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3AyQ3Q0TW5RWHVaNTdEQkJJcnd6VU1qU3BEay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkUyNS9EOTA1MjZFNEVFMTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1
WjU3REJCSXJ3elVNalNwRGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAml6+EG5bttIKnX2kxWm55wbigJMlaXb/Rk3aAUvJoyz1vgHRd+HNxXxavGBB
EEy0m8uEbrdyKhk+eU/PB2Aiut2G4Sc4SBDBKj0rkGOfrtXGwusLrmplatXFNA0P
zsCLMdo4vW++ExQJD/+Vfcyt7a7WQQN+LUgXt5omoKdo4gziwq0TWOP8AvyuirZt
uBYXz7j2WzSUdCFMX76914Chh3IpqN1GuMQEn+vYoAbL9nyT0JgI4rCVyyy2L6zJ
hjZYzgkGWwqbucJcj4E/Ih0miEqz1+Fs1NQO0f/8kYbksJNsHgnyq7q8PFHSAsmJ
xLxt+rBI5ixMc978+aCXvSySyQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:50 2026 by rpki-client