Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft
File:                     2zfNKCxsfbw6kLEDt6I53NFY_2A.mft (raw, json)
Hash identifier:          gLT4ixIrvVWPZoC1RBXciS0E/4JGP1m7jW0gb2KH+Ks=
Subject key identifier:   E4:A4:93:D8:2A:F1:EF:9B:D2:F0:C1:31:9B:FD:6F:FA:CF:99:77:C8
Authority key identifier: DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60
Certificate issuer:       /CN=A913E652/serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60
Certificate serial:       095D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft
Manifest number:          0956
Signing time:             Sat 28 Feb 2026 20:25:38 +0000
Manifest this update:     Sat 28 Feb 2026 20:25:38 +0000
Manifest next update:     Sat 07 Mar 2026 20:25:38 +0000
Files and hashes:         1: 2zfNKCxsfbw6kLEDt6I53NFY_2A.crl (hash: XRD74OP0DO5ia/JniieqMeGQ+wSstjIT+7LlvuH2tvA=)
                          2: 6154A3B0B2B611EAA5884016C4F9AE02.roa (hash: m3vZJbIZBtxTaQynxqIVLeVn+IvoTb+bYR9Z6G9kdLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl
                          rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2397 (0x95d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E652, serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60
        Validity
            Not Before: Feb 28 20:25:38 2026 GMT
            Not After : Mar  7 20:25:38 2026 GMT
        Subject: CN=69a34f42-56e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0a:16:3a:15:0b:4a:eb:90:df:ff:52:72:c7:
                    6d:af:08:26:a5:60:fd:8e:59:27:ef:35:e0:d2:9a:
                    f7:71:6c:20:eb:ff:73:64:7a:79:86:84:af:39:f2:
                    77:e7:fb:71:40:7f:fd:cf:f8:5b:ac:a8:fa:85:0d:
                    20:4a:39:69:80:ca:96:d4:2f:d0:fc:31:08:2e:85:
                    1a:cb:e5:ae:8f:5f:a8:65:c2:5f:54:6a:f4:2d:c1:
                    06:ea:e1:8b:64:c0:80:00:34:e5:2f:f1:dc:29:d2:
                    d8:0e:77:77:27:f0:d0:ec:09:45:76:de:1b:b9:3f:
                    f3:8f:af:93:e3:14:d7:f0:39:80:66:0b:0a:ce:15:
                    9c:39:d1:ae:b4:fd:35:f1:d3:84:d4:1e:0c:0f:d3:
                    8b:1b:e2:3b:3c:d3:50:25:ea:19:3d:00:31:9f:10:
                    56:a2:bf:9e:21:50:88:c2:2d:bc:51:b1:8c:de:df:
                    e8:49:cc:60:5b:8d:ae:82:33:60:f0:97:af:4b:2b:
                    4c:0b:69:b4:60:6d:4e:78:cf:2a:87:38:22:0c:52:
                    76:4a:89:1d:c5:17:d8:70:38:d6:76:75:7e:88:39:
                    fa:62:ad:6f:48:07:2e:51:4f:a6:93:d9:2a:f1:b7:
                    cc:9d:dd:4b:7e:78:43:39:87:99:cb:50:05:ec:1e:
                    04:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A4:93:D8:2A:F1:EF:9B:D2:F0:C1:31:9B:FD:6F:FA:CF:99:77:C8
            X509v3 Authority Key Identifier:
                keyid:DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:0c:b5:af:8d:f0:3f:19:93:95:c8:2c:f2:7c:41:05:37:f6:
         50:f6:8b:fe:84:b6:27:ab:b8:9b:4c:fc:b2:00:d1:d3:4d:a6:
         e2:6b:93:43:ed:c8:b2:e3:22:c9:7c:3e:54:ef:36:05:c2:1a:
         85:6f:5a:e4:6b:b8:b1:55:1b:e8:3b:3b:59:ae:87:50:ee:0c:
         96:f8:d8:07:2c:a0:d2:85:9a:39:d8:c7:d4:9b:12:ae:af:6b:
         d3:c2:42:b4:66:49:5f:2f:63:9b:8a:7a:50:bf:0b:12:e1:12:
         79:ff:66:66:3c:d7:bf:21:f4:31:58:fe:72:d6:2f:ed:c2:f0:
         22:fd:f7:53:f7:a1:61:a7:d3:06:0e:80:ac:45:57:41:3b:ce:
         9d:a0:9c:34:b6:60:77:53:7b:28:1d:ed:50:f3:40:3f:32:77:
         fe:eb:28:32:b6:c9:8d:6d:63:6c:7b:8e:8d:36:fb:ef:ec:4f:
         05:1d:12:36:3d:09:a1:d8:d9:c8:f2:15:93:b8:04:d1:b6:07:
         6a:a1:05:4f:50:43:22:3b:48:2c:5b:e1:fd:6c:5d:22:8d:56:
         91:ad:8c:23:15:89:ae:c9:e9:60:57:30:7b:ea:12:97:54:55:
         17:78:18:f3:13:a5:e6:ef:0f:fc:19:0e:3e:29:5c:4d:67:6a:
         3e:96:05:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:26 2026 by rpki-client