Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
File:                     2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json)
Hash identifier:          XQRhU38F/xTr89OK23fTSEhEDmlIVRUQarSMvFP/Uxk=
Subject key identifier:   BF:E5:FD:92:88:3F:04:54:8C:98:7E:DB:53:1A:74:72:DB:E2:1A:1B
Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E
Certificate issuer:       /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
Manifest number:          97
Signing time:             Sun 01 Mar 2026 08:40:29 +0000
Manifest this update:     Sun 01 Mar 2026 08:40:28 +0000
Manifest next update:     Sun 08 Mar 2026 08:40:28 +0000
Files and hashes:         1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: TlChQ/ALXiYKrE6wCH3Bn2Df91Td6Yho/HOoWBvPAJ4=)
                          2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: t+j78JKyyGcK9bTbXkrgFsRqm83ni7JvJaxQ5E6oLdk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl
                          rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E
        Validity
            Not Before: Mar  1 08:40:28 2026 GMT
            Not After : Mar  8 08:40:28 2026 GMT
        Subject: CN=69a3fb7d-6342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:bd:94:7a:b2:40:b9:55:31:d4:f2:ac:25:
                    e5:2f:69:60:66:8c:c8:52:05:5f:af:1e:7a:6c:64:
                    56:fd:52:43:5f:a3:69:69:ed:89:6c:72:40:40:58:
                    ca:bf:5c:f1:cd:1b:ce:90:d9:06:6b:6e:b6:f2:1e:
                    1f:bf:b4:5b:bd:b4:6a:db:95:6b:f2:43:15:5a:e9:
                    a9:47:d7:e3:ff:de:d7:e4:17:d8:5b:3b:92:0b:4d:
                    29:92:22:b2:08:73:1e:e2:10:78:c5:e6:99:b9:85:
                    ba:87:9b:92:a7:b9:4b:27:c5:10:58:d9:87:a9:b1:
                    14:ac:a0:20:95:63:5b:fd:c1:0f:39:91:b1:eb:fd:
                    64:02:88:d9:7b:05:10:2c:55:af:99:46:81:a6:c4:
                    1c:3d:92:7a:38:0f:1b:df:e3:a4:55:95:c4:76:0e:
                    78:c4:04:82:27:12:1d:cb:33:87:f5:db:04:3f:d6:
                    2b:bc:c1:42:f6:9d:16:69:43:3d:3a:7a:1d:2a:11:
                    3c:b2:4e:9c:ba:0a:fc:87:13:0c:7b:25:7c:e6:0d:
                    3a:3b:50:6d:ea:e2:7e:17:9a:4a:83:cb:e5:47:19:
                    51:66:c9:fa:15:fc:de:4d:db:46:27:d6:99:60:95:
                    fa:45:7f:3c:c5:f2:94:52:f8:60:f1:3e:b8:40:cd:
                    a1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E5:FD:92:88:3F:04:54:8C:98:7E:DB:53:1A:74:72:DB:E2:1A:1B
            X509v3 Authority Key Identifier:
                keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f2:b3:ce:7f:39:0f:1d:21:d8:37:b7:27:39:ca:99:d2:e5:
         05:59:5e:fc:26:a0:b6:5d:0c:8e:6a:74:da:bb:f9:65:37:ca:
         ca:84:6c:06:19:0c:2e:31:76:71:29:77:93:d0:6e:c6:3a:d1:
         e1:58:ff:bb:a9:9a:7a:a1:c3:c6:13:93:e9:bd:97:b8:84:ec:
         d5:bc:34:66:97:f4:72:45:f8:94:0a:bb:0b:eb:db:be:e0:a7:
         43:3b:bb:6d:d5:ca:59:d2:9d:f1:15:7f:b7:a3:ba:f0:49:70:
         5d:be:06:c2:61:ec:04:e1:2f:6b:e3:06:0c:ed:22:52:18:53:
         28:80:b9:f8:d5:7e:b9:4f:ff:d4:ec:96:f8:90:45:2d:b5:0a:
         c0:8b:d9:31:94:54:87:70:d5:c9:b8:0b:3b:d8:d4:64:67:72:
         48:86:7b:14:b1:7d:ed:23:1b:17:4d:a5:f8:dd:a6:0e:13:73:
         60:27:8e:cd:b3:2c:06:3c:42:a9:23:10:ec:ed:a9:66:08:f9:
         91:ef:f5:06:dd:59:83:76:c9:13:92:39:ea:f6:45:21:a1:57:
         aa:67:ca:44:ed:99:21:86:0e:d9:f1:54:99:63:c6:6d:86:3b:
         90:4c:c8:09:12:8d:93:5c:93:a3:ce:4d:02:32:20:b1:df:df:
         00:0d:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:22:19 2026 by rpki-client