Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
File:                     0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json)
Hash identifier:          QOdpt4gpPs6b9zTNpwhmb1YUlfUTmhg5teUGf8FQsVM=
Subject key identifier:   F9:1E:90:9E:7F:D1:C7:91:02:71:6D:3C:52:91:19:0B:6F:1B:47:78
Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
Certificate issuer:       /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
Certificate serial:       0B66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
Manifest number:          0B5A
Signing time:             Sat 28 Feb 2026 19:26:13 +0000
Manifest this update:     Sat 28 Feb 2026 19:26:13 +0000
Manifest next update:     Sat 07 Mar 2026 19:26:13 +0000
Files and hashes:         1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: ruYPI0MbVxQDomZpOHxtehHBZpU5OJ+b1KiYnsu5D30=)
                          2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: rFiMZXa2OxD0Ej0KwFsbxfHbUbN1ZogDT7O8NAGWwno=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl
                          rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2918 (0xb66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
        Validity
            Not Before: Feb 28 19:26:13 2026 GMT
            Not After : Mar  7 19:26:13 2026 GMT
        Subject: CN=69a34155-f353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:6a:a5:eb:87:24:87:ed:a2:1b:c4:a9:e0:
                    4f:d2:6a:59:ac:e3:10:4a:91:a7:75:ec:15:4b:25:
                    1d:80:9a:f0:1d:88:87:45:5b:d9:86:0b:b5:55:d7:
                    c8:73:5b:47:2a:4d:a3:69:71:25:cb:d5:11:70:a6:
                    16:d1:98:9b:c3:ff:e2:9d:fb:9c:81:3d:66:11:a3:
                    97:8e:3f:e4:54:57:1f:e1:6f:48:6e:54:ef:ee:dd:
                    74:31:73:f8:fa:c0:0c:56:74:52:f6:91:5e:8b:df:
                    13:27:35:41:60:e3:79:d2:37:85:29:83:e1:9e:50:
                    c1:fd:c9:b8:84:2b:6a:5a:f7:fb:d2:e5:e3:b0:50:
                    8e:c0:48:4d:35:4b:b8:ba:05:59:20:46:70:c9:6a:
                    75:cf:be:1a:5f:28:3c:77:c5:d9:37:f9:a8:f2:5c:
                    79:2a:84:93:c3:14:e9:aa:f4:3d:55:1d:fa:90:87:
                    a5:0f:83:be:2b:72:e0:ac:5c:c3:fb:26:b2:51:b6:
                    02:6c:0a:20:c0:1a:65:e4:bf:4f:bc:5f:02:5e:09:
                    e5:b6:c1:d6:7b:48:a1:13:b5:d1:b5:f6:f0:2d:1a:
                    55:18:9a:72:03:9b:9a:20:93:0f:6c:94:9a:2f:f3:
                    2b:8a:ba:f8:33:d9:13:d4:f3:41:db:7e:c9:bd:78:
                    99:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1E:90:9E:7F:D1:C7:91:02:71:6D:3C:52:91:19:0B:6F:1B:47:78
            X509v3 Authority Key Identifier:
                keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:54:7d:cd:17:b2:75:a5:3c:b5:f4:28:9d:02:85:31:15:59:
         11:a0:2c:ba:8c:b6:0d:3f:3a:eb:29:d5:93:04:23:fb:1f:b1:
         c0:cf:a5:d0:f0:f7:0b:1f:1a:d2:55:cf:19:f3:f0:22:7e:61:
         a1:b9:87:fb:bd:98:d0:73:2c:3a:07:31:6a:21:df:e2:92:99:
         31:37:41:c4:da:3a:1e:50:19:03:08:00:01:b9:ea:eb:76:14:
         6c:ec:e1:ef:42:14:fa:1b:15:a8:19:55:99:67:01:ce:10:47:
         4b:82:1b:a4:46:c3:1e:0f:32:44:c0:02:39:a0:74:94:7c:55:
         21:c5:34:97:b8:f6:e7:17:c2:c0:26:9e:2f:bb:06:3c:9f:60:
         4e:90:2f:61:f4:ee:6e:84:da:1d:e2:ed:a7:6e:15:54:b5:7a:
         cd:c1:26:7a:72:8d:c8:19:0a:78:ad:9c:6d:d2:d9:11:6e:05:
         2f:90:f5:dc:42:e8:ee:eb:5d:e5:1f:ba:9b:e2:0b:84:42:0c:
         4b:4d:62:3a:8f:63:5c:2a:ea:19:89:5b:33:09:71:6f:70:e6:
         3f:7e:69:d6:28:84:25:b3:1a:f0:56:82:09:77:9a:d4:df:9c:
         81:c9:ed:f6:0b:71:93:4e:bd:b4:db:97:d8:6a:f5:5e:5e:11:
         b1:d5:20:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:31 2026 by rpki-client