Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
File:                     2gQijT7rRR_A8iM2aXFwV_irNmk.mft (raw, json)
Hash identifier:          cd0kf/HI4j35B4CUOdU0Ltk/P8dXe3kT9V6zXbKBgJ8=
Subject key identifier:   72:0C:AD:51:99:F1:1C:AE:F2:6B:5D:50:D9:FF:FB:01:54:A5:D2:5C
Authority key identifier: DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69
Certificate issuer:       /CN=A914B165/serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669
Certificate serial:       090D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
Manifest number:          0905
Signing time:             Sat 28 Feb 2026 20:37:42 +0000
Manifest this update:     Sat 28 Feb 2026 20:37:41 +0000
Manifest next update:     Sat 07 Mar 2026 20:37:41 +0000
Files and hashes:         1: 2gQijT7rRR_A8iM2aXFwV_irNmk.crl (hash: 2z50+bl3r90ds2hQW11cpkWmzTDF/GE/qhqzjaDwCn0=)
                          2: 26AECD92C2B211EABBD0ED4AC4F9AE02.roa (hash: C/eVnfyL6ySkKhbG0QllU10wv4xhGd4o4YA02lTj0B4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl
                          rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2317 (0x90d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B165, serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669
        Validity
            Not Before: Feb 28 20:37:41 2026 GMT
            Not After : Mar  7 20:37:41 2026 GMT
        Subject: CN=69a35216-14fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:03:60:e2:4b:02:62:6e:38:43:d2:f7:64:
                    c6:9e:d2:6c:b4:5f:d1:ff:3d:31:d8:0b:bf:50:9a:
                    d1:6b:47:d5:ca:f3:7a:15:76:24:a2:fd:14:f9:2e:
                    b7:dc:0a:1a:2a:d3:b7:18:e7:bd:ca:53:70:1a:08:
                    67:c5:f0:6b:1d:ab:fd:da:c7:0a:96:3e:63:a1:26:
                    5f:a9:d7:ea:4e:78:8d:61:30:ef:b0:ad:15:7b:70:
                    03:a6:54:07:1f:2b:e9:e6:49:08:a6:17:41:1d:e1:
                    5c:bf:b5:a3:1c:46:0b:63:59:fb:3a:da:c2:56:c6:
                    81:1e:b8:3f:9f:e8:91:6b:c2:94:8d:98:a7:63:e4:
                    ca:48:ba:03:84:1e:2b:58:87:e3:d6:ca:9e:ae:c7:
                    31:4b:d8:d2:8b:e7:e7:e6:2a:73:df:45:51:aa:df:
                    8a:9f:e8:9a:dd:55:9d:eb:2f:a4:f7:54:15:72:4d:
                    60:6d:b8:23:0a:45:a7:87:f9:09:5c:b5:69:5d:05:
                    50:3c:2d:3d:16:3c:2b:d5:14:01:6f:a0:5b:a2:a2:
                    cc:e9:be:2d:bd:95:f1:b8:2f:bb:84:6b:19:7e:96:
                    36:30:a9:db:5c:52:79:7c:d2:f8:f6:f1:35:44:16:
                    66:40:4d:10:c9:1c:4f:b7:9a:25:2b:f7:b0:bc:a4:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0C:AD:51:99:F1:1C:AE:F2:6B:5D:50:D9:FF:FB:01:54:A5:D2:5C
            X509v3 Authority Key Identifier:
                keyid:DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:99:a2:f9:06:41:7a:96:42:68:2d:6c:19:56:c0:75:f7:cc:
         d4:d5:26:50:46:7e:38:2f:fd:13:cd:25:f7:f7:29:8e:80:4c:
         e0:5e:4e:66:4d:0b:cf:12:73:c4:85:8b:57:c0:a1:aa:27:52:
         04:88:23:cb:fa:b9:fe:cb:df:90:1b:b3:37:79:b8:47:a5:28:
         d9:25:01:ff:1a:c2:c3:3f:a6:19:c9:23:7e:59:3c:60:7e:57:
         b7:c9:14:73:1f:48:16:3e:d8:7b:93:ff:73:4d:b4:50:ae:47:
         1a:80:08:cd:ce:55:d2:ff:88:b7:4b:08:2d:05:44:42:8d:58:
         a5:40:a5:7a:c0:7c:d0:13:b8:27:49:0e:ee:69:f2:a3:1f:6a:
         7c:32:9c:4b:6d:b3:2c:24:c4:00:6e:2a:5d:1c:5c:8d:c4:70:
         82:58:5b:77:7d:63:b2:9c:9b:d4:19:54:31:b2:3f:30:77:c0:
         4b:9e:d2:19:1d:2b:a7:7d:bc:b8:2f:68:ce:b0:13:8a:7b:d7:
         24:f2:58:f0:12:eb:1d:f8:e0:1e:ea:52:59:5b:30:2d:56:a9:
         54:22:92:19:54:c0:53:75:26:42:0d:7a:ac:67:64:be:ed:43:
         fa:37:95:02:dd:97:19:89:d9:15:0d:80:72:ac:86:a1:9f:dc:
         16:18:7b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:01:58 2026 by rpki-client