Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
File:                     2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft (raw, json)
Hash identifier:          bzLdbpswX7rS63ZGdvoceF0jkFq4jac6noyH4gTnmOs=
Subject key identifier:   02:83:56:0C:72:78:25:AB:B8:4E:F1:41:AB:C2:3C:1B:E7:76:EC:5A
Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
Certificate issuer:       /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Certificate serial:       0269
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
Manifest number:          0264
Signing time:             Sun 01 Mar 2026 01:19:10 +0000
Manifest this update:     Sun 01 Mar 2026 01:19:09 +0000
Manifest next update:     Sun 08 Mar 2026 01:19:09 +0000
Files and hashes:         1: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl (hash: YBnLEWVYojCWFdgzU/N5bKmWziwPH3FKO+OKgkJIchw=)
                          2: F060FF0E720D11EDA84BE02EC4F9AE02.roa (hash: MTvQaAV2j4a15rRSTpoB41scqYTwrnry9bJaizx2K5M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl
                          rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
        Validity
            Not Before: Mar  1 01:19:09 2026 GMT
            Not After : Mar  8 01:19:09 2026 GMT
        Subject: CN=69a3940d-1203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0b:2b:8d:b9:c6:4a:76:d4:ad:9c:a8:2b:b0:
                    9b:3b:12:b5:d7:06:08:2c:df:76:a0:b0:f5:10:4e:
                    06:9b:14:25:ac:39:e8:15:68:fd:1a:13:f6:ae:3c:
                    45:ee:52:ce:45:a8:70:b7:2f:46:f4:50:3e:75:4e:
                    de:81:f4:5b:da:fc:0f:f1:85:f1:4d:72:8f:17:0c:
                    fb:2c:81:cc:58:8c:0f:41:a6:4f:28:61:ae:e7:aa:
                    ca:7f:65:a7:11:04:ce:d1:a5:e5:80:6b:46:c2:3c:
                    41:70:5b:ed:ba:19:f1:fd:6b:23:28:2f:c7:d2:d4:
                    2a:2a:cd:81:6e:72:30:3e:55:51:d3:62:d2:f7:b2:
                    f6:85:74:2e:84:15:80:66:02:5b:be:c2:13:51:7e:
                    fa:75:f7:d8:5d:c8:6a:d1:75:da:2b:39:87:15:09:
                    34:96:6b:ae:21:c2:ba:9d:46:95:b2:f5:80:f0:f6:
                    42:d7:d4:8d:22:fe:8a:17:2c:d2:a9:b4:ff:4d:50:
                    dc:4a:07:0f:c9:4e:88:bb:a5:1d:2e:dc:a2:b9:41:
                    3f:9e:5e:d2:20:4b:53:c6:44:d3:10:e0:3e:e9:a0:
                    d4:81:97:e1:5f:27:f3:79:0f:33:8a:2a:1e:f1:d9:
                    ea:e0:03:02:57:3a:02:be:2d:4f:f7:9c:b8:3c:ba:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:83:56:0C:72:78:25:AB:B8:4E:F1:41:AB:C2:3C:1B:E7:76:EC:5A
            X509v3 Authority Key Identifier:
                keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:0f:cf:b2:86:09:9e:52:03:1a:02:b0:17:89:45:1e:99:5a:
         cc:f6:16:7e:82:da:9d:a0:56:14:7b:e9:db:07:e5:84:c4:a5:
         78:9b:fc:33:7d:8f:62:e1:65:2d:15:c9:6f:a5:97:96:54:42:
         42:e7:5e:99:10:09:c5:fe:b6:8d:9a:ab:83:c1:8e:e2:70:ca:
         fa:15:ab:c2:0f:35:69:7b:85:4e:3d:db:bc:65:dd:45:63:89:
         a1:c9:67:e8:68:10:67:0b:7d:cd:d2:4b:d4:8a:92:9d:09:a4:
         e4:b3:89:e9:22:08:06:40:18:fe:dc:2d:76:46:03:f0:f6:05:
         87:d9:68:40:05:d0:4c:de:f1:5f:c2:76:e4:9b:c6:f9:52:0e:
         57:49:24:8f:67:f8:4e:51:1c:a3:79:3d:ee:31:55:73:99:df:
         15:5e:9d:12:b9:b7:2a:00:d0:5c:bb:83:8e:db:a2:aa:47:4a:
         62:6e:96:4f:cb:dd:be:74:01:79:8e:12:75:84:bd:1f:74:33:
         91:c2:f3:35:d2:86:0a:7e:68:6f:07:cf:b1:83:7c:1c:62:ef:
         d0:02:bf:4d:be:91:a6:a1:48:59:54:13:54:0f:d8:e6:06:02:
         2a:49:2f:87:b6:57:33:15:50:eb:bb:07:42:40:3e:b8:27:7c:
         cb:f0:aa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:58:25 2026 by rpki-client