Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
File:                     2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft (raw, json)
Hash identifier:          J+xQzy3WfGWLpgWzGi737TWEPatccd8YkuAJlZDJzSw=
Subject key identifier:   BD:85:CA:19:B8:A5:45:A6:F5:E5:01:6B:A1:71:7E:9B:1D:CB:74:87
Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
Certificate issuer:       /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
Manifest number:          8A
Signing time:             Sun 01 Mar 2026 09:16:33 +0000
Manifest this update:     Sun 01 Mar 2026 09:16:32 +0000
Manifest next update:     Sun 08 Mar 2026 09:16:32 +0000
Files and hashes:         1: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl (hash: jq1Fo8SKYE72hl3CqF6cwI0ddLNIifmbbvEalVr4QsY=)
                          2: 6C8EEADA8FE011F0A1C6120DC4F9AE02.roa (hash: A5PJU/2MonNgPS/zrgxcCbEJrRPstF8HrjTYn0csfys=)
                          3: 0B4068BEC55D11F0B9FDE586C4F9AE02.roa (hash: d/+adXM53jhzhnOgosOvMBJYAel7wXf5omaL/+hpgK0=)
                          4: B3D7207C0CCE11F18D20135B323D8C67.roa (hash: 8gA37mRatzR/4g4mY6fjVlCeOjPiJPmSXHGYNQb+n78=)
                          5: 880DD06A13C411F1A59637CD0A3D8C67.roa (hash: vS2Vx6VXO5Nyq1OCzKcCc2oi73u64UNW1qpU6OAZqiI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
                          rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
        Validity
            Not Before: Mar  1 09:16:32 2026 GMT
            Not After : Mar  8 09:16:32 2026 GMT
        Subject: CN=69a403f1-8810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:77:ca:c1:ed:16:95:54:de:81:f3:41:72:2c:
                    37:0a:3f:a2:d3:ca:03:c3:8b:13:78:5e:8d:9c:ce:
                    66:c9:75:2d:f1:fe:bd:d4:97:0a:6b:7b:c8:29:5a:
                    be:84:37:2b:5e:1c:c5:ea:93:53:c2:ca:ff:0c:36:
                    21:17:dc:24:1c:63:90:92:c4:f1:23:d9:a8:af:2c:
                    99:06:c2:d5:da:8c:6c:d7:63:fb:1a:a3:29:e0:da:
                    bb:87:f0:e4:10:75:38:06:83:82:04:49:ab:b8:77:
                    8b:69:41:15:df:10:f7:d3:56:24:f9:e3:9e:5f:59:
                    38:88:9d:a6:a2:79:d2:27:35:58:f2:bd:f9:6e:ad:
                    bf:9b:3f:b1:34:d7:64:81:66:f0:1c:80:5a:21:61:
                    32:fe:07:92:d7:52:8a:57:45:38:a2:0a:9e:a2:b3:
                    67:73:fc:4d:e9:4d:7c:cf:af:4c:72:5d:5c:ba:32:
                    76:35:e3:e1:fb:08:9e:61:ff:e5:1d:16:2f:87:5e:
                    ee:ee:16:a0:d7:3c:79:5e:a8:ce:20:3e:ac:0e:01:
                    99:25:1e:52:ac:dc:30:04:9f:9c:36:33:6b:95:ca:
                    1b:cb:7d:38:80:5c:ca:2e:e4:d2:92:c4:59:dc:5e:
                    1c:28:5d:2c:74:f8:19:b9:bf:96:09:a6:3c:af:bb:
                    72:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:85:CA:19:B8:A5:45:A6:F5:E5:01:6B:A1:71:7E:9B:1D:CB:74:87
            X509v3 Authority Key Identifier:
                keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:56:ae:d9:99:43:ce:e5:9a:62:77:f3:de:a2:7b:91:0b:4e:
         d4:43:a2:8e:6b:ae:5e:2f:c2:09:74:4c:49:f5:0d:09:d0:91:
         23:5b:76:47:ba:11:f1:72:06:49:b2:88:41:6b:91:ce:06:25:
         cf:f3:42:85:66:9e:57:dc:e7:ba:fc:d0:39:f1:e2:39:b1:21:
         91:b5:e2:b1:96:45:d4:6b:36:05:58:9a:da:61:1e:22:df:8b:
         2d:d0:4a:76:db:0d:6f:b9:ac:23:b5:0c:cd:79:af:4b:2f:28:
         56:72:de:fc:c0:8c:7f:84:7d:47:7c:ff:75:f4:a2:53:70:a9:
         ce:aa:2e:f6:9f:fd:da:f9:ba:f7:06:8e:dc:72:d5:5a:d9:17:
         6a:f3:10:72:94:e0:86:8c:7b:00:9e:36:03:59:1d:51:ef:22:
         35:3d:11:3d:7b:0c:77:ce:18:58:89:8e:80:cc:6a:2c:a9:64:
         b9:8a:49:a0:e0:87:fd:f7:0f:33:fb:3a:9a:a1:05:ad:8b:50:
         88:38:8a:4b:52:32:3f:06:51:e3:61:19:ed:ce:8f:96:fc:0f:
         c7:ac:ed:44:2b:ff:6f:3a:bf:50:47:59:38:60:45:8a:ea:b8:
         46:37:80:3a:2c:ce:43:f4:10:76:b6:1a:dc:81:03:a0:a5:30:
         16:51:32:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:55:27 2026 by rpki-client