Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft
File:                     2dCjxqTde6e0VN6uAa9nryxUxDM.mft (raw, json)
Hash identifier:          pIZ5S49UKC24SIGOvI8wNHgyyelJfPTKTHkF+yY2Q1U=
Subject key identifier:   66:63:99:42:F0:9E:57:14:08:02:69:5B:B2:9C:85:80:B4:DA:C4:71
Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33
Certificate issuer:       /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433
Certificate serial:       0878
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft
Manifest number:          086D
Signing time:             Sat 28 Feb 2026 20:59:21 +0000
Manifest this update:     Sat 28 Feb 2026 20:59:21 +0000
Manifest next update:     Sat 07 Mar 2026 20:59:21 +0000
Files and hashes:         1: 2dCjxqTde6e0VN6uAa9nryxUxDM.crl (hash: LFagD17adeJ9UxxEWm2/VooVVzR0GJ6DZqfPUZn5DNQ=)
                          2: 12A47D4E9CDB11EF857FB626C4F9AE02.roa (hash: DuU/zvCDCUg2TONY7brDsE/++qWvSBYjnL7XCdcyag0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl
                          rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2168 (0x878)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C9B7, serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433
        Validity
            Not Before: Feb 28 20:59:21 2026 GMT
            Not After : Mar  7 20:59:21 2026 GMT
        Subject: CN=69a35729-72fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:69:a6:39:92:92:c8:de:7c:5c:b6:0d:88:32:
                    95:47:22:83:cf:3b:e9:c3:9d:41:e9:c8:6d:aa:ae:
                    3b:9c:a4:00:40:ab:f2:20:7d:77:50:18:c2:6f:30:
                    6b:40:1e:ce:7c:56:24:77:15:52:d7:4e:40:02:89:
                    2d:63:56:2b:01:26:bc:29:6e:af:b4:03:a3:10:e6:
                    21:f2:52:d7:7e:91:c0:a8:05:f3:c2:8c:95:dc:10:
                    c0:4f:43:a4:72:05:d7:c5:48:60:f7:34:e4:50:92:
                    48:f8:2e:bc:3d:c5:e7:ed:3c:1c:45:ff:cc:e9:24:
                    af:81:6f:00:1c:c2:d8:47:e8:cc:1f:90:1c:12:f2:
                    9e:33:6d:5e:37:01:23:f3:10:4d:82:e0:8e:e6:a4:
                    33:c0:63:ba:0e:77:96:d6:61:55:62:79:46:2b:db:
                    2c:ac:f5:6b:6c:8e:f9:7a:31:3f:0e:76:8b:26:0c:
                    30:0b:19:39:e3:b4:32:c1:cf:47:2c:cf:29:d9:d1:
                    96:2a:51:e1:bc:02:2e:d9:39:bd:98:be:c3:39:63:
                    c7:06:6e:f5:a8:c1:f7:17:ce:f5:72:43:35:ce:c9:
                    c7:0c:1c:f1:2c:dd:34:8a:fa:16:96:11:35:5f:45:
                    7a:44:84:e2:da:57:7c:22:02:a7:34:d7:c8:15:69:
                    5b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:63:99:42:F0:9E:57:14:08:02:69:5B:B2:9C:85:80:B4:DA:C4:71
            X509v3 Authority Key Identifier:
                keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:7f:23:eb:73:1f:52:42:38:5b:2e:c0:be:68:58:0e:f2:e6:
         56:9a:36:4a:92:59:2f:35:6d:96:ef:3a:a3:9d:03:09:62:69:
         50:82:aa:04:2d:26:66:2b:c4:cc:58:b3:02:60:2a:a0:f8:de:
         fa:0c:83:dd:e5:97:a8:fc:71:95:e7:3c:0d:97:01:80:13:77:
         25:05:50:da:01:6d:04:b6:33:01:9f:34:6b:00:e9:d1:ae:db:
         80:77:a7:e4:3a:d0:65:48:7a:f4:5c:92:75:44:c7:1c:f1:7b:
         ba:39:71:f5:b4:27:86:07:e8:a9:c3:42:d9:e2:a3:dd:ef:a9:
         49:d8:12:e2:b6:36:f1:fd:68:f7:9d:cb:5b:b8:f2:8a:6f:05:
         a0:5a:e9:d0:14:61:a7:2d:32:ae:71:aa:62:57:32:f4:99:38:
         87:2b:6b:87:1c:95:2c:b6:d2:0f:dc:37:9d:6f:13:0b:c0:85:
         ca:02:b0:f9:ea:a8:76:5c:7f:26:36:e9:2f:dc:a8:c4:0a:e9:
         de:ce:3c:18:ba:40:0c:22:8f:e3:f9:f7:47:86:67:e8:ed:d3:
         a3:42:41:9f:80:00:5f:bf:82:d5:9d:ee:80:f6:75:df:89:9a:
         db:f0:51:11:8e:91:d5:28:8c:b2:54:22:44:b3:9c:d3:89:b6:
         53:46:04:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:34 2026 by rpki-client