Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
File:                     2nLQztquGaHsPtugRn1ZjrmRVlY.mft (raw, json)
Hash identifier:          f9T33DXb1vcC2BY7sMoN/KnP9bDufcpOPiVQBES7TIc=
Subject key identifier:   2C:AF:DC:0F:B5:6F:6A:DF:14:60:A6:70:51:D9:49:B8:16:0C:09:D0
Authority key identifier: DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56
Certificate issuer:       /CN=A915E131/serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
Manifest number:          3F
Signing time:             Sun 01 Mar 2026 09:52:50 +0000
Manifest this update:     Sun 01 Mar 2026 09:52:50 +0000
Manifest next update:     Sun 08 Mar 2026 09:52:50 +0000
Files and hashes:         1: 2nLQztquGaHsPtugRn1ZjrmRVlY.crl (hash: ltWbny0bkwCQWbqzts+b9+ole4EunuaXl8aA5MwVEhw=)
                          2: 7D4302A0BEC811F0AE45220FC4F9AE02.roa (hash: DdCOIo33v4IDMQPtkKtDFsOxid92dMxNzutXTG46zeE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl
                          rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E131, serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
        Validity
            Not Before: Mar  1 09:52:50 2026 GMT
            Not After : Mar  8 09:52:50 2026 GMT
        Subject: CN=69a40c72-31b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ab:e7:04:00:3c:fa:c4:7b:37:2d:98:85:71:
                    b0:4f:88:32:4f:13:04:a9:2b:4a:ab:6c:11:e1:cd:
                    4a:d9:63:48:79:5c:a4:b4:58:f2:ce:05:12:26:71:
                    57:26:ad:11:d2:03:ad:b3:92:36:18:65:5b:1b:56:
                    a5:7b:c1:46:f5:33:d7:a4:a4:33:df:e6:0c:5d:42:
                    e4:d2:80:14:e7:31:fc:a0:8e:25:98:d1:79:35:a6:
                    ae:bf:2c:dd:ab:32:81:da:40:69:c6:8f:85:6a:15:
                    9b:1b:9c:48:0c:f6:ed:dc:df:61:07:83:2a:5d:bd:
                    0e:65:4f:df:71:a5:45:34:a4:58:6f:25:68:f8:37:
                    38:79:3f:0a:7f:77:7f:3b:ee:2d:e5:03:59:06:df:
                    e2:73:bd:e7:e6:91:81:93:b6:f8:8a:56:83:6d:9b:
                    da:22:d7:a2:04:b3:db:f9:bf:97:ab:4e:45:44:52:
                    a0:4f:3f:c4:cd:74:f5:f1:a5:bd:af:9e:f8:47:4f:
                    63:ab:d9:1f:db:36:f2:28:46:7b:35:55:53:b0:48:
                    c4:8b:ad:f3:ec:91:f9:95:45:bc:c6:5d:65:e5:0b:
                    3b:ee:42:df:8f:98:e0:35:4a:61:14:7d:cb:86:54:
                    44:ad:97:5d:db:56:e3:de:8f:23:bd:d1:ef:9e:02:
                    85:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AF:DC:0F:B5:6F:6A:DF:14:60:A6:70:51:D9:49:B8:16:0C:09:D0
            X509v3 Authority Key Identifier:
                keyid:DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3d:94:4b:52:62:8b:09:42:3c:1c:4b:76:09:6b:ae:02:74:
         c6:a9:ed:2e:8b:43:e1:2a:88:be:e0:ef:63:a0:83:80:ab:ff:
         9e:68:5f:24:de:ea:0a:1f:3e:31:98:76:b5:2e:6a:3a:59:02:
         84:c8:a7:33:85:8e:e4:35:7d:87:92:d7:5e:58:a1:56:9a:26:
         f6:31:2b:bc:1e:3c:17:d2:ac:6e:77:6c:e3:23:00:69:e4:6c:
         f1:aa:51:05:65:af:54:18:75:56:62:9f:90:25:b8:22:15:5e:
         1e:9c:c8:00:41:bb:80:1c:e9:68:bd:c6:51:e3:2a:ef:d0:5e:
         31:78:d3:e8:80:55:e8:65:0a:d3:7f:dc:f4:39:94:6a:10:9f:
         f4:f1:37:c9:06:dc:b1:19:b8:eb:7d:ff:16:8e:a6:e6:47:4a:
         ff:88:fc:e2:41:6f:4b:94:3f:56:55:f7:23:8e:a3:bc:a3:30:
         cd:e4:58:2e:84:d9:d1:ed:7a:72:e7:58:ea:c4:68:c9:a2:27:
         55:2a:91:7c:49:b2:21:97:c2:6a:82:e3:42:8c:e5:2f:db:c6:
         43:d7:ed:c2:ac:72:d2:a8:f9:6e:c5:da:e4:41:c4:20:19:f2:
         f7:2a:8c:2c:f0:17:ff:29:de:19:65:42:5e:12:d7:d8:9f:27:
         66:1c:f0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:28 2026 by rpki-client