Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
File:                     2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft (raw, json)
Hash identifier:          5E/d/KVdeG4/zXSSyefoGan8yKVd8COEwZB9eTGaB8Y=
Subject key identifier:   6C:BF:7D:44:E3:35:92:51:1C:47:99:2E:E2:09:A6:F1:FD:BD:93:24
Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93
Certificate issuer:       /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
Manifest number:          0158
Signing time:             Sun 01 Mar 2026 06:03:36 +0000
Manifest this update:     Sun 01 Mar 2026 06:03:35 +0000
Manifest next update:     Sun 08 Mar 2026 06:03:35 +0000
Files and hashes:         1: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl (hash: GeFqpO1Zw+2EXOxq/TqmINx0D4V+MxnrZPG0tWef2Zg=)
                          2: EC1244C40C0A11EF86081F2FC4F9AE02.roa (hash: NJlTUu7/QW4EWdki02Krp+vIjKwpqnHJl+6zdGP8Tfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl
                          rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
        Validity
            Not Before: Mar  1 06:03:35 2026 GMT
            Not After : Mar  8 06:03:35 2026 GMT
        Subject: CN=69a3d6b8-5df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:64:09:13:5e:33:ca:43:55:fc:c3:ff:f7:d3:
                    22:df:04:7e:00:a6:39:b7:d2:0e:07:23:3f:2e:28:
                    88:84:45:28:81:d1:42:ec:57:08:c6:dd:59:2c:e8:
                    d9:41:da:14:ed:64:1b:97:28:08:0b:b8:24:e0:d6:
                    f6:ea:3e:ed:89:d9:ae:cc:8d:fa:16:78:01:ec:a2:
                    31:ec:b9:71:e4:40:44:f5:24:15:f9:99:66:93:34:
                    de:18:60:60:62:ed:58:ca:bc:6a:ea:c5:85:92:13:
                    96:b0:08:e2:a3:fe:9b:96:5c:90:f3:b1:b5:2c:10:
                    1c:ce:a3:69:b9:57:b1:80:c3:cb:1c:e9:6b:f4:b6:
                    98:9e:bc:24:3b:c6:8a:b1:be:2e:72:51:0e:33:f7:
                    dc:7c:db:7f:67:6b:e6:49:c3:34:dd:75:41:ec:38:
                    3c:e5:65:01:e3:b5:55:2a:af:26:7d:78:27:ab:dc:
                    f8:98:50:6f:2d:1d:96:d4:df:f7:48:cd:97:8d:12:
                    f5:12:21:77:90:ca:3b:dc:63:b0:1b:b1:e1:b1:d2:
                    83:74:d7:7f:44:13:55:99:7f:5a:0d:52:40:21:0f:
                    3c:fe:11:24:9d:8f:2a:e7:8d:99:e4:05:ee:4d:1c:
                    a9:5c:3a:fb:02:0c:61:63:79:cc:0f:3e:9a:2d:f0:
                    cc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BF:7D:44:E3:35:92:51:1C:47:99:2E:E2:09:A6:F1:FD:BD:93:24
            X509v3 Authority Key Identifier:
                keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c9:4f:de:5c:c4:80:88:de:d8:79:88:29:5d:c7:6d:de:8c:
         11:46:9f:77:61:fa:71:75:e5:50:d3:7b:6e:f3:c9:bc:c5:be:
         88:17:75:b5:6b:79:ec:c9:59:71:e4:ab:cc:1e:be:46:cc:0f:
         ef:07:a1:29:67:bf:1c:6d:3d:2d:e7:36:22:3b:8c:17:06:b2:
         97:a5:3c:01:2f:63:f0:ff:5d:6b:79:85:64:e6:dd:ce:47:fc:
         b7:f3:87:df:87:7f:c4:83:79:31:b8:58:ed:e0:3a:64:09:a5:
         9b:c8:51:64:97:85:17:60:ee:46:e5:0b:eb:3b:d6:ed:ea:7d:
         8f:6d:60:0d:84:54:4b:61:d4:b9:f1:84:ff:8c:53:cf:bd:85:
         75:c2:54:63:8e:64:1a:ba:30:1d:98:5b:f5:22:a3:fd:a1:08:
         63:2a:54:f2:85:5b:5b:06:61:70:b6:ea:62:45:64:dd:90:8e:
         14:dc:e6:cd:03:59:2f:5b:0f:28:6e:9f:9e:50:d8:e4:e7:76:
         dd:ff:86:e3:5c:65:ce:34:88:c9:b2:89:9c:4f:42:47:d9:9a:
         82:6b:33:d4:72:94:25:b7:4d:a6:22:eb:fb:94:b1:64:8f:18:
         83:4a:39:68:d7:27:94:8f:f1:60:7b:e9:15:c8:d4:ad:7d:e1:
         ba:cb:27:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:40:57 2026 by rpki-client