Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
File:                     2AV3_jUc7BMvwP-hiIerDHRrFPI.mft (raw, json)
Hash identifier:          G3ZZnP9Y14EC9gAZnooIcyEy0gj94l+LElY8sqJTXrc=
Subject key identifier:   18:8C:2A:A0:39:7D:3C:FB:FD:2B:59:B5:1A:99:86:16:88:B5:CE:26
Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2
Certificate issuer:       /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2
Certificate serial:       0222
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
Manifest number:          021E
Signing time:             Mon 02 Mar 2026 00:49:37 +0000
Manifest this update:     Mon 02 Mar 2026 00:49:35 +0000
Manifest next update:     Mon 09 Mar 2026 00:49:35 +0000
Files and hashes:         1: 2AV3_jUc7BMvwP-hiIerDHRrFPI.crl (hash: duehMw9isYlc9XDtS09SN/trEcxnLbxSIGpJmr57pVc=)
                          2: 732F4132D85E11EDB34ED618C4F9AE02.roa (hash: Xws1Pbqqq0/QFZ02P8d+7Evj6MZMCt/rYpdMr05WU7U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl
                          rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169FA9, serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2
        Validity
            Not Before: Mar  2 00:49:35 2026 GMT
            Not After : Mar  9 00:49:35 2026 GMT
        Subject: CN=69a4dea1-e10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:1b:22:42:c7:95:3b:6a:92:41:39:1d:e0:
                    3b:7e:30:f9:fd:26:06:41:81:d6:d2:db:78:59:6c:
                    84:16:ab:5c:4d:15:33:99:c9:44:4c:bb:9d:77:4c:
                    0b:e6:a7:7d:c9:d0:a6:11:44:e8:21:d0:7a:10:2f:
                    37:b9:b2:d5:17:85:c4:24:d2:7d:9d:ec:f7:33:a4:
                    0c:23:e7:c9:23:1f:be:bc:ca:62:d6:20:fc:eb:c8:
                    a0:4b:15:b3:a0:4a:2f:29:6d:37:05:45:e3:87:b4:
                    25:8f:9a:12:54:b5:45:33:30:f5:8a:e4:4e:7d:f0:
                    14:87:5a:c3:f6:16:a0:26:6d:ee:9d:a3:06:2d:1e:
                    f7:9e:79:1f:11:23:40:10:b5:27:af:77:26:63:52:
                    0d:2c:cb:34:51:f4:56:ae:c9:a1:c9:c7:d4:1b:eb:
                    ce:1f:2a:d7:fa:95:3c:9c:da:b8:d2:05:db:4a:a6:
                    17:54:8f:09:55:dc:7b:58:41:d4:77:cd:19:c3:0e:
                    19:64:48:67:15:05:55:c2:d5:64:ab:03:27:3c:35:
                    45:b6:4b:39:ee:7b:25:fa:47:b7:8b:c4:00:80:87:
                    5b:e8:ea:a5:e3:fe:bd:4d:88:7f:ec:0d:1e:a1:bb:
                    af:a1:96:f3:ca:30:34:8f:a4:0e:51:f1:12:00:8e:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8C:2A:A0:39:7D:3C:FB:FD:2B:59:B5:1A:99:86:16:88:B5:CE:26
            X509v3 Authority Key Identifier:
                keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ba:2f:83:e7:75:92:78:f7:3e:53:39:29:87:61:2e:63:70:
         2a:c5:71:1d:ba:e2:14:38:cc:c7:6f:4e:c4:d5:b5:c9:39:f1:
         64:a1:b2:64:40:0a:ed:c9:e0:4a:ef:e1:0b:a9:53:49:f0:84:
         6b:a7:75:11:93:cb:44:03:7d:95:7f:16:7b:6f:83:64:60:b4:
         08:a3:4a:cf:7f:6e:cf:c6:e6:f6:c2:2c:78:d0:b0:33:4d:1b:
         76:d3:11:a6:bf:68:21:ee:33:a8:09:c4:74:82:6a:f9:e2:58:
         7b:4b:cb:65:5b:1c:fa:6d:f4:97:f8:f4:55:1f:2c:ad:2d:79:
         6e:20:68:d4:d0:5a:b0:cf:bb:ce:c6:bb:ad:ed:b1:65:ad:6c:
         23:99:7f:3b:11:5f:d6:4d:b7:0a:10:66:c3:89:0f:1a:fd:c3:
         fa:2a:e4:67:e5:b1:15:fb:7a:33:5f:29:37:43:c0:65:67:ab:
         87:e7:a0:90:90:83:7f:c4:1b:0d:d6:9c:61:62:91:76:84:b8:
         f4:da:86:3a:7a:b9:dc:a0:7d:b7:4b:e5:13:71:65:16:ff:09:
         19:98:17:96:7e:11:5e:4a:96:b0:4f:41:73:34:14:bf:e3:d0:
         94:91:27:76:48:22:23:89:9b:32:7a:37:51:fd:0c:64:d0:32:
         e9:15:42:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlGQTkxMTAvBgNVBAUTKEQ4MDU3N0ZFMzUxQ0VDMTMyRkMwRkZBMTg4ODdBQjBD
NzQ2QjE0RjIwHhcNMjYwMzAyMDA0OTM1WhcNMjYwMzA5MDA0OTM1WjAYMRYwFAYD
VQQDEw02OWE0ZGVhMS1lMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuS8bIkLHlTtqkkE5HeA7fjD5/SYGQYHW0tt4WWyEFqtcTRUzmclETLudd0wL
5qd9ydCmEUToIdB6EC83ubLVF4XEJNJ9nez3M6QMI+fJIx++vMpi1iD868igSxWz
oEovKW03BUXjh7Qlj5oSVLVFMzD1iuROffAUh1rD9hagJm3unaMGLR73nnkfESNA
ELUnr3cmY1INLMs0UfRWrsmhycfUG+vOHyrX+pU8nNq40gXbSqYXVI8JVdx7WEHU
d80Zww4ZZEhnFQVVwtVkqwMnPDVFtks57nsl+ke3i8QAgIdb6Oql4/69TYh/7A0e
obuvoZbzyjA0j6QOUfESAI4wswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBiMKqA5
fTz7/StZtRqZhhaItc4mMB8GA1UdIwQYMBaAFNgFd/41HOwTL8D/oYiHqwx0axTy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUZBOS83QzBGNEQ4MkQ4
NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdCTXZ3UC1oaUllckRIUnJG
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJBVjNfalVjN0JNdndQLWhpSWVyREhSckZQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUZBOS83QzBGNEQ4MkQ4NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdC
TXZ3UC1oaUllckRIUnJGUEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXrovg+d1knj3PlM5KYdhLmNwKsVxHbriFDjMx29OxNW1yTnxZKGyZEAK7cng
Su/hC6lTSfCEa6d1EZPLRAN9lX8We2+DZGC0CKNKz39uz8bm9sIseNCwM00bdtMR
pr9oIe4zqAnEdIJq+eJYe0vLZVsc+m30l/j0VR8srS15biBo1NBasM+7zsa7re2x
Za1sI5l/OxFf1k23ChBmw4kPGv3D+irkZ+WxFft6M18pN0PAZWerh+egkJCDf8Qb
DdacYWKRdoS49NqGOnq53KB9t0vlE3FlFv8JGZgXln4RXkqWsE9BczQUv+PQlJEn
dkgiI4mbMno3Uf0MZNAy6RVC/A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:32 2026 by rpki-client