Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
File:                     2RBlAbU10PfK1XyOenR8oGnQTVk.mft (raw, json)
Hash identifier:          GYF8tHQkpByZHYRSO3K5KSgumkXzf/GSkL+EiiS11uk=
Subject key identifier:   A8:4B:19:84:AF:3D:60:7E:B9:3C:21:B3:78:B3:4C:09:E3:39:57:B8
Authority key identifier: D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59
Certificate issuer:       /CN=A916FACB/serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
Certificate serial:       0446
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
Manifest number:          0441
Signing time:             Sun 01 Mar 2026 01:02:16 +0000
Manifest this update:     Sun 01 Mar 2026 01:02:15 +0000
Manifest next update:     Sun 08 Mar 2026 01:02:15 +0000
Files and hashes:         1: 2RBlAbU10PfK1XyOenR8oGnQTVk.crl (hash: qgBGg7wGvWHSuQs7pP5d18or7n5igU9WItLtkY4H6MQ=)
                          2: 97D35382924311EC927C972FC4F9AE02.roa (hash: zuRVUVZ4oHP5FjkV3A62oHScUVN3Hx+6pzgHV8nmjoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl
                          rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1094 (0x446)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FACB, serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
        Validity
            Not Before: Mar  1 01:02:15 2026 GMT
            Not After : Mar  8 01:02:15 2026 GMT
        Subject: CN=69a39018-9169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:56:62:ca:08:f2:21:fd:32:eb:f0:63:2d:57:
                    b7:27:1b:92:0f:9b:fe:ee:9b:d2:76:40:64:5e:d8:
                    c5:4e:ff:ac:dd:5f:2c:aa:bc:23:fd:31:2a:dc:15:
                    ca:e4:24:f9:61:12:78:35:16:a0:35:d2:e8:04:dc:
                    a4:fb:23:60:b6:58:1f:0d:fb:3e:43:ba:72:3f:77:
                    83:60:82:a9:b8:ea:b3:8c:76:eb:8f:86:1e:3e:74:
                    88:87:0b:9f:f7:5e:2c:50:cc:4c:05:c4:e5:d1:db:
                    4c:c5:7d:c7:0a:42:77:6c:9a:f0:90:d0:27:d8:e7:
                    b9:87:bf:38:1e:ca:5c:6a:e0:09:71:97:b0:85:b9:
                    a7:b8:0c:f7:4a:bc:d3:25:74:a0:aa:6c:1d:96:99:
                    40:a5:04:d2:ce:39:d2:b2:4b:a5:44:73:9c:05:18:
                    44:25:76:f4:65:30:fb:30:7b:c4:f6:98:27:47:6c:
                    5e:51:80:eb:ff:1a:e3:7b:e8:ce:89:7f:59:34:ab:
                    8a:dc:d2:55:c9:f0:f2:5d:d8:18:80:a0:4a:a7:7f:
                    f2:08:aa:e4:9d:d6:bc:da:aa:74:d5:cf:b5:13:c7:
                    f9:c3:8c:f7:d1:dd:70:6b:90:b2:54:b6:06:6a:55:
                    ab:f8:dd:a2:9c:84:2c:e5:89:97:dd:f4:93:44:ee:
                    c1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4B:19:84:AF:3D:60:7E:B9:3C:21:B3:78:B3:4C:09:E3:39:57:B8
            X509v3 Authority Key Identifier:
                keyid:D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:aa:ee:bb:3a:f0:73:c6:65:60:5d:0f:fc:9c:69:01:48:a8:
         06:47:f0:66:1e:c4:df:de:54:4a:48:f3:a9:6a:93:cf:9e:1a:
         58:5d:b0:de:e3:4b:8f:c8:3a:ed:ec:be:e6:0c:71:ee:0f:cc:
         da:7d:e3:e9:0d:bc:37:98:f7:58:cc:b4:d3:65:1d:38:9a:74:
         9b:9d:07:28:e6:02:f6:b4:bd:cc:c9:5f:73:84:24:ed:94:a8:
         0a:e4:2b:73:2d:53:bb:e8:4b:17:d2:8b:f6:24:47:f1:93:1f:
         8b:c0:3c:24:83:73:76:3b:ad:9e:73:d3:2b:f6:7b:fb:db:8b:
         57:eb:a7:c6:1e:0a:61:fe:60:ac:4a:b3:63:c0:f7:0c:87:bf:
         f1:2b:f2:e4:56:4d:32:d8:f5:21:b0:11:22:d5:81:d6:76:bb:
         08:1d:ea:c5:93:1a:9f:98:d4:d3:22:16:5f:06:f4:c2:2b:8a:
         d2:91:17:49:8f:c2:61:8d:18:b7:e1:d8:52:af:de:71:35:61:
         58:95:90:94:2b:1e:bb:a3:61:0d:77:b5:f2:31:61:13:7d:26:
         f9:0d:11:01:68:45:52:77:21:54:ac:bd:91:76:a2:bd:b8:4b:
         6c:77:7d:a0:34:77:9b:b8:af:d2:b9:f1:ba:3c:b5:8b:c2:e3:
         a3:08:4e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:26 2026 by rpki-client