Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
File:                     mRs2LGa5oYApqN1CgVXZfHbgEgk.mft (raw, json)
Hash identifier:          IiovtYxoLjjpTpe1hP/aNy+vts4KK+HB+cAeabTlSaw=
Subject key identifier:   09:25:9A:B3:47:89:5F:D5:4C:A4:6C:61:6E:92:72:D6:71:3A:A0:34
Authority key identifier: 99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09
Certificate issuer:       /CN=A9178D2A/serialNumber=991B362C66B9A18029A8DD428155D97C76E01209
Certificate serial:       05AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
Manifest number:          05AA
Signing time:             Sat 28 Feb 2026 23:43:48 +0000
Manifest this update:     Sat 28 Feb 2026 23:43:48 +0000
Manifest next update:     Sat 07 Mar 2026 23:43:48 +0000
Files and hashes:         1: mRs2LGa5oYApqN1CgVXZfHbgEgk.crl (hash: CFxg8i3XnQSiyNeMimUZGt0/PzWOrQNX61OQrF5qX3Q=)
                          2: DB9C041801B311ECBA0E715CC4F9AE02.roa (hash: POPDOMnD2vV8xWQMiufmv3X0702RYs86sixhHrnG1/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl
                          rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1455 (0x5af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178D2A, serialNumber=991B362C66B9A18029A8DD428155D97C76E01209
        Validity
            Not Before: Feb 28 23:43:48 2026 GMT
            Not After : Mar  7 23:43:48 2026 GMT
        Subject: CN=69a37db4-48ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:61:70:ea:b6:24:b6:06:56:b2:79:1b:2f:29:
                    65:f9:b9:8e:0a:c3:c1:81:7e:75:af:b9:28:bc:13:
                    e3:a5:ec:0e:40:59:70:5e:b7:05:9c:cf:aa:a2:b7:
                    93:cf:bd:ae:d5:7b:d1:9a:ef:a6:62:5d:36:35:0d:
                    5b:93:e0:a9:73:40:4c:d1:d0:6b:b5:3e:3a:bc:08:
                    e6:1a:58:55:a1:c4:a2:a6:93:f9:90:23:a1:40:6d:
                    61:c5:af:97:9a:b1:aa:af:7d:30:82:38:d5:2e:51:
                    39:5a:80:aa:31:45:df:f5:cd:fc:2b:cb:0b:d1:ba:
                    cf:6d:8b:b1:fe:67:67:21:6e:b8:09:b0:49:11:d7:
                    6a:2e:bc:d6:20:39:52:a2:20:15:be:ba:ad:67:3b:
                    cc:a3:c2:43:aa:37:c9:be:1a:c7:51:d3:a0:90:5a:
                    1f:52:9b:32:fb:94:60:c2:bf:05:f3:8f:76:c0:9a:
                    12:f4:e7:1e:93:bf:34:73:33:b2:e9:82:0e:b7:44:
                    f5:24:cd:5d:5f:a8:b0:74:62:12:96:2d:41:7e:94:
                    fa:3a:f8:71:16:52:4a:e6:ab:a3:5b:eb:12:60:78:
                    88:2e:a0:fe:41:3a:c3:f3:37:14:51:68:c4:7e:6c:
                    cb:00:12:a1:cf:22:0a:aa:a6:e7:8a:cb:c6:e0:8b:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:25:9A:B3:47:89:5F:D5:4C:A4:6C:61:6E:92:72:D6:71:3A:A0:34
            X509v3 Authority Key Identifier:
                keyid:99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:09:27:65:73:07:50:ef:30:97:1f:68:a3:4e:3a:75:82:ee:
         31:70:ad:0a:bf:d8:25:c2:6b:e1:99:2f:19:8f:b3:45:9b:41:
         71:6d:23:a3:e1:88:e9:50:39:b1:ff:19:da:a7:8a:4b:67:ad:
         b9:e4:91:70:30:f7:26:25:e7:e4:bf:61:6b:b0:d4:5c:ef:8a:
         6c:42:a6:04:4a:af:04:ae:1d:c7:20:59:e0:71:5e:9e:88:2b:
         fd:79:d1:cd:fd:1d:92:68:5c:bc:72:83:1c:87:5c:c5:a8:1c:
         93:55:43:89:85:e0:87:63:a0:0e:0f:f3:ec:cc:b9:fe:5a:0a:
         d8:b3:c1:6b:10:d9:0b:a7:40:02:9e:ba:16:cf:16:86:3d:73:
         d1:d4:51:24:a4:15:d0:f2:6e:95:23:87:bd:53:f7:32:6c:0f:
         8f:56:b7:50:37:f3:22:69:44:ea:48:d0:57:b6:cd:fa:37:d6:
         4c:79:15:fa:da:f5:16:01:74:57:73:4f:fa:7c:d2:8f:49:ec:
         f6:7a:e9:38:92:33:f1:79:a5:39:3a:f4:84:6a:06:cc:ed:91:
         07:07:5a:9d:f3:c8:62:99:fc:f3:38:9f:d1:49:d3:96:01:17:
         43:25:08:b7:ce:d1:f7:96:c8:6b:ad:30:c2:7a:40:39:04:be:
         85:de:da:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:33:41 2026 by rpki-client