Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
File:                     R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json)
Hash identifier:          AWbMiMDW4Uhn59dN+TF56gyQNiYO9qBUffkABvUXpoY=
Subject key identifier:   3E:2A:31:2E:CB:5E:AF:B8:00:D9:F8:0E:6E:47:D1:92:0C:CF:2F:8E
Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23
Certificate issuer:       /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
Certificate serial:       0238
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
Manifest number:          0231
Signing time:             Sun 01 Mar 2026 03:27:31 +0000
Manifest this update:     Sun 01 Mar 2026 03:27:30 +0000
Manifest next update:     Sun 08 Mar 2026 03:27:30 +0000
Files and hashes:         1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: ZfbtCoYfQ5nlWolhH3LazSkngExcW78oUAz8QPOKNbg=)
                          2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: QqBINDd+m6GAidQPZDLnjXwqI13nDti3MNbtgoHfQfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl
                          rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A442, serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
        Validity
            Not Before: Mar  1 03:27:30 2026 GMT
            Not After : Mar  8 03:27:30 2026 GMT
        Subject: CN=69a3b222-8469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:b9:dc:be:09:76:ed:64:9a:99:91:f0:34:
                    9c:0d:bd:ed:bf:74:aa:5e:a9:3a:60:1e:16:88:76:
                    e5:4d:f1:ee:9d:16:3e:e4:23:0d:d4:97:13:e5:27:
                    09:6c:32:af:c1:3d:d7:6a:40:f6:7b:58:ce:24:5f:
                    98:37:1f:d0:20:45:cc:73:22:7a:07:c2:64:28:ae:
                    e8:44:8b:11:0c:b6:11:88:43:bf:da:50:38:0f:94:
                    6d:db:e7:3a:20:6a:04:08:64:4d:63:26:71:d5:d5:
                    fe:83:f6:9b:ab:bd:94:5b:85:f9:aa:7c:9d:20:4a:
                    82:91:5b:6b:be:ff:28:00:18:e2:2c:cf:22:00:56:
                    da:af:d2:d0:8e:47:55:48:60:c9:36:09:72:b3:60:
                    a5:59:de:83:a1:49:57:94:43:af:fe:91:29:00:bc:
                    d1:06:9c:0c:05:b3:eb:9a:39:23:6f:b6:65:c8:df:
                    a6:26:e2:7f:2c:1b:85:98:cd:31:4b:19:a2:01:ce:
                    b9:bf:a1:af:9e:07:a8:2e:b5:56:75:44:0f:ba:a1:
                    04:05:0a:7f:d4:80:a4:06:0e:80:72:eb:8a:f4:ea:
                    d8:49:73:c5:9f:4a:56:af:e5:1b:c8:96:64:e1:bc:
                    c7:33:fb:d2:8a:58:fe:12:13:6d:24:a6:ed:08:c1:
                    ef:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2A:31:2E:CB:5E:AF:B8:00:D9:F8:0E:6E:47:D1:92:0C:CF:2F:8E
            X509v3 Authority Key Identifier:
                keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f4:70:c8:96:c2:34:1c:01:16:1c:d4:c2:a3:a4:a8:56:84:
         b1:2b:93:29:64:80:1b:d8:a7:8d:de:a7:1b:6a:a9:b0:ac:b6:
         7a:6f:6e:3c:d4:dc:7b:a0:f8:34:05:e9:2e:85:a6:c6:99:12:
         14:56:7e:3e:97:6c:05:9a:42:8f:9b:6a:7e:d0:72:ea:e0:af:
         76:29:52:c0:17:b1:b5:99:9d:80:2a:a2:60:22:1d:10:d4:c0:
         67:00:bc:4e:f2:c0:93:38:57:1c:93:2b:6b:90:ec:71:ea:db:
         8d:f4:c7:ee:90:2e:86:49:7f:c6:76:11:d0:ab:c9:a9:f7:d0:
         b7:51:ee:af:5f:8c:2e:65:38:cb:64:85:94:03:f7:39:0e:4f:
         fa:4c:34:a2:0f:66:0a:7c:95:d2:a8:9b:50:8d:ad:d5:16:3f:
         fa:57:9e:39:20:4f:c2:59:ce:d4:75:1f:9d:95:3d:35:95:4e:
         ae:08:75:35:0f:80:5e:3f:0a:30:05:c1:9e:b6:55:fb:d5:a9:
         a9:57:b3:0e:c7:ee:1d:3d:79:f8:0a:69:85:f2:97:03:0e:3c:
         f9:69:ec:e4:e5:d9:02:c0:62:2b:5a:37:52:eb:27:70:77:4c:
         7b:f8:9e:d4:f4:72:54:a2:cd:fd:78:e9:7a:55:4c:34:9e:24:
         67:60:e6:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E0NDIxMTAvBgNVBAUTKDQ3NkMyQjk2QTUxOEYzNTdGNkQ5NzY4MkE4NzFDM0U0
OEJCOUUxMjMwHhcNMjYwMzAxMDMyNzMwWhcNMjYwMzA4MDMyNzMwWjAYMRYwFAYD
VQQDDA02OWEzYjIyMi04NDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArwe53L4Jdu1kmpmR8DScDb3tv3SqXqk6YB4WiHblTfHunRY+5CMN1JcT5ScJ
bDKvwT3XakD2e1jOJF+YNx/QIEXMcyJ6B8JkKK7oRIsRDLYRiEO/2lA4D5Rt2+c6
IGoECGRNYyZx1dX+g/abq72UW4X5qnydIEqCkVtrvv8oABjiLM8iAFbar9LQjkdV
SGDJNglys2ClWd6DoUlXlEOv/pEpALzRBpwMBbPrmjkjb7ZlyN+mJuJ/LBuFmM0x
SxmiAc65v6GvngeoLrVWdUQPuqEEBQp/1ICkBg6AcuuK9OrYSXPFn0pWr+UbyJZk
4bzHM/vSilj+EhNtJKbtCMHv7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD4qMS7L
Xq+4ANn4Dm5H0ZIMzy+OMB8GA1UdIwQYMBaAFEdsK5alGPNX9tl2gqhxw+SLueEj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ0Mi9FMEU3REI1NkM4
MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgxZjIyWGFDcUhIRDVJdTU0
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Iyd3JscVVZODFmMjJYYUNxSEhENUl1NTRTTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTQ0Mi9FMEU3REI1NkM4MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgx
ZjIyWGFDcUhIRDVJdTU0U00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAffRwyJbCNBwBFhzUwqOkqFaEsSuTKWSAG9injd6nG2qpsKy2em9uPNTce6D4
NAXpLoWmxpkSFFZ+PpdsBZpCj5tqftBy6uCvdilSwBextZmdgCqiYCIdENTAZwC8
TvLAkzhXHJMra5DscerbjfTH7pAuhkl/xnYR0KvJqffQt1Hur1+MLmU4y2SFlAP3
OQ5P+kw0og9mCnyV0qibUI2t1RY/+leeOSBPwlnO1HUfnZU9NZVOrgh1NQ+AXj8K
MAXBnrZV+9WpqVezDsfuHT15+ApphfKXAw48+Wns5OXZAsBiK1o3UusncHdMe/ie
1PRyVKLN/XjpelVMNJ4kZ2Dm0A==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:30 2026 by rpki-client