Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
File:                     g4-9CzleqQcGxsKJrCaw1zigQkE.mft (raw, json)
Hash identifier:          K5RzHKnMwSys51Iws20IwTl6CE0FoB4xvZTpq/mYeB0=
Subject key identifier:   83:05:89:1D:F9:F0:39:F2:29:B1:09:D7:79:2C:29:8D:C7:6B:75:5C
Authority key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
Certificate issuer:       /CN=A917BB9A/serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
Manifest number:          E2
Signing time:             Mon 02 Mar 2026 02:59:02 +0000
Manifest this update:     Mon 02 Mar 2026 02:58:59 +0000
Manifest next update:     Mon 09 Mar 2026 02:58:59 +0000
Files and hashes:         1: g4-9CzleqQcGxsKJrCaw1zigQkE.crl (hash: E1A5ESjLyhGn6CvEwO3f5qNwx1ZFqgg3WgJ2imtVpxU=)
                          2: 0CBF3110D59011EFB76D6824C4F9AE02.roa (hash: HUtXLhQ2zyP4LJGfZauEnR2MPzei0tQ4qoL8B66B5TY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl
                          rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
        Validity
            Not Before: Mar  2 02:58:59 2026 GMT
            Not After : Mar  9 02:58:59 2026 GMT
        Subject: CN=69a4fcf5-2914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:25:18:b0:63:4a:e1:ef:75:b2:73:6d:80:2e:
                    41:18:2b:68:ec:5d:58:2f:cf:55:1d:e3:7c:84:22:
                    a6:7e:31:57:4a:00:ca:78:ca:81:4a:8a:d8:2c:5e:
                    99:5a:0a:c5:af:92:4d:6f:b1:0f:09:e3:c8:e2:4e:
                    c9:31:a1:72:3e:42:24:01:82:5e:6b:01:a3:a9:04:
                    92:e2:14:47:c1:76:ce:df:81:81:2c:40:c1:b0:00:
                    7b:ca:1f:d1:d4:9a:e6:52:a9:7d:db:03:87:4c:ef:
                    96:92:d2:10:f3:06:93:9b:d1:82:da:23:43:d0:64:
                    8a:98:c4:aa:80:e8:0c:dc:1b:cc:53:64:36:9b:aa:
                    62:92:9c:93:6c:1a:b5:bb:e6:5e:6d:c0:41:cd:bf:
                    52:e2:54:05:db:80:5d:fc:5f:ab:fd:88:47:0d:b3:
                    9a:cc:e9:e7:65:7e:e4:35:af:5d:0f:a9:15:d2:e3:
                    06:2f:93:85:ac:d7:0d:78:2b:51:42:28:71:dc:60:
                    b1:b7:ca:f2:66:3c:2d:b4:e8:7b:84:19:bb:5f:27:
                    dd:89:cf:dc:b7:b0:9b:bc:24:40:73:36:91:04:91:
                    f5:e1:9b:ea:46:2a:ad:05:58:3c:e3:74:e3:8e:f9:
                    6d:d0:9c:b5:dc:a5:53:7b:5a:21:7f:90:95:11:f9:
                    71:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:05:89:1D:F9:F0:39:F2:29:B1:09:D7:79:2C:29:8D:C7:6B:75:5C
            X509v3 Authority Key Identifier:
                keyid:83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:be:5f:7e:ee:da:08:49:d4:ea:0a:e7:55:34:c3:6b:c2:83:
         34:cb:0a:92:e7:95:72:5e:be:a9:e5:15:3b:40:25:e4:70:89:
         c4:84:d8:29:cb:3f:e3:6b:10:78:1e:e7:9d:9a:f5:60:25:16:
         05:a7:59:e4:b6:7c:5e:c3:da:7a:bf:48:df:4f:83:b3:50:8a:
         72:5d:3c:46:17:f3:9f:cd:07:75:8f:7c:12:59:db:d1:50:42:
         36:2d:9a:0b:74:7a:aa:06:31:b1:b6:35:2e:03:e8:25:2c:94:
         18:dd:63:96:12:56:b1:84:20:70:47:fb:0e:7a:c9:43:a9:d4:
         55:36:84:f1:34:21:37:03:ee:e4:cd:3f:ac:1a:dc:ff:5b:b6:
         90:b4:98:51:ea:d2:9b:d4:1a:72:2a:9b:ad:d0:17:2d:59:0a:
         af:fe:31:38:3d:31:5e:39:13:75:48:a9:97:85:99:c4:ed:5c:
         e4:56:ad:bc:75:10:db:e8:b8:eb:f3:6b:a5:44:89:88:ce:ee:
         c4:51:e3:86:e2:2e:77:5b:e2:a3:7e:eb:c7:22:c2:80:57:b7:
         08:cd:8a:d7:20:09:b8:44:81:b5:f0:1b:4e:70:8f:e3:5f:1b:
         10:46:f7:c4:17:75:04:4b:c9:db:54:61:4e:6e:4b:22:39:8e:
         ad:19:00:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JCOUExMTAvBgNVBAUTKDgzOEZCRDBCMzk1RUE5MDcwNkM2QzI4OUFDMjZCMEQ3
MzhBMDQyNDEwHhcNMjYwMzAyMDI1ODU5WhcNMjYwMzA5MDI1ODU5WjAYMRYwFAYD
VQQDEw02OWE0ZmNmNS0yOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsiUYsGNK4e91snNtgC5BGCto7F1YL89VHeN8hCKmfjFXSgDKeMqBSorYLF6Z
WgrFr5JNb7EPCePI4k7JMaFyPkIkAYJeawGjqQSS4hRHwXbO34GBLEDBsAB7yh/R
1JrmUql92wOHTO+WktIQ8waTm9GC2iND0GSKmMSqgOgM3BvMU2Q2m6pikpyTbBq1
u+ZebcBBzb9S4lQF24Bd/F+r/YhHDbOazOnnZX7kNa9dD6kV0uMGL5OFrNcNeCtR
Qihx3GCxt8ryZjwttOh7hBm7Xyfdic/ct7CbvCRAczaRBJH14ZvqRiqtBVg843Tj
jvlt0Jy13KVTe1ohf5CVEflxHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIMFiR35
8DnyKbEJ13ksKY3Ha3VcMB8GA1UdIwQYMBaAFIOPvQs5XqkHBsbCiawmsNc4oEJB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI5QS80MTM5MEJDQUNG
RjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9nNC05Q3psZXFRY0d4c0tKckNhdzF6aWdR
a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2c0LTlDemxlcVFjR3hzS0pyQ2F3MXppZ1FrRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QkI5QS80MTM5MEJDQUNGRjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9nNC05Q3psZXFR
Y0d4c0tKckNhdzF6aWdRa0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2b5ffu7aCEnU6grnVTTDa8KDNMsKkueVcl6+qeUVO0Al5HCJxITYKcs/42sQ
eB7nnZr1YCUWBadZ5LZ8XsPaer9I30+Ds1CKcl08Rhfzn80HdY98Elnb0VBCNi2a
C3R6qgYxsbY1LgPoJSyUGN1jlhJWsYQgcEf7DnrJQ6nUVTaE8TQhNwPu5M0/rBrc
/1u2kLSYUerSm9QaciqbrdAXLVkKr/4xOD0xXjkTdUipl4WZxO1c5FatvHUQ2+i4
6/NrpUSJiM7uxFHjhuIud1vio37rxyLCgFe3CM2K1yAJuESBtfAbTnCP418bEEb3
xBd1BEvJ21RhTm5LIjmOrRkAtg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:31 2026 by rpki-client