Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
File:                     2OexX5y5FnTlEn_UBtfZ5xjgirA.mft (raw, json)
Hash identifier:          eT69V9lFuFsPQ5aeOQDMxS/axhEKiJme65wcEgR/pfQ=
Subject key identifier:   F9:74:E8:C8:BE:C9:F1:2A:DF:C5:A8:12:5E:21:14:DA:0E:79:5D:0F
Authority key identifier: D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0
Certificate issuer:       /CN=A917E27F/serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
Manifest number:          6E
Signing time:             Sun 01 Mar 2026 09:16:25 +0000
Manifest this update:     Sun 01 Mar 2026 09:16:24 +0000
Manifest next update:     Sun 08 Mar 2026 09:16:24 +0000
Files and hashes:         1: 2OexX5y5FnTlEn_UBtfZ5xjgirA.crl (hash: m8cAWCbXkUi3vqn6obPHBH5/cNoU3TL6IGXp5/E4g9c=)
                          2: 4197AB74735611F080D68151C4F9AE02.roa (hash: KJWSfbOSquMIKpz7QMLAGjevQAyuwiO61hki9DtvT9A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl
                          rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E27F, serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0
        Validity
            Not Before: Mar  1 09:16:24 2026 GMT
            Not After : Mar  8 09:16:24 2026 GMT
        Subject: CN=69a403e9-cc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:65:f0:c8:23:ba:fd:8d:f7:cd:40:ae:bd:
                    7b:c4:39:bc:0e:5c:e5:4c:6d:b8:5c:4a:f0:3f:e0:
                    16:bb:31:d9:42:50:e0:74:ef:6b:fc:b3:26:b5:cc:
                    5a:37:60:58:bc:b7:80:ef:42:fe:e0:d6:99:4b:cf:
                    bc:5d:86:7c:fd:5d:26:53:3a:e5:f5:85:98:32:2f:
                    85:58:d0:fa:03:7d:e5:88:05:e7:8d:74:a1:77:34:
                    0f:98:28:ed:b4:2f:0a:e5:ce:67:8e:c4:ab:cf:8b:
                    42:90:6a:7c:d7:87:21:81:96:13:43:cd:f8:fd:e5:
                    11:a3:dc:58:97:20:b7:6b:03:3d:6e:33:5e:1a:e4:
                    b3:39:7a:5f:81:47:80:98:df:7c:46:72:77:f0:3c:
                    fc:69:e4:8d:b9:3a:c4:c5:60:93:df:55:e5:63:67:
                    58:3b:ac:91:52:b8:4e:af:a8:c7:6a:44:7c:b1:01:
                    5a:16:97:f0:86:60:c9:dd:19:cf:88:ef:59:84:a8:
                    a8:0e:18:15:93:fd:f2:75:97:20:88:bf:8e:ac:aa:
                    5c:09:e8:f1:f9:04:3e:6c:15:fc:9e:a8:88:6d:5f:
                    2e:81:87:f8:2e:09:92:8b:5b:28:f6:ff:6a:3b:b8:
                    b0:9c:77:fc:7e:fc:73:39:db:74:ad:e6:17:4b:b7:
                    73:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:74:E8:C8:BE:C9:F1:2A:DF:C5:A8:12:5E:21:14:DA:0E:79:5D:0F
            X509v3 Authority Key Identifier:
                keyid:D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:98:42:91:82:0d:7e:60:20:37:b9:0b:fa:3b:3f:c1:d8:b7:
         d8:0d:25:43:7b:50:ac:3d:3f:ab:7a:b9:4f:08:05:44:4d:59:
         8d:7f:51:04:4e:aa:aa:65:56:2a:d7:57:63:11:c6:d4:7f:46:
         cf:22:a1:fa:be:ab:cd:ec:ab:78:94:0f:ba:63:6b:5d:ab:20:
         3e:d0:11:4f:78:cf:dc:3e:01:2d:b4:7d:5b:0a:5c:35:4f:5f:
         52:c0:e0:23:b1:4b:63:03:0b:bd:b6:5f:f0:db:c0:dc:e5:1f:
         3f:03:8a:70:65:7a:39:41:b8:ef:9b:ec:f1:2a:3c:76:48:c5:
         aa:03:c1:5f:d8:1c:b9:89:76:44:8d:98:07:08:fa:c6:19:85:
         f0:fa:28:3d:a7:63:3b:7b:8d:72:49:91:81:94:88:01:55:82:
         fd:19:cd:0a:fe:c2:57:c4:8f:5c:34:57:bd:e6:78:26:d5:a2:
         cb:70:2e:ab:09:74:e3:94:6a:43:d2:d5:a1:69:5f:80:fb:19:
         b0:1e:07:3c:ec:e8:b0:2a:d5:24:86:d2:77:1c:7a:dd:a7:30:
         93:65:78:8f:f3:ea:13:8b:28:ed:6a:5d:b0:4d:58:f2:7c:7a:
         22:cf:18:6c:1f:11:25:7d:55:29:48:a2:67:b5:96:c8:84:cd:
         75:41:a2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:57:41 2026 by rpki-client