Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
File:                     Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json)
Hash identifier:          vRKCgYjuTG/MnusNh5FOM0JM8vR8ydpcxSSe5p0uZ/Q=
Subject key identifier:   FD:19:EC:00:B0:09:9E:F3:D8:D0:5C:DF:74:26:66:F2:7B:7C:53:6E
Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83
Certificate issuer:       /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
Manifest number:          015B
Signing time:             Sun 01 Mar 2026 06:03:28 +0000
Manifest this update:     Sun 01 Mar 2026 06:03:28 +0000
Manifest next update:     Sun 08 Mar 2026 06:03:28 +0000
Files and hashes:         1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: 1DlverBXihudevWYgLVmjRQcdtBP9HiyeNaS0Jt2PqU=)
                          2: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: umvNCLI7iW38RSzg3zPy1AVyFb/xTeitHNDqveQ33og=)
                          3: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: LDLnl9esieYIir4GSl9fbC8XSzYihIW7GYTLFm/J+Ic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl
                          rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F241, serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
        Validity
            Not Before: Mar  1 06:03:28 2026 GMT
            Not After : Mar  8 06:03:28 2026 GMT
        Subject: CN=69a3d6b0-e648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:72:c0:f1:24:f0:b3:4c:59:02:38:c4:98:9b:
                    4f:a8:49:c3:ad:87:57:98:7c:d6:48:11:75:45:f5:
                    8a:dc:7d:06:f8:bf:c4:fc:0b:6a:0c:01:9e:bd:7f:
                    1a:46:5a:b9:41:ab:e3:f1:9a:6c:be:70:86:76:52:
                    7b:00:65:21:4c:f3:22:6e:00:30:38:cf:26:e8:ab:
                    d1:87:f3:d4:a9:a5:08:85:42:a7:a5:c7:ab:1d:ff:
                    64:ac:55:ad:7c:21:c2:96:54:02:b9:e4:84:91:2a:
                    7a:e0:b5:96:e6:ba:e2:cc:87:7f:6d:32:bd:70:5f:
                    ca:49:67:7f:c8:61:4f:dd:9e:36:b3:80:0f:85:d1:
                    82:1d:ed:3e:40:89:60:46:11:0c:e9:28:07:ec:b5:
                    a0:ad:1c:0e:55:a4:ea:68:21:b4:31:61:80:fb:4f:
                    3b:e5:d9:b8:06:ae:6a:dd:02:b1:da:b0:94:1e:a4:
                    e7:bf:34:f0:80:e2:6d:98:45:7c:39:1d:5a:f3:80:
                    18:37:4d:16:cb:fe:48:b6:62:44:d8:6c:26:13:e9:
                    a8:21:84:79:eb:b7:ad:ff:be:47:eb:26:eb:d3:10:
                    39:3f:c1:3b:f0:8c:5e:54:7c:31:69:4b:96:f0:bc:
                    c9:2c:12:99:49:a5:56:9f:92:78:d6:4a:89:0e:57:
                    48:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:19:EC:00:B0:09:9E:F3:D8:D0:5C:DF:74:26:66:F2:7B:7C:53:6E
            X509v3 Authority Key Identifier:
                keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:1b:02:95:3f:55:67:5a:e4:c8:58:a8:d8:26:24:45:bb:31:
         1b:9e:10:2b:4b:f0:6d:68:0f:e7:ba:c1:c8:e3:7a:a3:68:9c:
         a2:75:09:74:47:8e:e8:85:e1:77:43:26:0c:27:72:c2:7d:c3:
         a1:7c:f7:66:a2:31:2e:60:9b:79:75:72:cf:4c:d8:c6:3a:d6:
         de:78:bc:70:20:fc:c4:36:6a:7a:a3:52:38:1c:5a:56:a5:db:
         bc:bf:36:4e:33:af:73:c2:ca:40:89:5c:57:3b:28:19:8b:10:
         be:7d:fb:7e:c8:8a:6e:9c:05:ce:2c:30:c9:a6:3a:e1:f5:40:
         35:ef:76:88:ef:b3:20:40:69:55:0d:3f:d7:7a:a2:3a:88:37:
         d4:83:7f:05:6c:96:23:91:75:2f:56:c9:05:0b:f1:2a:fc:52:
         c7:9a:18:7a:7c:5e:20:e9:c6:51:29:ef:98:00:8e:59:fc:e8:
         bb:f2:6b:17:83:b3:6c:05:ee:ac:18:c5:6c:23:51:ff:df:41:
         45:d1:9c:2a:9a:97:a8:80:f3:28:21:17:2b:f7:84:5f:3e:80:
         0f:9c:cd:43:e8:aa:c8:0b:1e:ef:9d:22:35:93:69:c1:76:e1:
         c1:65:4f:ca:2b:64:f0:2c:47:d3:48:dd:8e:a1:2b:cb:31:7a:
         5e:a0:45:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:31 2026 by rpki-client