Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
File:                     2CWolzNYl8B-dpODimvyAnZYDwM.mft (raw, json)
Hash identifier:          mTpvsIolgsJ6rBxBktQTcHi+x/fZqtIhdxd05oBR0Pw=
Subject key identifier:   A8:A4:D1:9D:F9:D9:51:3A:81:14:63:1F:C7:7E:74:5B:86:56:A7:6D
Authority key identifier: D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03
Certificate issuer:       /CN=A9199DE2/serialNumber=D825A897335897C07E7693838A6BF20276580F03
Certificate serial:       0693
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
Manifest number:          0688
Signing time:             Sat 28 Feb 2026 23:02:28 +0000
Manifest this update:     Sat 28 Feb 2026 23:02:27 +0000
Manifest next update:     Sat 07 Mar 2026 23:02:27 +0000
Files and hashes:         1: 2CWolzNYl8B-dpODimvyAnZYDwM.crl (hash: iW8Ac/KPE6UuNufMPYc38HJwizij8t6Ukyyo/PSg+H4=)
                          2: E6ECE6E6104C11EC9074E586C4F9AE02.roa (hash: 77Yfn2zZf59rOT/IVF3xBzYxwVSoxkPTednWePSlyc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl
                          rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683 (0x693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199DE2, serialNumber=D825A897335897C07E7693838A6BF20276580F03
        Validity
            Not Before: Feb 28 23:02:27 2026 GMT
            Not After : Mar  7 23:02:27 2026 GMT
        Subject: CN=69a37404-443a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6f:20:42:7d:74:6e:01:30:66:36:55:d6:29:
                    24:38:5a:4d:a3:2f:c6:10:44:2d:9a:92:0b:ac:44:
                    d3:6c:63:40:b7:d7:b5:07:00:5a:d4:cd:cb:28:69:
                    e5:fa:02:61:de:e9:0e:1e:ef:be:a3:5b:1f:3f:77:
                    49:d7:5e:fe:92:d1:16:20:1a:90:ad:8e:b8:e9:6b:
                    1c:18:41:8b:43:24:26:76:a8:bf:6d:90:eb:bf:c5:
                    b3:31:92:7a:47:40:61:4a:d0:76:25:ba:09:6a:ab:
                    b3:25:51:05:86:ee:3c:f5:70:f1:7b:96:ef:bf:11:
                    d2:5f:ab:4e:74:5a:1e:83:a2:ed:17:36:2a:d6:d3:
                    57:e6:8a:48:bd:81:68:01:c7:9b:1e:26:97:b1:95:
                    1c:ae:23:56:7b:a5:32:ba:3c:ac:06:bb:4c:d5:a7:
                    29:cf:61:ad:24:78:6b:2d:32:17:fa:60:2f:0b:94:
                    f1:71:2d:10:bd:ce:1f:bd:9f:c6:8c:ea:16:76:cd:
                    80:81:39:69:72:49:a8:3c:3d:fb:3a:05:a6:e6:d4:
                    26:7d:75:40:82:30:c1:38:3b:70:18:78:9e:7c:8b:
                    1a:13:98:09:65:ab:83:b9:da:3a:cf:ed:fb:2f:22:
                    26:e0:d6:c7:40:ea:ac:fd:27:61:05:a1:72:df:90:
                    0d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A4:D1:9D:F9:D9:51:3A:81:14:63:1F:C7:7E:74:5B:86:56:A7:6D
            X509v3 Authority Key Identifier:
                keyid:D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:cc:c3:4b:98:0c:ed:c9:a9:f9:3a:e1:69:cf:f9:d4:4b:37:
         e0:0b:54:01:00:88:15:0b:7b:ad:99:8e:00:e3:4c:33:8e:71:
         db:c7:9c:66:a0:b4:46:4e:2d:84:51:2b:65:b7:17:c6:0a:45:
         0c:59:ae:13:94:e4:b8:97:3d:0a:39:2a:31:09:90:08:01:d8:
         80:7e:9e:91:7f:e9:42:2f:28:87:33:3b:24:88:1c:7b:fa:68:
         2e:0d:39:a4:be:e6:b0:a1:c3:59:1b:66:9f:ae:9f:92:37:bb:
         a2:af:04:39:b3:a3:53:ec:38:64:49:f3:13:53:35:29:67:1d:
         cb:24:9e:3a:b4:4b:b7:be:b0:61:39:2f:b6:1e:76:bf:3d:49:
         20:f2:b7:99:bd:6a:b8:76:03:03:a6:1a:d9:e3:99:96:0b:b3:
         14:6f:95:4c:ee:18:4a:fe:fc:7a:f8:84:ba:3f:51:de:37:7b:
         dd:56:4d:34:90:3f:fe:c9:96:54:48:0f:07:7e:22:df:74:be:
         4a:fa:2f:ab:e4:93:88:4d:74:01:84:0b:cf:14:01:dc:87:22:
         63:17:87:23:00:37:29:2c:3b:9b:05:b8:48:6a:b3:ae:ca:f1:
         4a:27:09:bf:62:14:e3:6f:64:cf:c1:d9:8d:b7:cb:5f:0d:6d:
         a7:73:d0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:23:20 2026 by rpki-client