Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
File:                     2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json)
Hash identifier:          gX614Z9gKxVKKXpEckhkuMKL6aczrIPCy1hoxKtZ+90=
Subject key identifier:   F6:2F:56:E5:87:6F:E9:7A:DC:EA:5D:04:E5:B6:5E:58:B8:D6:2A:A5
Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
Certificate issuer:       /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Certificate serial:       04CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
Manifest number:          04C6
Signing time:             Sun 01 Mar 2026 00:31:22 +0000
Manifest this update:     Sun 01 Mar 2026 00:31:22 +0000
Manifest next update:     Sun 08 Mar 2026 00:31:22 +0000
Files and hashes:         1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: r7kRBGmMxsU4sNuHYBS7VVT36g47GJLR+widNQmFM4M=)
                          2: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: XCMHw1WVIEMLU74HMo1cPz+oPVQmbB2z+VPLna5yZDg=)
                          3: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: wqkVYDxZ6HBCzKePRiH5zEB/9I/WLKOX58mvYx8PpGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
                          rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:31:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1228 (0x4cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
        Validity
            Not Before: Mar  1 00:31:22 2026 GMT
            Not After : Mar  8 00:31:22 2026 GMT
        Subject: CN=69a388da-8ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:42:88:7e:e1:b8:fa:dd:cd:c7:cf:08:ce:72:
                    93:29:62:76:81:62:98:5d:41:77:40:8f:c2:5e:93:
                    2b:9f:40:fe:d4:cb:e2:f6:a1:f2:1f:2d:2f:d9:be:
                    2c:68:25:2f:30:ca:5a:b5:cd:07:45:ff:90:4b:08:
                    5a:57:51:1d:04:38:92:ce:b1:21:9d:b1:fc:06:f9:
                    9b:62:e3:e1:80:34:89:43:53:a9:2e:2e:d9:dc:20:
                    f7:17:3a:5b:06:a9:31:c5:aa:fc:14:56:8e:16:a6:
                    fd:89:bb:07:6d:a6:33:56:5f:ae:67:c4:13:d0:d8:
                    2e:13:0f:d6:56:16:c5:68:56:87:51:d6:97:05:34:
                    2b:db:47:1f:69:e5:7f:a7:4e:6b:3e:fc:2a:45:9c:
                    2c:5e:2e:90:f5:d2:f1:48:67:23:a9:06:16:f9:49:
                    f4:57:a7:ea:c4:e8:4d:1c:22:53:e6:c8:fc:47:3d:
                    02:cb:ef:6c:f6:28:23:b0:6c:b0:15:e8:fd:43:59:
                    29:01:d1:c8:9b:a2:e1:f1:fe:3a:0c:98:4b:8f:d9:
                    7e:77:0c:61:7a:a3:cc:6b:16:d3:5e:36:08:8a:e4:
                    93:71:dd:21:8c:19:2f:f2:46:86:ed:c1:f5:ea:4d:
                    0e:53:78:e3:67:af:13:54:0d:60:d5:0d:6b:98:58:
                    c7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2F:56:E5:87:6F:E9:7A:DC:EA:5D:04:E5:B6:5E:58:B8:D6:2A:A5
            X509v3 Authority Key Identifier:
                keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:83:77:0a:60:b7:c0:92:27:6a:6e:23:ff:05:21:e8:c8:8a:
         8c:7e:9a:ad:8a:bc:fd:3e:8f:e6:fd:f3:5b:51:97:b3:ab:91:
         79:11:21:73:ab:ee:a4:7a:20:b8:71:ba:bc:93:6c:9c:72:54:
         12:e4:70:49:86:dc:b6:b7:4c:de:85:fe:bd:c9:5e:2d:0c:d3:
         6d:20:1d:5e:9f:bb:16:4c:88:7a:e7:be:61:3b:24:fc:95:9e:
         ef:ee:50:b7:45:ce:a7:7f:25:7b:d8:50:58:4f:b0:92:53:0d:
         b2:57:97:c0:a5:e6:e0:00:b6:de:6f:e8:9f:24:63:f6:29:4c:
         31:e9:3c:d7:79:be:01:e6:87:6f:25:54:e2:84:66:d1:44:ae:
         d1:5c:82:7e:0c:80:df:5e:41:ae:39:91:f5:33:6c:05:f4:e2:
         71:ae:51:de:a8:e1:4f:a9:af:1f:d2:40:58:77:9b:b0:84:1b:
         68:e0:d3:a5:cc:58:dc:df:a3:f5:59:22:30:19:f3:f5:31:11:
         f9:a4:04:64:43:4a:9e:ad:ca:08:3d:11:4e:4d:ec:4c:21:40:
         2c:69:49:e7:61:76:90:8e:23:97:17:76:ff:99:98:64:c2:3d:
         ae:c9:d8:ca:b8:83:fc:56:40:4c:e3:09:b3:fa:38:63:5b:55:
         35:cb:15:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:03 2026 by rpki-client