Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
File:                     2-mhAMSp66SyzRomcTKN73j-duE.mft (raw, json)
Hash identifier:          iJxxJTyTNHbb+UOwLkVTFH03b/wuGwHauDRZxcnShVY=
Subject key identifier:   0B:2A:75:99:3F:E8:D5:AB:0B:4F:64:25:F7:4C:D3:76:7E:D6:02:5D
Authority key identifier: DB:E9:A1:00:C4:A9:EB:A4:B2:CD:1A:26:71:32:8D:EF:78:FE:76:E1
Certificate issuer:       /CN=A91AB74D/serialNumber=DBE9A100C4A9EBA4B2CD1A2671328DEF78FE76E1
Certificate serial:       06A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
Manifest number:          069F
Signing time:             Sat 28 Feb 2026 22:57:48 +0000
Manifest this update:     Sat 28 Feb 2026 22:57:48 +0000
Manifest next update:     Sat 07 Mar 2026 22:57:48 +0000
Files and hashes:         1: 2-mhAMSp66SyzRomcTKN73j-duE.crl (hash: My02UnYxttgPEhoOMWASQcGQAG92M3cNwIJBrNsREYc=)
                          2: A0D57302A33D11EBA479491CC4F9AE02.roa (hash: A81REE+McXIeM/wALpzv2Qsq9bY8357xYUyeneNAnBo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.crl
                          rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1700 (0x6a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB74D, serialNumber=DBE9A100C4A9EBA4B2CD1A2671328DEF78FE76E1
        Validity
            Not Before: Feb 28 22:57:48 2026 GMT
            Not After : Mar  7 22:57:48 2026 GMT
        Subject: CN=69a372ec-4735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c9:c2:6e:3a:2b:80:75:ce:4b:fa:0b:dd:27:
                    28:38:98:20:e4:ae:b9:a6:68:c0:51:7d:b5:9b:58:
                    64:a8:b6:3d:d2:cc:bd:f7:aa:c9:98:1f:60:b1:53:
                    18:03:ac:2e:2d:80:8d:92:ad:ed:3e:2d:a9:5d:7c:
                    ec:c6:5f:62:41:ee:a9:e5:da:d3:6c:ae:89:f2:b0:
                    ff:55:89:09:a2:b8:b6:5f:2b:c5:49:a3:93:1e:22:
                    b9:4d:85:96:a0:7f:8e:2a:54:3c:22:0e:26:6d:92:
                    ca:6a:93:49:31:9c:11:fe:ba:23:7a:9b:3e:69:31:
                    12:8c:e4:c6:9c:14:4b:9f:66:f2:e3:db:ce:29:83:
                    4e:fd:32:69:52:8d:2b:d6:04:c9:b0:fb:a8:96:8a:
                    0b:92:0b:b0:da:99:b4:ac:9a:8b:88:be:56:e4:ca:
                    a8:18:16:8b:f4:d9:1e:06:ac:2b:ed:59:58:03:77:
                    5b:2e:86:b1:9d:b5:d1:40:c1:0a:c5:64:9b:1f:82:
                    de:21:53:82:df:80:5e:1a:4a:ec:8c:4d:9e:21:68:
                    13:f2:63:d0:e3:5f:b7:8e:ee:a3:1d:51:08:95:30:
                    85:d3:dd:56:1e:f5:67:bd:d2:5c:f2:e6:c7:b5:af:
                    35:2f:a3:1f:9c:51:2e:39:f6:00:5d:a4:7b:cf:2c:
                    a0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2A:75:99:3F:E8:D5:AB:0B:4F:64:25:F7:4C:D3:76:7E:D6:02:5D
            X509v3 Authority Key Identifier:
                keyid:DB:E9:A1:00:C4:A9:EB:A4:B2:CD:1A:26:71:32:8D:EF:78:FE:76:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ae:0c:62:2b:2e:c1:aa:25:3a:b5:6c:2a:f9:27:a0:2e:78:
         33:23:bb:c9:82:9b:75:79:1a:9b:b7:c5:01:f7:92:b4:78:08:
         7c:5f:4a:22:4e:f6:b3:7f:18:da:7a:0b:4b:61:8f:3d:19:71:
         74:77:22:69:9c:39:10:8f:39:44:c9:54:b6:94:f9:2f:7d:59:
         9a:01:83:27:26:d6:34:df:a5:b8:79:94:59:0c:92:a3:16:9f:
         dd:d2:5e:fb:0f:de:48:7b:ca:e0:59:49:ac:8b:58:7d:14:35:
         8f:54:c6:f4:9e:89:42:72:dc:62:c1:eb:19:50:96:1d:0e:ba:
         32:72:c2:9a:3a:98:ff:20:63:c9:38:89:fd:fa:d4:07:46:e2:
         47:ca:dc:01:53:02:6d:f7:5b:5c:27:ba:6e:1e:79:5d:16:13:
         53:0e:75:17:a3:d8:ca:db:32:e4:e8:d8:f3:62:8a:4f:4f:8e:
         8e:93:28:60:5b:7c:02:c9:03:a9:1c:14:68:60:53:c6:8b:68:
         d9:9a:2f:81:dc:40:0f:64:83:31:fd:2d:77:0a:0c:dd:25:24:
         fd:db:e9:84:3a:2e:16:86:fe:b9:67:13:c2:45:d8:06:b1:ab:
         8a:43:3d:c7:81:26:c0:a2:66:66:26:64:13:47:20:54:f6:ef:
         f1:cc:9a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:47 2026 by rpki-client