Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
File:                     C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json)
Hash identifier:          v/aaRJoB3Wwp0jlkPRJwnDkmGMQ5vAcbKQSsSNMbANY=
Subject key identifier:   3A:5C:BB:0C:2B:A4:C0:E3:C4:27:2D:36:7D:70:BE:F5:D2:E1:D7:E4
Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45
Certificate issuer:       /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
Certificate serial:       253E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
Manifest number:          2528
Signing time:             Sat 28 Feb 2026 15:46:45 +0000
Manifest this update:     Sat 28 Feb 2026 15:46:44 +0000
Manifest next update:     Sat 07 Mar 2026 15:46:44 +0000
Files and hashes:         1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: ekB3+GQfgrWyI+EiC3wqnJLvrgPn/wnQ1ZvLWKN9TGY=)
                          2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: gjGyoU6UehPX0w4evr1O57YIj1TJSqlSY6y93UsHPOc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl
                          rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9534 (0x253e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
        Validity
            Not Before: Feb 28 15:46:44 2026 GMT
            Not After : Mar  7 15:46:44 2026 GMT
        Subject: CN=69a30de5-af8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:b7:84:b0:40:df:c6:c8:a7:92:d9:12:d3:
                    8c:e2:31:30:7b:c6:7d:1c:f3:96:11:64:42:2d:36:
                    a6:ca:68:14:27:07:c7:79:49:ef:ea:40:41:7e:f2:
                    60:cc:eb:ae:63:2f:82:ae:e3:8d:bb:86:3f:89:88:
                    12:b0:62:fb:e8:df:10:e5:f8:00:3b:e4:84:1f:d5:
                    cb:c1:28:c2:e4:a8:65:ae:ef:55:1b:0e:8e:ef:dc:
                    c4:c6:96:74:69:cd:86:45:e8:60:a8:7a:40:47:2a:
                    04:23:69:e2:5b:5d:e0:06:c1:46:49:4c:f3:50:2a:
                    87:2c:e3:8a:58:fd:eb:54:24:99:b3:a8:2b:5e:f2:
                    e3:75:da:a5:8e:59:84:bc:e8:04:96:81:fe:93:63:
                    26:f4:f3:e1:c9:b1:43:05:54:36:92:50:13:39:ba:
                    fe:ca:75:4d:be:b2:7c:97:d0:62:75:be:cf:95:8f:
                    aa:fe:cf:f2:2f:92:af:fd:35:99:a5:45:52:90:07:
                    4a:18:11:01:36:7f:06:0e:10:52:d5:a8:1d:0d:50:
                    a8:7b:39:b3:6e:48:a9:db:14:b2:5c:f4:d4:ae:ce:
                    6b:e1:44:62:08:b5:de:af:5d:2a:fb:68:d3:5a:f0:
                    3f:71:1f:8f:32:c2:b4:7a:ae:48:69:f1:1f:c5:64:
                    24:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5C:BB:0C:2B:A4:C0:E3:C4:27:2D:36:7D:70:BE:F5:D2:E1:D7:E4
            X509v3 Authority Key Identifier:
                keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:36:3a:f4:6f:dc:0b:c9:c8:f7:a7:f5:fe:04:62:29:ca:f8:
         73:e8:6c:d1:9e:ed:83:30:9c:74:c1:e0:58:5f:ef:3b:43:9b:
         a8:6a:0a:ab:94:a4:f3:93:e6:43:7a:47:5b:be:2e:a2:bf:1d:
         fc:27:8b:05:28:b3:39:af:5c:be:a8:71:61:82:02:25:4c:0e:
         d7:51:1f:1c:e8:c9:d2:09:12:28:93:68:45:a9:50:64:a8:ea:
         87:8a:11:88:d1:7f:8f:19:0e:d8:50:c7:bf:75:0d:93:75:e8:
         71:76:64:ff:d3:23:a5:a6:ed:6b:b0:0f:16:71:33:23:c0:fe:
         30:7a:41:8e:d8:63:db:2b:99:47:b2:92:f9:99:6e:f5:5b:bd:
         70:95:c0:74:03:e2:98:35:67:60:86:4d:42:c6:e0:e8:15:cc:
         b3:55:3a:bd:30:ca:c2:6d:c6:48:1f:b1:7f:73:9d:66:2b:99:
         7b:81:8e:fa:3a:9f:e7:ab:6d:bb:7a:eb:13:49:0d:d4:6e:62:
         a8:45:b8:69:e5:ce:f7:57:18:e0:67:b4:6c:b8:d7:9a:1b:c2:
         4b:53:27:b5:8b:b9:53:fb:b4:a0:82:66:f0:e3:37:d8:89:37:
         93:74:93:9d:8b:70:bd:50:eb:e4:b7:68:68:6c:ff:ee:e7:20:
         ee:47:d3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:24 2026 by rpki-client