Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
File:                     Sr2iSte9no2c77NZONCoeIBMYuQ.mft (raw, json)
Hash identifier:          MtTGSk/muga8+N6oHYQLIPl/sfe7BEg4D5sZnsPX4uQ=
Subject key identifier:   A8:AD:F7:ED:74:48:93:E7:02:00:2C:02:02:66:3E:B7:B0:F3:E7:E1
Authority key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
Certificate issuer:       /CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
Certificate serial:       112B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
Manifest number:          1111
Signing time:             Sat 28 Feb 2026 17:21:49 +0000
Manifest this update:     Sat 28 Feb 2026 17:21:49 +0000
Manifest next update:     Sat 07 Mar 2026 17:21:49 +0000
Files and hashes:         1: Sr2iSte9no2c77NZONCoeIBMYuQ.crl (hash: fT7kidPoxuvRTdHVMxOsunQUFxeMjngWVIc4rgeVOxs=)
                          2: 60E695B6C52A11EE80D54071C4F9AE02.roa (hash: EbivVKsv2oyupGDtV6dF4T5ILVyhqV2iONhViZoJNxs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4395 (0x112b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE096, serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
        Validity
            Not Before: Feb 28 17:21:49 2026 GMT
            Not After : Mar  7 17:21:49 2026 GMT
        Subject: CN=69a3242d-b225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:09:c5:c9:99:45:2f:1a:39:7f:77:a6:db:2e:
                    bf:b7:5e:e8:8c:d1:c5:88:8e:dc:d7:33:87:70:1e:
                    33:3b:3d:04:18:8b:5e:f9:b7:aa:3c:1e:65:bc:1c:
                    80:91:00:b7:d6:91:2b:c4:be:bb:a1:90:29:6b:2e:
                    a4:4f:1c:b9:0b:be:cc:4d:e4:e4:e3:bb:e7:57:36:
                    3f:e0:e7:f3:66:31:b9:6d:2a:d2:47:18:0a:a9:3c:
                    8f:8d:c6:65:72:4d:10:1e:67:0a:cd:19:6b:ea:6d:
                    ee:8d:da:65:ba:26:26:bd:4c:dc:d4:87:e6:3d:2d:
                    e4:5b:25:bf:51:63:0c:c9:06:aa:5c:61:fa:71:2f:
                    f6:bf:be:0d:0f:8e:14:87:fe:d6:c1:d3:4e:43:ba:
                    42:49:b1:39:d5:ed:75:94:8e:3d:27:53:5e:e3:a4:
                    92:ce:59:51:2b:a7:cb:e5:dd:da:e4:96:59:e0:70:
                    f4:81:35:1f:0c:47:bf:b9:b3:8c:9d:46:ad:fc:0d:
                    10:a8:2d:bf:fd:6d:0d:b0:ed:ac:a4:e1:0d:1b:e7:
                    61:ed:be:ed:04:77:e2:03:24:f5:b8:ad:68:ae:29:
                    45:f7:48:9f:8f:8c:9c:33:d6:9b:54:13:b2:20:50:
                    9f:b2:c4:42:e9:2d:54:62:5b:66:97:07:ad:06:d6:
                    de:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AD:F7:ED:74:48:93:E7:02:00:2C:02:02:66:3E:B7:B0:F3:E7:E1
            X509v3 Authority Key Identifier:
                keyid:4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:61:f3:75:fd:e3:82:da:c0:23:3c:22:14:22:d3:b9:5a:31:
         6d:77:fc:70:3f:03:9c:97:b0:24:d8:42:bb:f7:0f:74:4f:44:
         a2:3c:2c:c6:e1:b3:b7:a1:49:04:0f:65:e1:97:1f:4f:03:90:
         10:3f:d5:43:35:b1:58:d9:ef:8f:ba:c0:6b:7c:de:87:2d:91:
         4a:b4:38:ad:7a:02:6d:48:bb:de:a5:e9:78:2d:51:3a:a7:dc:
         3c:30:a6:89:9f:72:ae:3e:18:b2:43:2e:56:2e:55:2a:7e:65:
         bb:98:20:21:c5:0d:44:85:ab:7b:79:58:15:dc:1f:40:9a:59:
         b3:8b:ea:4b:c1:1c:36:a2:63:42:79:63:d3:85:4a:c1:53:db:
         18:1d:d7:f0:fb:de:7c:46:59:8d:bf:e5:44:c5:72:04:d7:c0:
         5b:46:42:bb:6f:a6:53:bb:0a:4b:ba:59:fa:9f:70:1b:26:8e:
         af:0e:dd:a0:a9:7e:c3:73:4a:fb:cd:4a:45:d8:bb:41:6a:be:
         3e:cf:2b:26:78:29:48:5d:7c:0c:93:36:bd:74:b6:1c:da:d8:
         25:68:e7:82:5f:5d:65:3c:a8:a1:d9:38:fe:2b:d6:56:71:0d:
         a9:cc:3a:46:32:da:e5:e0:c9:d4:60:63:9e:7d:4e:b8:e5:f0:
         c7:2e:82:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:10:12 2026 by rpki-client