Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft
File:                     2QDd8konYiv5ZDdX7byv-u4yHDc.mft (raw, json)
Hash identifier:          Jj/rPPGJ3qt5OYUgqkD2LIMHTGVKM9XfDU5FSw4zlcs=
Subject key identifier:   BF:58:ED:82:3E:87:BD:9A:34:4E:98:87:C5:B4:06:B5:A7:03:D1:FB
Authority key identifier: D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37
Certificate issuer:       /CN=A91C7773/serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37
Certificate serial:       0EF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft
Manifest number:          0ED9
Signing time:             Sat 28 Feb 2026 17:47:42 +0000
Manifest this update:     Sat 28 Feb 2026 17:47:41 +0000
Manifest next update:     Sat 07 Mar 2026 17:47:41 +0000
Files and hashes:         1: 2QDd8konYiv5ZDdX7byv-u4yHDc.crl (hash: ZgX1qf9xLXwwwwp+gaX5UosG+BfQj+6SuKfG1b+2N18=)
                          2: A47D2EC84C1E11EEBA8CDB4BC4F9AE02.roa (hash: k08HrzQA4orJaDMpNJ4cYiGD96bVzWAF2REZWm3ObQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl
                          rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3828 (0xef4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7773, serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37
        Validity
            Not Before: Feb 28 17:47:41 2026 GMT
            Not After : Mar  7 17:47:41 2026 GMT
        Subject: CN=69a32a3e-1c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:81:1e:6c:9f:d5:88:97:0c:8f:2c:32:50:b5:
                    ff:1b:9c:34:aa:16:a0:18:fc:0b:a1:88:ca:62:35:
                    f4:36:62:73:9c:f8:29:90:fb:2b:c1:bd:70:b8:f7:
                    aa:88:97:c2:bb:f6:0f:cd:8f:86:1b:33:05:cb:10:
                    02:3e:44:ce:04:d8:6b:ae:19:23:e0:f6:99:83:90:
                    b1:a9:d7:6e:8e:00:9a:c1:3d:91:cf:d4:17:7b:14:
                    b7:5e:54:04:55:e5:e6:e8:8c:1a:d1:fb:f4:78:12:
                    15:dc:d3:74:36:d4:43:76:4b:53:a9:cb:38:23:98:
                    ab:4d:4a:fe:c8:5a:d2:db:64:b3:0e:d5:b4:e7:7d:
                    f3:0c:d6:71:81:18:80:5a:78:0e:5a:78:cb:e0:a2:
                    ec:1e:0d:8e:77:ba:2b:f0:b2:71:d7:36:ff:da:1b:
                    0e:2c:49:5d:63:1b:2d:9b:38:e6:7f:ec:46:01:90:
                    cc:4b:e1:b0:fd:c7:81:f9:22:56:dc:ea:9a:56:7f:
                    f7:2a:75:a7:59:85:2e:a2:6c:f9:e2:07:a2:2f:1b:
                    a2:4b:d8:d2:b7:71:05:ab:85:d2:f5:cb:4e:6c:40:
                    da:a8:d7:14:99:a7:bc:7a:0e:b3:79:8b:2c:56:07:
                    35:ba:ee:95:17:d5:22:96:b0:d3:21:01:bc:5e:9d:
                    89:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:58:ED:82:3E:87:BD:9A:34:4E:98:87:C5:B4:06:B5:A7:03:D1:FB
            X509v3 Authority Key Identifier:
                keyid:D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c0:10:89:b7:ed:29:68:b7:60:dd:ee:12:08:5b:f4:e4:09:
         01:1b:21:a8:3b:fb:dc:b3:19:d8:91:80:64:8d:7e:4e:4c:a4:
         0d:ac:6d:81:7f:4a:68:08:d3:4a:92:54:b7:49:9b:3c:a9:a6:
         45:03:74:f2:72:be:f8:22:e5:2f:ff:bf:6f:a2:f1:5f:07:db:
         61:e3:bc:60:dd:aa:50:36:60:06:00:c5:25:4c:4a:93:1d:f7:
         c1:6c:79:62:72:63:17:fd:9b:46:de:ea:b5:08:4b:f6:02:2c:
         c3:e3:03:3b:d8:a1:32:0b:7b:8a:da:ad:7d:6b:7d:b6:86:a8:
         0b:74:e2:72:9e:57:66:26:e7:eb:37:b8:66:b1:ab:62:c5:98:
         ad:05:1a:40:0e:54:22:ce:d6:99:fe:aa:8a:3e:82:c5:a9:43:
         4c:bf:22:07:ab:2d:83:54:e6:03:00:0c:f9:92:60:13:45:16:
         ee:07:88:88:ba:b9:21:36:43:93:72:61:f9:4d:f3:69:28:7c:
         ad:98:46:8f:24:53:75:2e:76:5c:13:aa:d4:64:ca:d3:1d:ad:
         75:1e:38:21:cb:26:6c:11:37:56:0e:35:44:c0:e2:a4:b2:48:
         5e:0c:ed:59:22:2a:11:81:7c:2d:bd:72:98:ef:98:bb:dc:fb:
         eb:b3:2b:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc3NzMxMTAvBgNVBAUTKEQ5MDBEREYyNEEyNzYyMkJGOTY0Mzc1N0VEQkNBRkZB
RUUzMjFDMzcwHhcNMjYwMjI4MTc0NzQxWhcNMjYwMzA3MTc0NzQxWjAYMRYwFAYD
VQQDDA02OWEzMmEzZS0xYzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3oEebJ/ViJcMjywyULX/G5w0qhagGPwLoYjKYjX0NmJznPgpkPsrwb1wuPeq
iJfCu/YPzY+GGzMFyxACPkTOBNhrrhkj4PaZg5CxqddujgCawT2Rz9QXexS3XlQE
VeXm6Iwa0fv0eBIV3NN0NtRDdktTqcs4I5irTUr+yFrS22SzDtW0533zDNZxgRiA
WngOWnjL4KLsHg2Od7or8LJx1zb/2hsOLEldYxstmzjmf+xGAZDMS+Gw/ceB+SJW
3OqaVn/3KnWnWYUuomz54geiLxuiS9jSt3EFq4XS9ctObEDaqNcUmae8eg6zeYss
Vgc1uu6VF9UilrDTIQG8Xp2J1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9Y7YI+
h72aNE6Yh8W0BrWnA9H7MB8GA1UdIwQYMBaAFNkA3fJKJ2Ir+WQ3V+28r/ruMhw3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc3My9BRDMyMjM3Q0Ey
RTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllpdjVaRGRYN2J5di11NHlI
RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJRRGQ4a29uWWl2NVpEZFg3Ynl2LXU0eUhEYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Nzc3My9BRDMyMjM3Q0EyRTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllp
djVaRGRYN2J5di11NHlIRGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmcAQibftKWi3YN3uEghb9OQJARshqDv73LMZ2JGAZI1+TkykDaxtgX9KaAjT
SpJUt0mbPKmmRQN08nK++CLlL/+/b6LxXwfbYeO8YN2qUDZgBgDFJUxKkx33wWx5
YnJjF/2bRt7qtQhL9gIsw+MDO9ihMgt7itqtfWt9toaoC3Ticp5XZibn6ze4ZrGr
YsWYrQUaQA5UIs7Wmf6qij6CxalDTL8iB6stg1TmAwAM+ZJgE0UW7geIiLq5ITZD
k3Jh+U3zaSh8rZhGjyRTdS52XBOq1GTK0x2tdR44IcsmbBE3Vg41RMDipLJIXgzt
WSIqEYF8Lb1ymO+Yu9z767Mrbw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:34 2026 by rpki-client