Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft
File:                     2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json)
Hash identifier:          xJNc/ES77nbFohPHqS1GsGTYH2Ymw1QCPa/et+AHNqQ=
Subject key identifier:   80:4E:6D:4D:9E:A3:34:FE:FF:55:FC:27:50:20:0D:30:6C:90:C6:A2
Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21
Certificate issuer:       /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321
Certificate serial:       02B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft
Manifest number:          02B0
Signing time:             Sun 01 Mar 2026 02:18:46 +0000
Manifest this update:     Sun 01 Mar 2026 02:18:46 +0000
Manifest next update:     Sun 08 Mar 2026 02:18:46 +0000
Files and hashes:         1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: eziypScsrcxyFGWuAkntddDEfBau7McikqEhiQXNUJU=)
                          2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: VRyCE3JIOzBpP9NZ2rEktKLNmOidYXbFC2ISWDAI10A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl
                          rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692 (0x2b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321
        Validity
            Not Before: Mar  1 02:18:46 2026 GMT
            Not After : Mar  8 02:18:46 2026 GMT
        Subject: CN=69a3a206-ce21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:5f:5e:73:2d:bb:2f:d6:cf:de:32:24:8b:
                    92:01:73:65:31:12:7b:1d:2d:f6:ae:e4:3f:0a:5f:
                    8d:e3:ae:8b:73:be:3c:4a:95:51:66:90:df:2b:a7:
                    a9:0e:a3:17:e5:19:b9:05:b4:52:76:33:ba:2e:e5:
                    09:f1:1a:45:a6:67:9a:5a:65:dc:70:b2:6f:c8:dc:
                    7f:13:29:fb:4b:6c:54:9a:3b:e8:8b:1c:eb:72:d1:
                    68:10:91:52:7d:85:23:b9:8e:55:a8:55:86:54:8f:
                    b0:b3:a4:93:de:69:b1:a5:bb:bf:3c:31:79:11:c0:
                    d5:60:b4:6c:c5:82:9b:fc:8a:bf:b8:90:b3:89:75:
                    4e:d0:a8:af:9d:e3:f0:2c:db:b3:22:64:7e:31:53:
                    15:6c:be:c1:ba:41:e7:d2:b7:9a:ab:69:34:20:73:
                    c9:0a:a3:21:86:e7:66:25:80:1a:10:73:e5:0c:91:
                    71:b5:77:64:01:99:ec:29:4a:6c:b0:b5:3f:73:c7:
                    4c:ff:f2:39:e5:d6:f6:ee:c2:14:50:c8:63:e2:2a:
                    8e:99:f7:0a:f0:cb:05:37:60:35:62:12:a5:00:79:
                    67:34:55:d0:f6:02:4a:76:d9:d4:50:bd:d8:54:2c:
                    11:a2:82:b6:6c:64:89:f2:40:2f:c3:44:3d:fe:86:
                    a8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4E:6D:4D:9E:A3:34:FE:FF:55:FC:27:50:20:0D:30:6C:90:C6:A2
            X509v3 Authority Key Identifier:
                keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fd:e4:9d:52:86:d4:ad:f7:d9:9f:5d:6d:34:26:40:e8:35:
         09:ce:c8:91:b4:2a:e0:fb:cf:62:a4:59:f9:f6:21:84:a8:c9:
         6d:a9:2c:1a:b7:26:cd:99:49:89:27:b1:ae:46:cf:dd:5c:0b:
         94:00:0e:72:7b:72:3a:64:6d:ea:eb:3a:aa:09:b4:1a:2f:91:
         30:63:43:25:de:2f:47:04:52:2d:28:65:07:b4:76:29:ac:c4:
         bb:09:c7:27:40:ee:b2:65:25:3d:c6:40:ee:27:a4:cb:93:59:
         3b:0e:8b:4c:5f:73:cb:28:35:31:eb:16:6d:78:01:53:33:eb:
         b3:49:d9:fc:63:bf:fc:ce:87:ae:a7:10:20:7f:86:81:c8:bc:
         94:db:1c:59:5c:9c:a9:c8:c8:d0:b6:14:7e:63:98:7c:99:36:
         bd:86:63:e9:e7:db:bd:07:f5:ba:97:6a:89:54:ad:a4:60:fb:
         2e:e7:eb:43:f8:42:5f:c1:85:9a:45:2f:bb:78:29:83:b4:fe:
         78:8c:ea:c1:7f:1a:53:12:25:60:5a:8b:11:e0:54:36:77:a5:
         8c:bb:d2:c3:25:d1:df:15:d0:f0:bd:d9:23:8f:10:47:0e:9d:
         dc:a3:9a:fc:9a:47:85:d0:6c:4f:ea:97:f6:41:35:96:40:90:
         fb:9f:6b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:57 2026 by rpki-client