Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
File:                     mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json)
Hash identifier:          OaUoMId6nSZ/ONLRPusw5RtjCubYr/HpjsV79mJNOvo=
Subject key identifier:   AB:0C:13:22:FA:7E:33:D2:C8:98:08:ED:BB:56:10:A7:A8:FA:77:C2
Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23
Certificate issuer:       /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23
Certificate serial:       06CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
Manifest number:          06C2
Signing time:             Sun 01 Mar 2026 22:39:28 +0000
Manifest this update:     Sun 01 Mar 2026 22:39:26 +0000
Manifest next update:     Sun 08 Mar 2026 22:39:26 +0000
Files and hashes:         1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: 757uH1URHLBstMLBX1v1h5Izx02eem0Kvl7Un175qWA=)
                          2: 2CB68FE8943211F0B1116B74C4F9AE02.roa (hash: 3MyKsLacs+jSNFLg0g6siYMmeYjfiDOjgCzdQeB8N4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl
                          rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1741 (0x6cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23
        Validity
            Not Before: Mar  1 22:39:26 2026 GMT
            Not After : Mar  8 22:39:26 2026 GMT
        Subject: CN=69a4c020-0061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dd:32:77:1e:ed:de:bc:66:af:a7:ee:b8:44:
                    e5:3f:99:90:79:89:f2:af:16:dd:6a:4d:af:52:2c:
                    3f:b1:8a:76:3b:2e:4d:e9:2d:0c:46:67:6e:ca:80:
                    bd:c3:a4:8e:f6:64:46:ab:08:fb:73:04:c9:1e:1a:
                    76:2b:be:97:5a:ea:ac:16:d1:14:89:b4:f5:c0:ab:
                    c2:da:67:9e:a6:c1:d7:6f:fc:85:b8:b5:4c:4d:d4:
                    1e:94:30:c1:58:c6:d0:51:6e:53:fa:90:da:03:63:
                    fd:a6:77:b1:59:77:a2:a4:62:09:9a:fa:be:61:98:
                    87:f1:55:52:cc:50:fb:04:84:bc:16:ce:69:85:83:
                    e0:9d:33:23:b2:08:6c:d1:5b:45:3b:8a:cc:84:25:
                    a6:60:1d:04:a3:b5:1b:39:f5:de:7a:ed:7d:41:af:
                    6c:70:81:3c:95:bf:c2:76:29:75:eb:7d:c3:18:e3:
                    e2:94:4a:18:3d:c1:38:f5:bd:64:d0:55:d0:07:bb:
                    9f:da:58:77:6e:bf:d1:1b:0f:9c:88:a2:b1:bf:a4:
                    3b:2c:bd:6b:ac:93:06:7f:a1:b4:9c:e2:0c:9b:df:
                    e8:4f:33:d0:d5:86:b5:ba:d8:a6:13:79:39:f7:23:
                    ef:32:06:4a:07:72:04:64:18:2f:6e:6c:dd:6b:e1:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0C:13:22:FA:7E:33:D2:C8:98:08:ED:BB:56:10:A7:A8:FA:77:C2
            X509v3 Authority Key Identifier:
                keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:20:8b:8e:7f:55:de:63:dc:f7:35:07:23:b0:66:ec:3e:5a:
         d3:96:63:6e:83:b3:d1:f4:16:c1:d5:bb:27:b4:41:17:fa:4f:
         20:73:9e:d9:b1:79:b7:d0:21:46:8f:32:4f:34:0a:52:c4:80:
         b1:20:df:cf:6c:9c:da:55:42:ab:a3:8b:15:92:cb:79:ce:54:
         e5:f0:5b:d0:2d:d1:7f:10:a9:3b:40:f4:fa:8d:58:c3:84:c2:
         92:78:a2:61:0f:c2:bb:b0:1d:a0:db:c0:e8:dd:a4:1f:c0:75:
         bd:f9:0a:6b:61:43:82:92:c1:f8:ee:7a:59:5a:6a:c3:8a:65:
         5f:77:94:17:36:98:8c:31:2e:07:91:53:28:c9:8e:35:42:00:
         e4:13:c5:93:26:78:de:aa:2a:ad:66:9c:58:e5:3b:53:01:59:
         15:a9:d1:e5:fd:48:51:b7:80:88:23:43:ad:3f:2c:ba:d2:63:
         bf:28:e1:49:bf:0b:82:c8:82:5a:1b:7a:9f:85:6e:c8:76:0a:
         20:4a:f9:6e:07:96:b3:78:bf:4a:37:b0:4d:01:c5:72:d0:40:
         30:ea:b9:a2:72:14:1b:25:74:d6:6e:19:93:34:00:66:ae:7d:
         28:d7:4f:a6:b6:df:34:cd:31:06:fc:21:1d:bd:f2:37:f9:0d:
         ef:0e:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:26 2026 by rpki-client