Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
File:                     N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json)
Hash identifier:          GmA8gVCncyJinkwefYDQZcOIcTfipmpLPjeIy6l5JxM=
Subject key identifier:   0C:8E:1B:16:7C:6C:02:25:7B:92:0A:FD:12:AC:89:D7:30:E0:7C:A4
Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
Certificate issuer:       /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Certificate serial:       02CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
Manifest number:          02B2
Signing time:             Mon 02 Mar 2026 00:29:24 +0000
Manifest this update:     Mon 02 Mar 2026 00:29:22 +0000
Manifest next update:     Mon 09 Mar 2026 00:29:22 +0000
Files and hashes:         1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: ypc1BK/x3QiEMlYuzMn+kIGSzV4DVM1HrwZjW6GP8Js=)
                          2: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: yGk/vqcwYlqrGgMj3fbRLifOH/23m2bl0HS4VWGoMYs=)
                          3: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: N8hOIX9lBnkWNR17KITPRqZldmiFlqdcpwwzsFLdg0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
                          rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
        Validity
            Not Before: Mar  2 00:29:22 2026 GMT
            Not After : Mar  9 00:29:22 2026 GMT
        Subject: CN=69a4d9e4-8ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:62:b5:17:46:3d:52:cf:e7:66:cf:1f:7f:d0:
                    70:ad:04:4f:ad:1e:c0:db:c1:93:f3:7b:e1:55:89:
                    8d:2c:8f:2f:ad:e3:4d:72:46:c8:8c:57:e2:7a:22:
                    71:12:36:27:26:c1:de:88:7b:07:95:d0:0b:73:a5:
                    c1:e9:c9:47:2b:0b:f6:c1:49:17:8a:32:8d:e0:02:
                    17:db:67:09:ee:eb:dd:03:fb:1c:5a:1a:22:af:ed:
                    25:7a:f0:f9:1d:8d:5d:bf:ff:5c:11:ba:34:45:46:
                    1d:c5:c6:f5:60:52:b6:0e:9f:a1:b0:b5:87:49:df:
                    f4:05:29:0b:b3:94:1b:f9:b0:a4:8d:52:24:f7:87:
                    44:f6:0b:0b:a2:3e:24:a3:29:28:53:a0:c2:e1:12:
                    29:ed:3b:f1:a4:22:ca:ec:dd:1e:68:5e:97:dd:08:
                    bb:fb:02:b3:f1:fc:a9:54:81:69:8e:e6:3b:d5:22:
                    14:a4:69:8c:c1:9f:de:b7:36:f3:bb:0e:d1:c1:5f:
                    d9:3a:9c:64:64:d1:f3:71:6a:73:96:9a:30:2d:eb:
                    e3:6a:87:13:46:e6:7b:ad:c2:e2:14:34:48:5f:dc:
                    e4:77:f3:4e:47:c0:d9:0a:78:2e:a1:cc:89:5b:ba:
                    12:9a:bc:1f:6d:8c:0b:6e:a5:dd:ca:54:b1:51:38:
                    29:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8E:1B:16:7C:6C:02:25:7B:92:0A:FD:12:AC:89:D7:30:E0:7C:A4
            X509v3 Authority Key Identifier:
                keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:5d:5e:c3:2d:6a:cb:3a:cc:22:00:2d:43:c7:6c:ef:6f:9f:
         b4:3f:de:2a:a9:50:32:5c:d4:f8:87:77:a6:55:f1:b0:83:69:
         e9:34:bb:64:5d:44:ea:96:12:fc:a7:d8:9a:6f:ce:b4:d8:0c:
         43:8b:bf:38:d2:b7:00:90:12:50:4d:b4:95:d3:4a:ff:ef:c2:
         fc:29:e1:aa:5f:46:83:9f:c4:a3:7e:7a:47:dc:f0:72:42:72:
         f1:a8:d3:4e:75:3b:25:86:d0:16:6f:d4:1b:b9:cc:09:30:d1:
         6a:7e:8a:c0:b4:40:89:84:b8:d8:6b:79:49:b8:06:85:2a:31:
         5b:d4:20:09:b2:a1:89:01:f0:6b:32:a3:c0:f1:cd:30:09:3c:
         30:c1:68:2b:cb:a9:a2:3d:3f:d2:7b:26:13:ff:5c:7a:66:6b:
         4f:50:56:91:3e:d3:5f:6f:1b:eb:25:9c:93:12:44:f6:c2:93:
         ee:a1:a4:c1:2a:b1:e5:36:06:04:26:ad:f7:11:47:6f:b8:88:
         34:96:23:ad:e9:3c:f6:20:7a:f7:16:a4:8d:11:d9:3b:05:95:
         ec:e7:7b:a8:32:a2:d3:9a:c0:cf:3a:16:bd:9d:c9:17:21:34:
         b0:70:02:7d:e3:99:3d:07:88:ee:9e:1b:64:e7:7b:66:8a:1f:
         c9:7d:99:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:22 2026 by rpki-client