Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
File:                     4xZnlgSAzwfjwi15DeTiAe9wQNs.mft (raw, json)
Hash identifier:          /JpkfMcQSJtTDqo7JQ4sTt5dCD+x6qdqIYCCXo+jmWk=
Subject key identifier:   08:5F:4A:3F:09:85:2C:F4:60:36:95:BC:98:47:82:2C:8C:EA:8B:2D
Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB
Certificate issuer:       /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
Certificate serial:       02C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
Manifest number:          02B2
Signing time:             Wed 07 Oct 2026 01:54:36 +0000
Manifest this update:     Wed 07 Oct 2026 01:54:35 +0000
Manifest next update:     Wed 14 Oct 2026 01:54:35 +0000
Files and hashes:         1: 4xZnlgSAzwfjwi15DeTiAe9wQNs.crl (hash: y/E3ehVEWaQMz047GvxZddnGp+bCMJ2BO1WqLcyDqIg=)
                          2: 0ADA583C5DB911F0A54D4C6FC4F9AE02.roa (hash: vtHqwtSvpKd0UZw+IVp/WFTlhLrYLk265RmDqE6z7KQ=)
                          3: 0BBC997C5DB911F0A54D4C6FC4F9AE02.roa (hash: wtwpRqnqeYQSTF5tuYeTMKBYPSpu+aJ0HfsSDYw4/oQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl
                          rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706 (0x2c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B310, serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
        Validity
            Not Before: Oct  7 01:54:35 2026 GMT
            Not After : Oct 14 01:54:35 2026 GMT
        Subject: CN=6ac5a65c-b160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:36:84:fb:30:85:46:d6:74:0f:6f:c5:82:f2:
                    ab:fe:59:87:3a:0a:b5:d5:30:17:03:ff:1b:30:30:
                    05:e4:65:99:fb:97:3a:7d:7c:a0:34:bf:a1:fb:d6:
                    ee:c9:e6:23:a1:a0:e6:37:b9:84:aa:2a:b3:bd:3a:
                    71:17:8f:54:a2:ba:be:f0:b2:9d:76:0d:35:9a:32:
                    f4:6a:61:f4:2e:73:c3:7b:f4:4e:a5:31:ab:b2:36:
                    65:ee:ff:13:34:53:7c:33:d6:bd:67:27:25:6a:ed:
                    67:ae:92:b7:dc:24:f3:10:a9:11:81:76:b9:6d:27:
                    e5:71:10:7f:d1:09:2b:d0:6f:bd:c5:ed:7e:29:38:
                    ee:3c:83:72:1d:c8:5f:b7:4c:43:84:30:e3:81:7f:
                    ab:da:52:76:39:cf:32:00:b3:07:9a:98:e5:1c:8b:
                    c2:07:42:2b:c2:f9:5d:9d:4a:e9:6e:fc:53:08:82:
                    d6:d0:a6:4a:92:21:2b:f5:a4:c2:59:20:9e:ff:7d:
                    b7:55:11:64:f9:83:b8:7b:ee:4d:fb:f9:6a:21:85:
                    38:4f:26:3a:0e:5b:71:07:b7:3e:d7:a8:c9:03:41:
                    4f:85:5d:80:9c:b5:16:c9:c4:44:65:b6:f3:fc:b2:
                    aa:24:ec:73:4c:da:c2:fc:39:97:38:a4:bc:ab:a6:
                    ef:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5F:4A:3F:09:85:2C:F4:60:36:95:BC:98:47:82:2C:8C:EA:8B:2D
            X509v3 Authority Key Identifier:
                keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:86:b9:d1:e2:26:9a:ac:f4:bd:aa:0d:f3:52:fe:fa:76:25:
         2c:21:9a:1a:d0:f1:b5:5b:c6:f2:06:aa:b4:f4:21:c4:c3:32:
         f5:20:f7:b3:de:5a:f3:7a:c6:28:d2:b5:6a:69:fb:88:fb:25:
         45:c9:9a:30:91:5c:32:53:f1:bd:20:15:e8:e3:47:ce:d8:d3:
         77:bc:81:70:6e:4a:21:7b:b5:0f:7b:69:5d:2f:13:da:22:72:
         78:30:f4:54:e5:8b:4a:23:cd:89:a0:20:e7:4b:41:e5:19:30:
         0b:bb:4d:41:25:91:19:3c:aa:06:f9:c0:b6:2c:a2:8c:a8:5c:
         2e:63:73:4d:64:3a:86:20:05:fa:90:b2:16:7e:f9:b5:cd:c5:
         14:db:b4:bf:62:25:cc:5c:63:b1:6f:e2:a5:a4:82:3e:f0:73:
         d0:f6:f9:99:72:e6:f6:f1:9d:e5:cd:d2:1a:64:a3:2a:e4:d3:
         fb:f7:a5:45:44:c2:4a:3b:9f:7e:d0:a3:b3:56:6c:4c:b7:a0:
         cb:2d:cb:c4:cc:61:a9:60:99:b4:21:b3:8b:48:38:7b:f6:dc:
         76:04:77:d6:bb:ac:73:c6:3d:b7:42:cf:fd:09:5f:38:d4:46:
         b6:7b:aa:23:df:e6:65:ff:f8:d3:d4:7e:22:a0:6a:8d:4a:8b:
         ef:35:3f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:25:14 2026 by rpki-client