Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
File:                     2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft (raw, json)
Hash identifier:          lL/tB+pJ5WAyApM+TvoxbdAMKa4l1bqL9EvZb4DiKY0=
Subject key identifier:   87:6D:A9:0E:5A:A1:9B:95:68:AD:EF:31:C8:21:C3:52:D5:24:83:AA
Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
Certificate issuer:       /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Certificate serial:       026F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
Manifest number:          0269
Signing time:             Sat 07 Mar 2026 00:10:35 +0000
Manifest this update:     Sat 07 Mar 2026 00:10:34 +0000
Manifest next update:     Sat 14 Mar 2026 00:10:34 +0000
Files and hashes:         1: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl (hash: TwRKnS0Nau2ZTO3MUhzmA3vQnzDHfhcrXTPbOb+SI4w=)
                          2: F060FF0E720D11EDA84BE02EC4F9AE02.roa (hash: bBLigJeGoxjmDkmt5bCcINVBCGyLUX4lsMZpAacSwXA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl
                          rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 00:10:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
        Validity
            Not Before: Mar  7 00:10:34 2026 GMT
            Not After : Mar 14 00:10:34 2026 GMT
        Subject: CN=69ab6cfb-6002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6d:63:29:7b:96:7f:7b:5c:72:a7:1d:b3:80:
                    59:17:d2:bf:f1:4d:a0:17:d0:4b:80:68:9c:ff:14:
                    e4:3f:4e:e0:be:39:f1:1a:5b:33:1b:51:9c:51:77:
                    98:56:64:e1:76:9d:40:25:f1:66:ea:88:01:68:c6:
                    5b:7e:b2:1b:af:e0:26:6a:19:f7:5f:31:73:50:42:
                    db:5a:12:8d:9c:20:c0:96:69:a9:5d:ba:ec:88:f8:
                    70:91:5c:b5:16:c5:54:2a:2a:3b:29:3f:a8:23:c2:
                    f0:fb:3a:b0:3f:f1:81:ae:4e:71:e6:93:14:90:8f:
                    21:c6:bc:fb:e2:ba:f9:8b:14:4d:2c:cc:24:44:25:
                    86:3b:96:eb:42:a2:07:1c:bf:47:75:e6:b7:c0:9f:
                    f9:70:5c:be:c2:f8:b6:e6:f7:c6:7e:aa:5b:5d:b1:
                    51:cb:24:18:b5:2e:3d:3c:02:e8:03:a6:4d:af:a3:
                    ba:a9:a7:94:35:96:24:e3:ec:2a:2f:b9:9a:4b:08:
                    64:06:c5:bd:75:ae:44:43:86:0b:4a:6d:27:f0:0a:
                    d5:3b:1b:32:ae:7d:1a:b0:35:27:aa:ce:95:ca:be:
                    08:7d:0d:0d:ba:9d:75:fc:c4:c3:02:63:3a:ba:3a:
                    1e:2a:0a:83:fb:22:2a:be:50:ba:5d:cb:3d:c3:ba:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6D:A9:0E:5A:A1:9B:95:68:AD:EF:31:C8:21:C3:52:D5:24:83:AA
            X509v3 Authority Key Identifier:
                keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ba:ed:db:a3:c5:1e:77:6b:d0:c7:2d:8a:89:12:ed:05:21:
         0f:ab:17:a6:2f:71:33:99:f3:89:12:ff:1d:05:d7:42:b7:52:
         68:e1:36:5a:ac:fb:54:32:4c:29:c1:06:fd:e2:9e:05:24:6d:
         00:1c:3c:a3:dd:05:b7:56:64:7f:f1:17:95:da:62:8e:01:80:
         77:2c:05:74:e6:76:6f:73:55:a2:4e:24:20:79:25:84:0e:8a:
         68:ad:7e:bd:b9:19:e6:76:9e:68:5a:39:41:1b:f9:b1:fd:5c:
         a6:37:fc:8e:f5:31:82:83:1b:1d:c5:ad:d0:60:0b:87:74:94:
         d2:3e:1a:c9:ef:2a:60:70:bb:53:87:70:71:15:26:4d:dd:9c:
         5f:79:90:65:b3:93:50:d4:3d:09:fe:68:42:dd:df:d5:e5:76:
         98:6d:bc:29:fc:1d:68:eb:6a:6e:27:53:0c:e9:43:a3:39:dc:
         c6:92:c4:ea:03:70:fa:13:7a:fb:3d:8a:b8:9b:8c:4f:3a:fa:
         2a:a6:43:15:c7:8d:12:40:47:aa:b2:00:93:2b:b4:13:47:8b:
         44:64:3d:fb:88:73:7b:40:73:63:74:2f:2a:c3:ca:7d:c6:55:
         11:2a:f0:9c:77:62:d6:f8:00:e3:00:b7:92:7c:ee:08:77:ae:
         be:e4:c3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:03:47 2026 by rpki-client