Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
File:                     2OexX5y5FnTlEn_UBtfZ5xjgirA.mft (raw, json)
Hash identifier:          +//ggYc4qON/ptS+BoQR6j0b8eor7BEXFE3RMeMGtss=
Subject key identifier:   ED:1C:7F:DC:E8:BE:53:C1:08:9E:59:E8:B5:C3:77:9F:51:AB:0A:DC
Authority key identifier: D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0
Certificate issuer:       /CN=A917E27F/serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
Manifest number:          6F
Signing time:             Tue 03 Mar 2026 07:32:08 +0000
Manifest this update:     Tue 03 Mar 2026 07:32:07 +0000
Manifest next update:     Tue 10 Mar 2026 07:32:07 +0000
Files and hashes:         1: 2OexX5y5FnTlEn_UBtfZ5xjgirA.crl (hash: uh07bjQz/742Srkst1x4m7qPrwYucX7RpNAk0vB9CZA=)
                          2: 4197AB74735611F080D68151C4F9AE02.roa (hash: KJWSfbOSquMIKpz7QMLAGjevQAyuwiO61hki9DtvT9A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl
                          rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E27F, serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0
        Validity
            Not Before: Mar  3 07:32:07 2026 GMT
            Not After : Mar 10 07:32:07 2026 GMT
        Subject: CN=69a68e78-008c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:da:e4:7a:75:66:0a:47:66:20:e2:1b:e0:7d:
                    85:50:62:c1:1f:84:49:ea:8d:fe:45:3a:72:3d:ca:
                    aa:51:20:30:09:3e:a6:13:f0:79:b2:a2:23:c6:18:
                    30:3a:11:c6:36:eb:d1:70:1b:76:50:ec:aa:d7:60:
                    5e:bd:62:9a:6b:d2:c0:64:11:54:f8:2b:1c:64:2c:
                    10:7f:76:79:20:b3:c0:8a:53:d8:91:7f:95:b8:cd:
                    90:5d:32:9f:0b:2e:a9:02:26:38:51:07:6e:d8:75:
                    fa:91:9b:62:e8:6e:ea:cb:52:91:75:20:9b:e4:e9:
                    b7:2f:cf:e0:f1:15:8e:d7:91:1f:69:7e:87:0a:af:
                    c5:5e:73:de:7b:5c:6e:d8:98:f2:02:f4:e3:3e:ec:
                    65:f1:4a:71:1f:10:90:33:6e:2d:62:0a:2f:8e:60:
                    06:79:f4:2d:1f:74:7d:8f:78:42:90:7f:e9:f0:59:
                    44:5d:c9:24:02:3e:5f:10:1e:6d:00:e5:58:8a:19:
                    24:a1:cd:5f:54:fa:70:99:ef:e4:c5:61:e8:b7:db:
                    ce:eb:54:b3:02:b8:0e:a9:b9:c5:0b:3b:e8:9f:81:
                    d8:0f:a0:34:41:f7:95:97:95:0a:e4:ea:a8:75:be:
                    93:d9:7c:ea:c8:97:db:1d:45:dd:85:25:7c:69:99:
                    ed:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1C:7F:DC:E8:BE:53:C1:08:9E:59:E8:B5:C3:77:9F:51:AB:0A:DC
            X509v3 Authority Key Identifier:
                keyid:D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:63:ff:ee:9e:28:e2:40:12:55:73:5b:38:17:cd:47:2c:14:
         cd:d9:68:0e:a6:88:2d:bf:21:86:6b:9d:70:51:6e:a2:3e:81:
         08:d7:7e:9a:95:3f:0f:aa:c7:04:87:b8:7e:01:07:99:45:f7:
         a4:ca:53:05:58:38:9f:05:72:94:fd:18:13:00:ef:56:5c:58:
         7e:48:c6:75:b3:0c:8d:25:ad:e9:0f:12:40:76:a6:c8:7a:36:
         71:42:3e:e4:3d:04:b8:30:24:f2:24:5f:4b:0b:4c:81:f2:ca:
         8c:2f:15:6e:7f:a5:df:79:98:f7:dc:38:27:15:b3:27:aa:17:
         a1:3f:d0:59:2f:6c:59:84:41:c0:89:b5:4e:a4:d0:9e:ee:16:
         eb:4c:4e:42:9b:53:c0:75:ea:40:d0:cc:40:a0:ff:16:05:0d:
         6f:02:6a:29:59:2b:fb:43:6b:df:f4:62:5b:56:cf:94:c2:56:
         b1:d0:1a:7d:ea:2a:4d:4e:b4:4d:31:b0:54:91:5d:87:8b:a2:
         18:ca:b4:4c:35:86:4a:4b:34:78:c7:a7:fb:bc:67:98:76:7d:
         33:8f:93:10:b8:d4:c0:ee:01:7d:43:4c:ce:10:f6:00:55:21:
         11:e2:e1:ba:2a:c3:48:8d:6c:ce:45:ed:45:a1:2f:c7:08:ea:
         22:10:7b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:21:58 2026 by rpki-client