Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft
File:                     2TIL_awMkLNCikT8fcoOL3kJd0E.mft (raw, json)
Hash identifier:          UYqogZfj62yohnEeCVRLXOoiEllpNcq9d2hTYna9nHk=
Subject key identifier:   56:95:51:74:A4:C3:A3:32:4A:29:7D:AC:49:6B:45:A5:7C:7A:34:85
Authority key identifier: D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41
Certificate issuer:       /CN=A9197ADE/serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft
Manifest number:          C5
Signing time:             Fri 27 Mar 2026 06:26:49 +0000
Manifest this update:     Fri 27 Mar 2026 06:26:49 +0000
Manifest next update:     Fri 03 Apr 2026 06:26:49 +0000
Files and hashes:         1: 2TIL_awMkLNCikT8fcoOL3kJd0E.crl (hash: G4jnN35Zus6TmJLi55i2+aiRHUUAIJYO4PIHz//jzrM=)
                          2: E0CFA54EFE4D11EF8274971BC4F9AE02.roa (hash: Ah769txZ1i8LI8a9aR/4aMRU/GBmcnuWkAw7rNhxenA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl
                          rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 06:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197ADE, serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741
        Validity
            Not Before: Mar 27 06:26:49 2026 GMT
            Not After : Apr  3 06:26:49 2026 GMT
        Subject: CN=69c62329-5737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:05:a2:c8:b4:d6:c0:92:c1:27:7c:d5:b5:f3:
                    c1:3e:83:2b:e3:4c:47:d8:b6:a1:5a:a6:2d:3d:db:
                    9b:82:db:69:7f:5a:be:5b:7c:d5:20:0b:64:a3:a2:
                    5c:05:91:f1:15:da:7d:b5:c1:b0:4e:aa:67:63:23:
                    a7:b2:11:0c:05:f5:e9:2e:1e:99:93:06:3e:39:19:
                    e3:67:63:2d:a3:f0:25:07:28:7a:32:12:12:c9:94:
                    ea:47:db:ed:9c:37:63:7a:b1:93:c9:e5:fe:8f:cb:
                    be:7f:2e:be:c5:9b:a5:83:32:68:2b:1f:31:ea:b0:
                    4e:21:c0:68:24:80:23:cb:ae:9e:e1:54:c6:6c:da:
                    2f:65:e0:17:4f:e9:5c:95:a6:fe:9f:fc:fe:63:8e:
                    7d:cc:f3:c0:79:71:a5:93:d4:81:bf:54:84:c2:0d:
                    d9:f4:7d:b9:90:22:8d:2c:45:94:d4:cb:36:a7:c1:
                    78:f4:b5:ad:26:ff:60:39:ea:fb:22:66:99:bf:57:
                    42:c7:8f:bc:f3:2d:a7:d3:9a:22:d5:1f:6d:79:c1:
                    d1:9e:b6:17:4e:e6:f1:2a:02:ba:36:df:91:27:08:
                    26:16:e8:7d:e1:7b:99:e6:75:95:d8:87:35:17:9c:
                    9b:68:fa:86:35:f3:72:5e:e2:fd:a2:8d:af:4b:a4:
                    45:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:95:51:74:A4:C3:A3:32:4A:29:7D:AC:49:6B:45:A5:7C:7A:34:85
            X509v3 Authority Key Identifier:
                keyid:D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f2:29:e7:86:86:d2:e2:70:c8:15:52:28:d0:76:64:6d:23:
         1b:bc:07:ef:6d:9b:91:61:18:33:51:55:a5:a1:0b:f3:bb:db:
         0d:d9:a5:fd:0e:a6:cf:37:a5:00:f5:2c:53:be:05:a0:83:b4:
         ce:84:24:ca:74:cd:42:c0:a5:53:5e:33:1d:d7:75:72:d7:7d:
         4b:49:8a:2c:44:29:a6:c9:f5:49:ae:f2:25:86:17:33:67:29:
         10:69:5e:68:8a:d8:94:92:d8:5d:2a:fd:2a:cb:1f:10:98:dc:
         81:16:4f:24:bb:e0:1a:df:fd:09:40:73:76:f7:0d:6d:45:0e:
         2e:3f:4e:58:41:f5:92:04:56:ca:12:ce:af:11:bc:40:96:0c:
         7a:20:9b:04:12:0e:69:d9:88:44:c6:cc:72:a9:e2:64:02:77:
         dc:58:7c:0a:4a:d3:2f:f9:8a:13:30:8f:73:b6:16:f6:86:18:
         cf:bf:c3:12:54:ab:05:71:83:51:90:10:9c:15:b1:b8:6b:de:
         9e:36:ad:48:ac:e4:d1:29:a4:3d:7d:31:a6:22:14:70:f9:ff:
         3c:8d:4c:59:2b:07:b3:1b:85:1e:70:ed:6e:4a:43:7d:66:e8:
         fc:cf:64:a0:d3:b9:e5:0b:fe:9f:98:e4:a0:3c:78:59:16:56:
         e6:8c:a3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:51 2026 by rpki-client