Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
File:                     M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft (raw, json)
Hash identifier:          AcaN+frufdKy9g3VLNoVRanlv9RQyg1/XI5o1+EkGro=
Subject key identifier:   AC:92:2D:A4:8D:74:37:11:89:63:11:81:68:B3:8A:0E:D1:8F:03:29
Authority key identifier: 33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
Certificate issuer:       /CN=A919D3F9/serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
Manifest number:          B2
Signing time:             Wed 25 Mar 2026 06:19:43 +0000
Manifest this update:     Wed 25 Mar 2026 06:19:43 +0000
Manifest next update:     Wed 01 Apr 2026 06:19:43 +0000
Files and hashes:         1: M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl (hash: //VwbV9o0u3HktbPdFi7mgowPtCl/zfEpVvfzadnTVg=)
                          2: 35C008E818C811F0BF9E881FC4F9AE02.roa (hash: P1yTaYpQKdP44uCNWcm3GSLyQQ9HAPHAkjE1wN6st/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl
                          rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
        Validity
            Not Before: Mar 25 06:19:43 2026 GMT
            Not After : Apr  1 06:19:43 2026 GMT
        Subject: CN=69c37e7f-a543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:32:e0:37:fb:67:9a:36:56:05:d3:66:e1:
                    e2:f5:90:ae:0a:f5:25:c2:3f:0a:30:a5:1d:ef:8a:
                    c8:8a:38:ef:b9:5d:f9:10:bb:a2:17:ae:4f:da:3a:
                    97:43:95:3d:a3:0b:b9:cf:e6:23:0f:8d:7a:59:70:
                    73:36:04:5a:fd:84:fd:16:7b:c2:0f:d7:ec:b0:ac:
                    2c:ed:6f:fb:eb:ca:11:3e:a2:36:5a:31:9d:b2:f2:
                    ff:d0:f6:90:d9:86:e5:c6:a6:66:a5:f3:58:91:cf:
                    7a:c2:95:e4:5f:63:04:e0:b0:d8:cc:30:1a:79:a7:
                    5a:68:57:ca:d7:6f:2d:8e:e5:48:f4:c7:18:3c:23:
                    c2:44:02:cb:d3:a1:e5:2b:d1:1b:ae:0e:59:2a:4e:
                    92:d4:56:e1:f8:b9:75:36:0c:7c:e7:85:58:68:30:
                    fa:2b:8d:bb:65:96:27:e5:02:77:76:64:7a:34:55:
                    8f:c7:c4:46:a0:1b:7a:c3:ac:c6:c7:e9:3e:2f:64:
                    3b:82:0f:a3:da:c4:1a:e1:c3:42:3a:9a:d4:b6:16:
                    ad:b7:f5:ff:5a:ca:e7:57:dc:e6:0e:39:7d:df:0d:
                    d5:9a:90:8b:f3:98:1a:6f:b9:fe:cc:fd:96:b3:51:
                    fb:d5:87:f3:c3:77:26:a4:b1:95:66:29:0c:bd:05:
                    40:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:92:2D:A4:8D:74:37:11:89:63:11:81:68:B3:8A:0E:D1:8F:03:29
            X509v3 Authority Key Identifier:
                keyid:33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:69:bb:3c:18:b7:3f:e9:78:5f:7b:ec:78:77:4a:32:e1:6f:
         74:49:00:6b:a0:e6:f0:96:5f:30:a0:37:00:ac:32:12:cf:87:
         38:a1:20:a2:8b:db:ca:a8:4c:8c:81:f0:f5:3c:77:1f:75:10:
         35:70:ae:b0:fc:93:0b:84:93:cf:56:52:36:47:cf:fb:a3:17:
         ad:f8:4b:df:90:e2:a4:2f:51:b2:d7:ba:a4:aa:c5:8c:3a:79:
         43:e4:3f:5d:7e:fe:38:ef:f2:c1:d1:4f:35:d9:b1:d3:e1:8d:
         f8:98:9f:54:cb:70:d3:22:a9:55:8b:4e:b4:f5:36:16:e2:8d:
         85:77:79:a0:df:0a:25:87:57:5d:a7:ae:9e:ea:24:8f:c1:da:
         2d:18:28:aa:d4:21:b5:ff:8f:fb:0d:17:a1:4e:80:c7:b6:fc:
         24:5b:46:3b:69:c9:8c:3b:c3:e9:fb:24:2e:b8:31:1a:28:29:
         1d:b9:7b:53:78:4b:c3:75:13:12:0c:75:51:8e:9b:77:84:3e:
         d9:5e:af:13:1a:fd:5c:33:23:77:2d:4c:63:86:78:b9:71:a8:
         d3:52:d0:8e:49:52:3f:c2:cc:a6:28:44:50:40:b0:4f:5c:6b:
         bc:5b:ab:4b:22:3a:00:c0:27:07:f9:b5:10:02:77:5d:d1:e7:
         98:30:ee:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:47:16 2026 by rpki-client