Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
File:                     tqxYfsJ9U17PTY_eFxF2V52vTU8.mft (raw, json)
Hash identifier:          buCQtnznB4+jMTrbsQ0suyeTWvWylOM8zV5Cg/MpWBA=
Subject key identifier:   24:F8:C4:D0:91:3E:1A:F0:5B:D9:C6:7F:80:3F:17:9F:4B:38:74:B6
Authority key identifier: B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F
Certificate issuer:       /CN=A9161A95/serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
Manifest number:          9D
Signing time:             Tue 03 Mar 2026 06:57:35 +0000
Manifest this update:     Tue 03 Mar 2026 06:57:34 +0000
Manifest next update:     Tue 10 Mar 2026 06:57:34 +0000
Files and hashes:         1: tqxYfsJ9U17PTY_eFxF2V52vTU8.crl (hash: hWNDEHITCDH6ZWz8EumKHSCJsUnfDmvTBiGyAF0oWkI=)
                          2: EDADA2842BD911F0BD5FC622C4F9AE02.roa (hash: bVsu56znidGrIajKiO+ImUloohJgR7Y2wqgwesz6s7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl
                          rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A95, serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
        Validity
            Not Before: Mar  3 06:57:34 2026 GMT
            Not After : Mar 10 06:57:34 2026 GMT
        Subject: CN=69a6865f-e634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3e:f1:e8:9d:f9:5f:d7:ec:4e:5a:5b:ae:9f:
                    d5:b9:c4:ff:d5:1f:29:ab:d4:fe:40:8b:7d:35:36:
                    3a:45:9c:10:b5:b1:d9:9d:03:5c:e0:e2:a6:3a:de:
                    2c:ab:c1:47:c6:ca:f2:22:b4:d2:4a:33:a5:6f:69:
                    3d:f3:d3:e3:3b:3e:83:73:6e:fb:07:e9:2d:f1:2f:
                    69:18:0a:a8:6e:c8:7c:85:51:ef:5a:7f:b4:14:ea:
                    8d:f3:2f:6a:8f:f9:b4:ff:a7:c8:f4:e4:52:28:e1:
                    b6:47:f2:38:9a:b2:64:5d:76:2f:fa:46:f2:b2:1b:
                    a2:3f:5d:8d:1f:cf:2f:0d:4a:e1:6a:a8:af:61:63:
                    94:b2:d0:ed:b2:c0:1a:65:df:92:35:49:2f:92:1a:
                    33:95:5b:b9:28:e3:55:c3:34:e6:71:98:35:13:e0:
                    ff:79:62:1d:1e:b1:f1:b1:ba:a9:57:9d:20:36:26:
                    be:1a:aa:e7:4b:21:18:68:80:c4:93:73:9e:1d:3c:
                    4f:3b:9f:93:a4:4d:5a:ca:63:4b:c7:72:9a:81:62:
                    e1:8d:2c:68:d2:65:53:a5:ae:0e:35:ce:10:de:93:
                    db:6c:97:a5:1d:4f:46:d0:65:30:9d:8e:cb:2b:a6:
                    9a:b6:f8:79:d9:27:d5:9a:91:0c:6a:68:82:cc:b1:
                    37:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F8:C4:D0:91:3E:1A:F0:5B:D9:C6:7F:80:3F:17:9F:4B:38:74:B6
            X509v3 Authority Key Identifier:
                keyid:B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7e:06:73:a4:f3:8e:d4:23:4a:c2:18:86:d1:51:e9:f8:eb:
         2e:7e:bb:0d:e6:4e:70:90:48:e4:4f:ec:26:e1:d0:dc:6d:3e:
         31:6f:59:54:a9:7e:a6:3b:78:c9:62:12:d1:5f:d9:ea:2a:bb:
         b5:4a:f9:42:19:21:cb:0b:ec:d9:c5:22:e6:e9:87:a9:8e:03:
         2f:14:1f:10:2b:78:50:47:80:bb:02:93:f9:fc:6c:67:ef:0c:
         3e:75:eb:73:5a:5f:0e:69:1b:12:9c:fc:54:a7:0a:22:d6:f2:
         80:13:06:c5:a8:ed:65:e4:9c:93:ae:0b:7a:03:0f:14:01:cf:
         d8:75:63:d7:77:c6:6f:d1:ee:e7:e4:72:61:a5:85:0f:f7:d3:
         3d:c1:ed:64:02:2d:20:7c:35:ac:83:72:53:32:c2:55:67:2a:
         36:83:49:12:1e:8b:08:a0:30:69:c6:98:97:fd:63:8f:42:e5:
         61:29:10:0b:45:36:50:e2:57:fa:85:35:de:f1:89:c0:61:62:
         49:ac:0d:f6:ad:1c:60:35:c5:76:34:a0:67:43:bf:58:a6:fc:
         5d:3a:2a:65:48:54:fe:d6:55:ca:f7:40:da:4e:12:a6:c4:50:
         04:93:8b:ea:61:84:ea:0d:de:fe:3f:8a:f1:6d:09:9f:a3:68:
         a4:65:71:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:24:09 2026 by rpki-client