Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
File:                     aRiqcfNrBGNTplzAiXixjv-59cY.mft (raw, json)
Hash identifier:          1/YG21hjOWqz5jILyLwNqp22qj+mrMuzT+Qlcm7UBCU=
Subject key identifier:   1B:EB:D6:59:F9:5C:4B:9D:B0:BB:45:E2:95:5F:32:21:AC:53:11:43
Authority key identifier: 69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6
Certificate issuer:       /CN=A9170EED/serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
Manifest number:          0176
Signing time:             Sat 19 Sep 2026 04:54:26 +0000
Manifest this update:     Sat 19 Sep 2026 04:54:25 +0000
Manifest next update:     Sat 26 Sep 2026 04:54:25 +0000
Files and hashes:         1: aRiqcfNrBGNTplzAiXixjv-59cY.crl (hash: PxDAPidSIOEKkHmObmWj+wpr0au7IeatKRkF2hx4baI=)
                          2: A54CA35E853B11EFB513D149C4F9AE02.roa (hash: /vNUIQMQmo/+bpr7T8qr5NTsbD+Gg65QmwR+l9u79do=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl
                          rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170EED, serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
        Validity
            Not Before: Sep 19 04:54:25 2026 GMT
            Not After : Sep 26 04:54:25 2026 GMT
        Subject: CN=6aae1582-1503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8b:72:57:df:fd:f2:bd:d3:fd:1d:77:76:48:
                    9a:85:7d:00:87:90:0e:02:21:fc:e5:df:bc:53:37:
                    d4:2c:a2:83:b3:d2:8d:1b:da:69:22:78:ec:73:e5:
                    ac:69:9e:6b:57:fa:70:5c:23:01:3c:f6:9c:17:fc:
                    0d:ac:87:91:c4:bf:58:73:ad:97:2f:a2:1e:f3:5b:
                    03:67:97:77:f1:0f:d1:4d:e6:2e:7c:1f:25:a9:63:
                    7c:68:bb:7a:f2:3d:b4:0d:fe:29:b9:87:ea:a4:67:
                    af:0d:7d:e5:59:dd:91:77:5f:37:c6:a0:ff:4c:b9:
                    95:c3:2d:19:14:df:b2:67:0f:ba:5a:0a:f3:af:f4:
                    e9:d7:02:f4:c7:5a:aa:a8:00:d6:4a:f1:ea:16:c9:
                    a5:ca:30:18:5c:fa:0c:4b:3f:c0:ad:f2:41:85:e3:
                    ba:4e:f3:d4:03:a6:16:e8:89:61:7e:69:2f:82:27:
                    0d:a7:ee:38:c3:67:5e:12:d2:08:ff:d7:86:6a:a6:
                    16:15:80:0c:50:74:2d:31:60:25:07:e1:d7:1e:ee:
                    6c:2d:f6:1e:7f:17:1b:8c:6b:3d:60:10:21:b7:3b:
                    52:b3:39:f7:19:7d:ba:7c:f7:4d:51:c8:13:ba:dc:
                    fc:f6:38:ab:cc:d4:8a:12:0f:d7:d5:2c:b7:9b:17:
                    b6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EB:D6:59:F9:5C:4B:9D:B0:BB:45:E2:95:5F:32:21:AC:53:11:43
            X509v3 Authority Key Identifier:
                keyid:69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:24:83:c2:6b:be:36:14:9c:6e:ff:73:f3:e4:ee:8a:a6:54:
         71:15:84:be:f7:35:e7:9d:b7:54:5e:1e:4a:30:02:8d:5b:77:
         62:f3:56:a1:d8:a7:6c:95:7c:06:1d:63:1f:63:cc:55:2b:86:
         c1:d3:29:a5:9f:70:90:3d:f8:e9:42:38:38:f6:f8:71:8c:b5:
         d7:24:bd:73:bc:8b:22:d7:ed:9f:9e:96:ec:19:46:34:dc:c5:
         29:6e:26:07:b2:95:8b:5a:75:2c:57:e3:4f:48:c9:66:60:df:
         28:51:a0:16:b8:fa:66:82:76:e5:9c:11:d6:8f:dc:4c:1e:38:
         2f:2f:c2:92:61:34:cd:2a:e5:81:68:0e:9b:f8:a3:4a:b2:74:
         f1:0f:66:2b:34:6c:5b:55:00:03:c2:9a:ea:03:2b:b4:c7:df:
         79:b5:29:f6:90:19:f3:93:56:6d:26:4a:84:55:ca:e1:b6:f2:
         26:d3:db:63:3a:a0:92:13:1a:cf:60:cb:d1:c1:ae:64:f0:af:
         09:56:48:22:47:ea:94:93:6c:e5:71:c7:7c:94:bd:ce:9f:1a:
         70:87:13:79:7a:f7:d5:9a:bd:9d:27:38:00:fa:3b:59:bf:f0:
         5b:d1:41:6f:39:bd:27:e3:40:46:b9:80:dc:81:3d:fc:43:c1:
         9e:9c:1f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 00:25:56 2026 by rpki-client