Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
File:                     nUVn--JSxmFkKqM-eASKhxf6fLM.mft (raw, json)
Hash identifier:          S7Zz2oJzekhMmJZnQdeB6/XSyxwuAV0TS+SJm01VOO8=
Subject key identifier:   0B:21:64:18:EC:F2:8C:4B:6B:90:EA:DF:2B:C0:86:14:1A:51:CD:DA
Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Certificate issuer:       /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
Manifest number:          AC
Signing time:             Tue 03 Mar 2026 06:46:29 +0000
Manifest this update:     Tue 03 Mar 2026 06:46:28 +0000
Manifest next update:     Tue 10 Mar 2026 06:46:28 +0000
Files and hashes:         1: nUVn--JSxmFkKqM-eASKhxf6fLM.crl (hash: cL+M3u1BfnBQ9Ow7ov7WPClu4k0crlKjeVugnQsLUd4=)
                          2: AF75682A101911F09363D44DC4F9AE02.roa (hash: zinCGW8B10ELBoVTK9ivj+xoznmYoRevOOweMKPNJts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
                          rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
        Validity
            Not Before: Mar  3 06:46:28 2026 GMT
            Not After : Mar 10 06:46:28 2026 GMT
        Subject: CN=69a683c4-39dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:39:43:fb:9e:7c:21:67:07:2b:19:16:ac:d9:
                    6c:72:8a:4b:67:01:67:7b:6b:05:a7:40:a3:99:cf:
                    b1:9f:bc:63:85:75:68:c4:81:78:26:68:e4:d8:0b:
                    54:0f:3a:1f:c8:20:d8:75:ed:d5:45:b8:2d:bd:cc:
                    a7:0c:c1:28:66:3d:a4:df:2c:fe:96:61:06:d6:8d:
                    ef:7e:95:dc:38:0f:a2:ff:d5:94:aa:b7:24:b5:63:
                    21:03:bb:90:f3:89:7c:9b:a5:38:29:74:2f:06:29:
                    03:c2:3f:b4:78:86:2c:18:ca:33:3e:90:5c:22:b1:
                    21:a9:a1:a5:e5:ae:e6:3d:6d:03:34:4d:49:c8:a6:
                    8c:d4:8b:e5:7d:4b:72:3c:8f:df:ea:95:3b:7b:52:
                    05:26:32:f0:50:9e:77:f5:0a:da:24:0e:bf:43:5e:
                    42:a6:01:a7:84:71:61:d7:a3:b2:6b:cf:4b:08:d2:
                    17:1e:85:79:c2:a2:b1:5c:ad:62:68:9d:df:5c:b1:
                    85:25:f1:99:34:24:5d:8f:dc:d3:93:05:2c:bb:15:
                    95:81:0a:68:a8:5d:d5:35:b7:78:d1:ab:74:63:88:
                    e5:12:fa:94:1a:66:96:19:a6:f3:a5:1a:5a:b8:dc:
                    6e:03:d1:47:f4:5b:1a:d4:83:be:29:05:aa:24:90:
                    45:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:21:64:18:EC:F2:8C:4B:6B:90:EA:DF:2B:C0:86:14:1A:51:CD:DA
            X509v3 Authority Key Identifier:
                keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:00:1e:9b:64:6b:4b:b9:30:84:27:ee:c3:0a:96:b2:03:e8:
         05:0b:21:9e:7d:fe:38:ea:09:28:3a:ae:b3:0d:0e:79:49:db:
         fb:66:30:b3:c7:b8:80:8e:d5:1a:ea:12:11:af:a7:cf:00:8c:
         8c:5f:54:39:ee:95:16:ad:84:21:ec:70:ec:7a:3b:9f:79:a6:
         b8:3b:38:a1:97:e5:b4:9f:27:74:87:61:fb:b3:c1:fc:8d:4c:
         96:f6:4f:6d:a6:51:05:fd:d2:a9:23:50:40:7c:e4:78:bf:16:
         60:97:d6:2b:38:13:ed:f0:6c:16:e5:f2:f9:fe:dd:0b:48:60:
         3a:e9:ee:2e:39:5b:d4:c2:96:59:77:f3:85:e2:00:15:e4:76:
         cc:32:7e:b9:40:ac:02:8c:ae:2c:ff:bb:93:97:36:9c:54:88:
         57:de:68:42:a6:46:d8:d0:ee:08:86:31:38:ea:64:d1:0b:b0:
         27:a9:ca:2a:87:a1:6f:ee:f4:75:bf:11:ac:90:00:7d:a1:13:
         08:06:7d:cf:6c:bf:4e:c4:93:83:4f:b0:a6:de:70:07:6d:67:
         91:6d:80:ef:60:51:23:4e:2a:fd:8a:03:b5:13:30:21:00:1a:
         27:85:65:4a:3b:e1:7e:40:5f:7e:83:1a:a5:4e:9f:99:b3:d5:
         62:cc:06:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:18:04 2026 by rpki-client