Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
File:                     sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json)
Hash identifier:          QAkPnntl8fPSTM7LergPWK2oifpsHmtbUoL7umo5FCw=
Subject key identifier:   16:F0:0E:46:92:1F:C3:1F:9D:C5:36:B3:31:5A:6C:58:35:59:7C:32
Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
Certificate issuer:       /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Certificate serial:       0202
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
Manifest number:          01F7
Signing time:             Fri 13 Mar 2026 02:22:49 +0000
Manifest this update:     Fri 13 Mar 2026 02:22:49 +0000
Manifest next update:     Fri 20 Mar 2026 02:22:49 +0000
Files and hashes:         1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: n7GWG5fmcLjMIQYbb5pgMfNdeKAAu4nQjjyyfu3vqUc=)
                          2: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: lbzUGxCxVXNgaorxa3WAftNPLQlIRU8KXF9/ol/bmFU=)
                          3: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: m2hk6wUAtlL5ptBXdwMclZPFoA2N1StKSEsLHKrorak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
                          rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 02:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
        Validity
            Not Before: Mar 13 02:22:49 2026 GMT
            Not After : Mar 20 02:22:49 2026 GMT
        Subject: CN=69b374f9-aa9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:35:52:3d:0b:32:bc:13:46:39:95:3d:a3:d7:
                    1f:ee:28:47:2f:05:f3:6f:8e:18:05:cf:5b:38:35:
                    9e:48:13:a1:b9:50:e9:e2:86:c8:15:db:1e:70:30:
                    1e:72:63:3c:03:ac:7b:78:1f:33:19:17:ac:7f:1e:
                    52:79:01:bb:df:12:2c:d6:63:38:4c:70:45:9f:80:
                    8b:f9:47:b7:1f:bc:6d:d7:fb:fd:08:6a:ba:c1:07:
                    0a:46:af:13:70:2d:f8:8e:48:ae:3d:80:5c:c6:87:
                    f7:b2:40:ec:2c:ed:31:53:36:41:64:4f:73:b4:29:
                    3d:b5:bc:16:8e:80:e9:6d:87:a5:fe:b5:a0:1f:2c:
                    61:8a:b2:47:84:33:c0:23:7d:61:98:4a:bd:3a:81:
                    e5:68:c9:47:21:4b:b8:57:cb:f0:cf:c1:48:e8:58:
                    05:8e:26:04:07:16:99:a1:9c:0b:0c:e6:b8:e3:45:
                    24:9d:84:6b:b8:53:4e:66:ee:80:b3:bd:90:27:2f:
                    75:38:11:a3:79:c7:cf:90:92:f7:26:c0:40:09:47:
                    27:da:f1:87:c6:63:cc:e4:94:e9:c7:ed:f6:21:83:
                    64:05:9a:dd:e1:4d:0d:ea:b6:3d:d1:33:dd:bc:ab:
                    a5:e6:e5:ce:89:20:15:a6:0e:ea:ea:33:34:dd:81:
                    22:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F0:0E:46:92:1F:C3:1F:9D:C5:36:B3:31:5A:6C:58:35:59:7C:32
            X509v3 Authority Key Identifier:
                keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5a:81:8b:48:f6:c8:f4:10:38:5d:b7:0b:44:f3:e5:a9:95:
         55:22:0d:d4:92:fb:65:7c:39:4d:12:4b:bf:af:98:40:78:6f:
         62:56:8f:53:03:6b:08:ae:78:d6:32:07:48:d1:93:ad:35:87:
         2e:8f:33:66:11:8a:3e:8d:3c:df:57:0d:b2:06:36:77:83:da:
         25:f6:dd:5a:4a:22:d2:ae:ce:87:68:ad:f5:65:26:f0:aa:3b:
         17:83:86:5b:d3:12:46:d2:f6:df:73:76:41:5b:22:5d:f6:5e:
         4f:e5:5b:ee:ce:1e:d7:9e:1c:90:ec:3f:ce:68:be:85:76:32:
         30:df:83:8f:6d:98:96:a9:cc:bd:58:59:87:87:93:db:43:a1:
         27:b3:79:be:d8:17:40:cd:0c:ed:65:aa:ec:33:68:49:77:85:
         07:f7:d9:76:9e:96:72:3c:c4:e8:83:02:b5:c2:a2:9e:9e:5a:
         b9:58:eb:46:96:1e:68:78:68:b3:5a:a7:fc:75:17:f2:a7:1a:
         6b:99:d7:a4:b6:64:e9:a1:20:8d:b6:e9:12:e0:6f:64:33:dc:
         32:f7:47:97:10:10:b0:ca:09:b3:f2:9a:b6:e4:5e:8b:2a:a6:
         29:cd:ab:4d:c9:3d:55:5e:17:f2:a7:69:7a:5c:76:5a:1d:b1:
         dc:82:15:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:50:01 2026 by rpki-client