Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
File:                     x7Jkc1A4Cmo0404yzv41GZN-l8g.mft (raw, json)
Hash identifier:          eRSy2gzxzG0tA01kbmvQPpTDKgP+rVLbh+bNVRi8PbY=
Subject key identifier:   D7:A3:08:4B:E4:06:C5:F7:5D:8D:DE:3B:B4:A3:1C:C1:B7:23:35:E2
Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8
Certificate issuer:       /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
Certificate serial:       177D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
Manifest number:          174C
Signing time:             Sun 01 Mar 2026 22:55:03 +0000
Manifest this update:     Sun 01 Mar 2026 22:55:03 +0000
Manifest next update:     Sun 08 Mar 2026 22:55:03 +0000
Files and hashes:         1: x7Jkc1A4Cmo0404yzv41GZN-l8g.crl (hash: azYAba0No3zgrZCj0gcap+O3WcKf0v+jY2ohueHKrrU=)
                          2: 453489B8BE6311EE90BF9241C4F9AE02.roa (hash: WA8xCRlxR3rKk8ClNGxGNEmsKJNt1HuKBEMk6slXSYM=)
                          3: CCE4818E514D11EEADBDDC4DC4F9AE02.roa (hash: puJkWVITf2df7u3Qj+93ztEl+0qqlVGDPJp1OeHAKxQ=)
                          4: 0897E314434811EF8E76757AC4F9AE02.roa (hash: hPIaiMSBFYLOvrueCE00fDgAwAADdWAf1f9rpZpgG+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl
                          rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6013 (0x177d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
        Validity
            Not Before: Mar  1 22:55:03 2026 GMT
            Not After : Mar  8 22:55:03 2026 GMT
        Subject: CN=69a4c3c7-5b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9e:25:4b:c7:fa:e9:10:dc:16:94:a3:c7:e3:
                    75:ec:74:fd:3a:6f:be:18:70:dc:39:b1:51:c8:15:
                    22:d5:96:2f:12:38:24:26:6b:dd:0c:4d:08:da:1e:
                    d9:cd:a6:24:4d:ce:af:37:02:93:56:cb:69:e0:c7:
                    23:74:cc:a9:47:67:1e:18:91:3b:a5:f9:12:78:a4:
                    13:9f:7e:c2:79:8a:1e:2f:41:42:43:29:99:d9:80:
                    c7:d2:df:e8:27:0d:51:83:8b:1b:dd:67:32:17:22:
                    26:f9:08:0c:c3:2e:88:62:2d:2d:ad:63:10:02:66:
                    a4:b4:ae:89:e3:f1:13:70:b3:44:75:05:f6:a0:68:
                    8b:b4:b4:4c:cb:8f:82:6d:4c:2a:52:ec:82:c4:f4:
                    4f:2b:43:16:b5:b3:e5:3e:7b:1f:27:ad:7f:5c:35:
                    c3:b9:92:c0:8c:67:6d:38:3c:5d:02:6b:93:bb:61:
                    b0:88:54:78:76:9e:45:39:03:c7:dd:e6:b9:94:07:
                    09:bb:88:1a:c2:c9:63:b3:87:94:89:01:ae:a2:2a:
                    a7:8f:6a:4f:56:d4:95:a6:88:e0:ce:a4:f3:60:46:
                    f5:bb:56:e9:55:ca:59:37:3e:68:18:99:56:92:5f:
                    c8:78:8d:48:a9:68:e6:9a:93:10:aa:5e:72:61:2f:
                    b3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A3:08:4B:E4:06:C5:F7:5D:8D:DE:3B:B4:A3:1C:C1:B7:23:35:E2
            X509v3 Authority Key Identifier:
                keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:9e:68:3e:6c:26:79:5a:37:ed:5a:cc:5c:24:42:3e:31:7b:
         38:45:ab:32:c5:2d:b3:ca:75:b8:5a:54:0a:3f:20:c1:fe:bd:
         46:26:5a:20:0d:63:a2:34:47:5e:31:9d:4d:49:af:7c:5e:d1:
         78:40:3a:c2:44:c8:6f:09:21:06:06:ad:81:87:c6:ca:7f:fa:
         00:88:b2:77:0a:c9:64:1a:a3:d7:55:5e:15:55:23:ef:7b:16:
         23:74:4e:d2:07:f6:3a:65:28:88:11:c8:77:44:2f:ba:9c:dc:
         fc:8b:94:de:24:9a:24:ea:9b:c9:61:ff:3b:7a:6f:12:3c:22:
         f7:0a:68:0d:3b:11:b5:3a:71:ea:3a:82:15:1d:c7:14:8e:bf:
         4e:f1:c5:69:f7:11:b0:55:44:96:fe:5c:6c:9c:fb:16:78:d2:
         8e:e8:c8:4a:c1:4b:31:4f:3e:61:4c:9d:2c:14:8c:80:76:73:
         4a:90:05:74:d6:dc:c1:3e:bd:9f:4a:e4:dc:70:1c:4b:5a:13:
         c7:14:48:7d:31:10:86:a3:ed:21:87:3a:c9:c9:d0:e7:02:d0:
         87:0a:fb:50:2c:6e:7c:cc:51:e5:ea:96:d0:65:f0:b4:c8:b7:
         4b:c7:5b:f0:aa:3a:37:69:09:07:f5:94:05:4c:b6:6b:f2:c4:
         8b:19:56:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:04:56 2026 by rpki-client