Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
File:                     fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft (raw, json)
Hash identifier:          Kx2/uvC9+s7wpZuWhWieQJ+3QH8oh1wOF5oOPLr+NPo=
Subject key identifier:   72:D0:28:5A:C3:F5:FD:A5:33:44:0D:C1:22:1E:5F:4E:8D:C0:F6:F4
Authority key identifier: 7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F
Certificate issuer:       /CN=A9170AF9/serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F
Certificate serial:       069A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
Manifest number:          0692
Signing time:             Mon 02 Mar 2026 00:45:13 +0000
Manifest this update:     Mon 02 Mar 2026 00:45:13 +0000
Manifest next update:     Mon 09 Mar 2026 00:45:13 +0000
Files and hashes:         1: fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl (hash: FQWlUmPnZG717LCB6hEkUGDFM6Fin1WCo8jL2I+9jHE=)
                          2: 98212A1EA7F011EB816C331FC4F9AE02.roa (hash: lW6QZXgkIKKSa0jLf9ZE4i3WNOuxkEM9pch0Rc7OqqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl
                          rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690 (0x69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170AF9, serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F
        Validity
            Not Before: Mar  2 00:45:13 2026 GMT
            Not After : Mar  9 00:45:13 2026 GMT
        Subject: CN=69a4dd99-d733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:62:13:f0:b5:ab:39:5c:80:1c:fe:1b:68:58:
                    ca:5a:66:b9:e8:a8:7b:10:6a:e5:45:c2:49:71:2d:
                    11:0c:75:4f:b7:4f:5c:ec:75:45:bd:50:22:7f:74:
                    ed:e6:4d:43:e7:68:2e:43:0d:86:33:51:58:a2:55:
                    22:ba:6a:db:f8:a0:40:4f:ef:56:4a:8f:c0:dd:6f:
                    8c:8d:97:04:5e:ff:b7:67:b9:2d:70:42:b3:ed:03:
                    40:8f:c9:9b:48:15:22:96:07:40:55:41:e6:28:0d:
                    32:90:01:9d:ed:20:8f:23:a0:19:af:fe:22:9d:bf:
                    e4:0d:fb:23:7c:04:6c:79:de:37:32:c1:6a:c1:93:
                    93:1a:49:41:f3:9d:b5:b0:49:49:94:f0:a5:c1:74:
                    55:bd:52:aa:36:46:6f:16:5a:d2:df:f9:fb:dc:6d:
                    3c:77:e4:b7:96:fb:b8:a5:8b:a9:24:62:b3:68:2b:
                    eb:12:d2:91:3f:51:5f:2e:50:e9:cc:c8:aa:18:e5:
                    95:33:8f:88:f6:0c:1c:67:62:8b:60:b5:ec:c6:cb:
                    74:f2:93:4c:ff:5c:db:9c:63:42:73:79:3e:7c:11:
                    eb:d4:57:79:c8:8c:87:cc:eb:76:c5:d2:5d:f6:54:
                    ed:a8:ed:8a:35:37:6a:b4:59:13:43:a9:67:7b:78:
                    5b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D0:28:5A:C3:F5:FD:A5:33:44:0D:C1:22:1E:5F:4E:8D:C0:F6:F4
            X509v3 Authority Key Identifier:
                keyid:7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:99:5c:1a:60:e7:a6:6d:89:72:3a:76:5e:80:63:eb:05:36:
         74:bc:65:cb:56:a5:72:48:55:f2:9c:1d:60:df:f1:11:f5:6a:
         fc:76:b5:30:cd:65:59:2b:6a:57:21:c1:0f:e2:04:de:26:d3:
         45:c8:66:3a:0c:3e:5d:3d:77:eb:ce:95:8d:fc:c8:c4:86:0a:
         9d:f7:e3:42:e0:1a:59:39:85:5e:49:b4:99:e9:e2:a0:cb:85:
         bf:c5:58:41:3a:c3:08:00:b2:33:f0:a7:12:0e:13:93:59:ef:
         c2:3d:3c:37:6d:56:e7:da:d3:2b:f3:cd:93:3d:22:9a:2e:e9:
         7d:ec:2f:57:58:c8:ed:82:bd:4f:9d:82:25:ae:7b:1c:b3:68:
         5d:7a:d5:e8:a4:72:0f:23:de:45:21:62:17:39:e3:95:c7:3b:
         e1:6e:50:c6:64:a2:f0:1d:ae:42:9a:51:42:aa:19:6a:99:80:
         07:f1:4f:e8:63:aa:fb:85:db:ff:76:93:67:52:28:62:1a:b0:
         31:0e:11:ec:ba:fa:b7:7d:aa:96:eb:1b:6d:ac:8f:1b:9f:e6:
         94:6c:86:aa:70:3f:71:00:05:67:7c:7c:2c:92:99:eb:e2:a3:
         8b:5b:2c:f2:d7:b6:a1:d3:99:f4:37:cb:83:14:3f:d5:26:4f:
         05:f9:5d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:25 2026 by rpki-client