Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
File:                     YG6ylYJUrJi2M26qQayAstyxnG4.mft (raw, json)
Hash identifier:          mP7sDUhfHgLOVOMX3mZsU2El3fvDMlKMGm8AsHhy6Eo=
Subject key identifier:   9D:B2:7D:01:39:B9:40:AA:DA:5D:EA:11:1E:4B:C0:FF:42:B7:71:B5
Authority key identifier: 60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E
Certificate issuer:       /CN=A9170D3E/serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
Manifest number:          F7
Signing time:             Mon 02 Mar 2026 02:26:57 +0000
Manifest this update:     Mon 02 Mar 2026 02:26:56 +0000
Manifest next update:     Mon 09 Mar 2026 02:26:56 +0000
Files and hashes:         1: YG6ylYJUrJi2M26qQayAstyxnG4.crl (hash: OonYqMqw7RcBx/ZavJqMrbbB01b84iT27KBrJkK8VZg=)
                          2: 181772049FD811EF8680B438C4F9AE02.roa (hash: nlnEqbRNBdElRTHPRbYW578QyapawXEp7sk2hMeS67g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl
                          rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170D3E, serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E
        Validity
            Not Before: Mar  2 02:26:56 2026 GMT
            Not After : Mar  9 02:26:56 2026 GMT
        Subject: CN=69a4f571-99ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:77:f3:04:c7:53:8c:be:4a:23:ec:05:98:
                    09:3f:d8:05:45:4a:eb:57:41:98:fa:f8:82:02:9e:
                    9c:77:d5:c3:6f:f6:01:9d:b1:69:60:5d:0f:98:14:
                    06:3d:1a:ec:4a:9c:9b:ab:fb:79:95:43:10:d9:fd:
                    b9:b1:b5:91:33:21:0d:2b:83:f5:10:98:42:2c:a3:
                    b5:80:d5:99:99:e0:f3:b4:ec:e1:d1:15:39:89:bb:
                    67:1e:4b:8b:70:c1:bb:f2:4f:83:05:c1:ff:ca:68:
                    49:81:f8:d2:d3:14:8f:88:3e:30:8c:9b:28:0c:9a:
                    51:5d:d9:1e:c6:75:a4:fd:9e:41:85:94:94:35:0e:
                    1e:4d:ff:0a:03:43:f8:5f:96:de:e0:2f:85:06:e6:
                    c1:9b:af:29:dc:fb:df:60:3b:a4:1a:45:27:a2:81:
                    52:bf:ca:7e:16:01:41:fa:53:84:cf:0f:e1:8a:c3:
                    5e:99:e8:6c:91:b8:c5:8b:6b:06:d6:c5:63:15:16:
                    9b:d1:97:11:eb:ea:13:d1:e8:a5:4c:92:b0:6f:00:
                    ba:d7:fb:f4:ef:59:7e:bb:f9:bc:95:32:d7:99:b5:
                    b2:93:2f:79:61:e4:db:3b:cf:23:09:05:35:67:60:
                    05:3c:ea:52:cc:61:c6:d8:1b:e4:28:c8:be:13:9b:
                    75:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B2:7D:01:39:B9:40:AA:DA:5D:EA:11:1E:4B:C0:FF:42:B7:71:B5
            X509v3 Authority Key Identifier:
                keyid:60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:16:23:b5:23:f0:fd:22:7d:65:82:6f:e9:d6:8f:59:e6:c4:
         76:a1:df:ff:6d:86:c5:bd:90:e2:22:b5:28:2b:6f:17:6f:5a:
         d7:d9:a7:a9:e0:66:ae:bd:9f:fc:76:29:2b:75:c7:dd:98:a7:
         2a:6d:cb:31:e6:2a:3b:e7:8a:62:07:84:a0:5d:7b:81:46:e1:
         e7:a0:36:b0:d6:4c:cb:eb:7a:fc:e3:75:61:15:03:4f:0a:ad:
         d3:89:0f:16:fc:06:4a:16:0a:36:88:7f:e3:a8:98:f4:a4:1b:
         89:3b:06:9e:f8:05:7a:a3:e8:e5:35:77:78:90:a8:17:b2:6a:
         27:e1:71:86:db:ac:aa:d8:14:89:1b:43:20:9b:f2:41:aa:d7:
         bc:de:34:df:36:a9:ca:c1:60:98:7a:70:c5:10:af:ba:6d:d5:
         55:08:a4:51:07:4b:fe:6d:b8:67:5e:95:8d:3c:9b:95:0a:d4:
         c1:cc:3d:4d:9a:91:d9:65:2d:53:84:aa:93:a9:5a:63:f7:2f:
         c6:01:ba:25:b4:cb:8b:90:3a:33:be:69:e3:d3:f7:c2:e8:00:
         76:e1:c9:18:37:72:8b:2c:8d:9a:7f:60:59:3c:79:36:0d:34:
         55:cb:e3:57:f2:51:ff:df:b0:d8:46:b9:1d:f3:89:2b:03:75:
         1f:3a:58:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:29 2026 by rpki-client