Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
File:                     B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json)
Hash identifier:          OVP5XZc4KGZohVpU0f9seW4hqwEBDUVc+TwJsGjuAR4=
Subject key identifier:   E1:5D:6B:41:D3:A6:DF:53:9C:BE:91:73:6B:60:7F:4F:7D:82:4A:54
Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F
Certificate issuer:       /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
Manifest number:          F5
Signing time:             Sun 01 Mar 2026 07:21:11 +0000
Manifest this update:     Sun 01 Mar 2026 07:21:11 +0000
Manifest next update:     Sun 08 Mar 2026 07:21:11 +0000
Files and hashes:         1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: cRxtc+4D4CktCxVy0BQlTy/WknQGDP4YYsvE6lU6gxM=)
                          2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: e0Z0flawV8wk4AePxMY7zYIyVYhmWtUmY7VY2r89/j0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl
                          rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
        Validity
            Not Before: Mar  1 07:21:11 2026 GMT
            Not After : Mar  8 07:21:11 2026 GMT
        Subject: CN=69a3e8e7-6715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:b5:3b:51:e1:78:b9:85:f5:3f:22:85:d2:
                    26:ea:ed:d8:ad:1e:12:35:c3:77:f9:f8:61:1d:b0:
                    46:c1:e0:e3:37:b4:05:8a:d7:d6:e0:71:ba:38:d9:
                    8e:a8:69:2b:35:85:1a:c8:56:84:58:8d:bf:e8:ad:
                    a6:0c:4f:01:b4:2f:4b:a0:21:6a:2c:dd:4b:8f:ae:
                    ae:c6:b8:fa:f6:fc:d4:97:d3:b8:5e:7e:06:01:9a:
                    35:6e:69:bb:1b:7c:b7:91:25:6a:20:7e:56:26:af:
                    da:6f:42:74:44:5c:a4:49:a2:bb:ae:20:35:4c:c4:
                    5c:cc:44:aa:bf:c7:fa:61:c6:f7:6f:bc:af:46:9f:
                    52:70:12:a2:33:97:96:ec:27:be:bd:43:7e:58:70:
                    ff:49:97:39:0a:28:54:d3:59:c1:fb:b6:bb:aa:3d:
                    0f:1d:91:c5:6c:cc:99:87:99:07:87:61:1b:09:f6:
                    c8:06:01:27:38:35:82:ce:23:24:b7:92:7f:f7:2d:
                    66:f2:b9:39:f6:54:65:f7:a0:9c:96:78:f7:4f:36:
                    ba:a8:2f:da:0b:14:90:90:8b:72:8f:70:90:1d:48:
                    08:25:7b:9d:65:59:c6:3f:ca:86:a4:a1:96:69:54:
                    02:45:0f:d0:c9:79:fa:6f:7c:01:76:32:2a:b2:64:
                    61:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5D:6B:41:D3:A6:DF:53:9C:BE:91:73:6B:60:7F:4F:7D:82:4A:54
            X509v3 Authority Key Identifier:
                keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:64:60:83:27:5e:fe:f2:0c:0b:37:59:aa:fe:01:02:4a:6c:
         aa:91:7c:38:18:30:6e:77:25:98:3f:58:ab:9b:c5:a4:13:d2:
         11:d2:7a:cb:af:a2:d5:87:4c:b3:a9:9f:a8:8b:6d:33:93:74:
         a3:39:89:35:ac:11:30:cf:89:29:24:55:99:8d:bf:e1:da:ed:
         48:a1:e7:ef:68:e0:ad:ae:b7:d7:59:e9:4c:ae:a6:b0:bf:f6:
         06:51:0b:d4:83:0a:af:de:ad:cc:68:ef:72:b9:e4:a5:5e:ce:
         fa:63:8a:94:e2:ef:8d:35:72:16:14:09:1c:1a:fd:a8:e0:02:
         6a:38:05:7a:0f:80:14:d9:a6:30:b4:39:e4:9a:fe:ea:35:cc:
         9b:66:e8:2e:57:13:c3:31:c1:9e:ea:87:2b:f8:07:5a:69:21:
         0c:e5:85:01:3e:ea:c3:e8:0a:60:fe:a6:94:15:7d:08:70:18:
         d6:fc:60:e0:5a:91:63:33:9d:8c:04:8c:47:fc:35:14:00:c4:
         a0:00:95:a1:e9:5f:ab:8c:a7:eb:51:05:7a:05:5f:07:11:62:
         97:c6:d4:e4:31:a9:9a:f5:3a:e9:fd:cb:60:04:8c:1a:54:cc:
         c8:08:e7:db:35:a5:62:fe:80:ef:e2:21:f5:f2:41:c9:85:01:
         dd:1b:50:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:31 2026 by rpki-client