Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
File:                     dt6sBgRg9vilvVgpnFOryvmx01g.mft (raw, json)
Hash identifier:          g20ZlMB+Y2WUb3C5IBRbU1eUPTQeeS2/5ij+MjFTBko=
Subject key identifier:   57:93:48:F1:BE:8C:E0:32:9B:0D:EF:FC:21:E9:4F:94:87:A1:71:74
Authority key identifier: 76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
Certificate issuer:       /CN=A9171172/serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
Certificate serial:       080C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
Manifest number:          07FE
Signing time:             Sat 28 Feb 2026 21:33:55 +0000
Manifest this update:     Sat 28 Feb 2026 21:33:54 +0000
Manifest next update:     Sat 07 Mar 2026 21:33:54 +0000
Files and hashes:         1: dt6sBgRg9vilvVgpnFOryvmx01g.crl (hash: m9lCMciEGQlo5lMdoSzTupGJiMJ90jNCzqTClREZmyI=)
                          2: 0A94FC36198711EB80EAEF4CC4F9AE02.roa (hash: swxAO2xB4LEp+6cObSUm6tilYfUacTFtDqQf6repB5s=)
                          3: 6DEC60FC198811EBAD4C384FC4F9AE02.roa (hash: FwExl0Dy9C/y4OU/E+62tcu6k1flFG1ShUJCKjpHG+A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl
                          rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2060 (0x80c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171172, serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
        Validity
            Not Before: Feb 28 21:33:54 2026 GMT
            Not After : Mar  7 21:33:54 2026 GMT
        Subject: CN=69a35f43-debf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:75:0a:46:a7:50:cf:26:e7:1b:a1:70:a1:e1:
                    39:1c:72:5e:58:0d:77:cb:e1:44:50:6f:11:32:36:
                    20:b6:47:d9:04:c2:02:fe:d8:f2:5c:33:67:ab:7f:
                    6e:e6:b4:91:64:29:6f:5e:c8:b4:7c:17:1a:3f:a4:
                    31:49:fe:7f:d6:49:29:71:eb:ff:58:1a:31:1f:2f:
                    64:1b:65:37:2f:f3:15:30:35:25:1b:c7:5d:0a:ae:
                    f4:3a:d2:f2:04:e5:ff:40:a5:0c:74:da:55:f2:8a:
                    9a:54:23:38:3a:e4:a9:e4:d0:75:9a:77:6d:f5:aa:
                    92:36:2e:c8:c2:50:42:94:17:0b:e3:3b:95:e5:4a:
                    70:c0:69:ce:c8:9d:96:d3:d2:60:90:93:44:3b:99:
                    29:cb:d4:21:1b:84:9a:8c:50:6f:e6:e9:38:d2:59:
                    c6:29:94:bc:c5:f4:84:19:a9:ee:51:79:37:02:66:
                    cd:e7:64:c0:e9:bb:6f:de:db:e2:d0:d6:a4:ec:1b:
                    3e:61:0b:85:01:11:ef:8f:04:58:af:a0:ed:69:f7:
                    7b:1e:27:93:30:bc:0c:1e:fe:73:c3:89:d7:44:8a:
                    fd:5f:1f:2b:ee:30:6b:09:63:86:c8:96:92:3e:44:
                    56:b4:e0:df:a1:5d:c9:6e:d5:e6:ad:f3:63:61:95:
                    9b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:93:48:F1:BE:8C:E0:32:9B:0D:EF:FC:21:E9:4F:94:87:A1:71:74
            X509v3 Authority Key Identifier:
                keyid:76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:93:b7:98:b0:be:43:f2:31:43:c5:41:41:c5:e3:ef:53:63:
         58:a9:19:ba:42:59:9a:4e:aa:d0:43:97:90:20:64:14:f8:1d:
         66:db:f9:76:60:2d:01:bd:e3:4f:01:a6:70:38:21:a3:95:c9:
         b3:fd:64:8f:db:84:16:7e:ab:da:f5:be:5d:a1:8b:48:3c:e2:
         5d:38:d8:2d:f2:b9:1e:4b:67:66:00:b0:76:60:39:e5:68:79:
         89:56:ab:54:10:83:4c:e3:f3:67:85:89:65:7d:07:f5:58:cf:
         8f:5b:61:75:e6:bd:8f:d0:2e:3b:01:df:2f:9e:c7:92:7e:0a:
         0f:36:2a:3a:77:ee:65:f5:80:a4:6b:1d:de:94:b9:4f:9e:71:
         b2:58:b5:04:24:d3:94:25:b6:fc:44:b7:84:7b:99:1a:7c:0e:
         fa:3c:27:e3:7c:3b:94:c9:78:1b:3b:dc:c4:62:78:e5:9e:f6:
         f3:f4:d5:79:25:f2:21:6b:6b:2e:e7:d7:66:e3:1f:8e:0c:5e:
         93:b0:f2:e5:75:80:85:ec:c9:de:9d:b9:c8:2a:4f:e8:fb:c7:
         92:70:fe:a7:4c:30:02:c8:96:b2:1e:9e:8e:cd:87:ec:0f:5e:
         7d:91:5d:e4:56:8f:a6:7e:a0:4f:20:78:9d:da:37:43:0d:f2:
         62:32:87:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:43 2026 by rpki-client