Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
File:                     Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft (raw, json)
Hash identifier:          WTPu7M7qoxypiD4NFZl9Y5q22jUFBcdqv0qHa1nRXh0=
Subject key identifier:   F6:0A:2A:FA:24:EF:17:5B:65:37:F2:40:CD:B3:DF:3E:42:C6:6B:C8
Authority key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
Certificate issuer:       /CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Certificate serial:       053D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
Manifest number:          0538
Signing time:             Sun 01 Mar 2026 00:06:30 +0000
Manifest this update:     Sun 01 Mar 2026 00:06:29 +0000
Manifest next update:     Sun 08 Mar 2026 00:06:29 +0000
Files and hashes:         1: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl (hash: O56HWdx80c62bvyh57szBrrdDUJXquJN0ZMGJp3ZZnQ=)
                          2: ABD9CB4630C711ECA2491515C4F9AE02.roa (hash: CoT7676o1FhYn/hTok256b21HFRTMynmtKsMLIXyZyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl
                          rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
        Validity
            Not Before: Mar  1 00:06:29 2026 GMT
            Not After : Mar  8 00:06:29 2026 GMT
        Subject: CN=69a38306-5493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:4d:8b:3f:67:5c:f1:84:9c:fb:e9:1d:6b:
                    cb:13:7c:ac:2b:a2:8a:2c:16:42:1f:dc:27:8d:25:
                    14:48:77:13:5f:3f:ca:c2:04:ac:a8:e6:1c:bd:f6:
                    b9:79:0d:49:20:e8:c0:16:2c:4b:62:f3:1b:9d:d8:
                    a0:0e:75:03:65:f1:ac:a0:72:88:5e:a3:bc:0e:05:
                    b8:00:9f:21:29:f5:6f:c4:e6:c8:77:85:23:34:c0:
                    eb:fa:6c:52:b6:cf:8d:4a:6a:67:38:37:01:ea:63:
                    94:18:93:05:70:58:a2:73:7d:a6:0c:e7:59:ac:2a:
                    cf:60:8c:12:27:e3:48:03:0c:f8:2e:ae:17:b2:8c:
                    e9:56:1e:02:6d:5f:81:2a:b2:a1:3e:f0:05:c7:40:
                    3b:8e:b0:66:3f:00:c8:a4:52:15:18:fa:02:97:d1:
                    e7:ca:7a:c5:dc:4d:75:f0:98:fa:a3:12:17:23:87:
                    77:d0:c2:dd:94:77:ea:ec:3b:ad:fa:9f:d5:92:bf:
                    e3:f6:d4:6c:c5:43:2b:ca:3c:2b:d5:3a:f2:a6:53:
                    33:af:1b:7f:c9:c2:ca:c5:46:e0:cd:b0:f6:60:26:
                    8a:3d:7e:7a:61:4a:cc:d9:eb:55:fd:c6:73:5f:1f:
                    ef:1a:54:7e:ea:ef:2b:74:b1:04:3f:07:24:aa:f1:
                    de:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0A:2A:FA:24:EF:17:5B:65:37:F2:40:CD:B3:DF:3E:42:C6:6B:C8
            X509v3 Authority Key Identifier:
                keyid:33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:6e:a8:69:3d:a6:e0:e0:a6:5d:6f:66:c4:0e:71:3d:4e:ee:
         e8:7f:84:31:9a:f6:e8:d6:2f:31:2b:f1:9d:56:e7:74:a1:4c:
         df:d7:d7:c1:1d:7a:ac:d3:1b:88:23:bf:4d:56:2c:2c:dc:84:
         b2:01:cf:3d:36:9c:d0:3c:58:76:ed:85:48:63:33:c8:a5:a5:
         4b:df:ff:67:59:ce:cc:aa:d7:2a:ae:d2:74:e1:97:1f:cc:d2:
         eb:3b:42:18:f7:6d:c2:8b:59:84:5d:fb:6a:0f:93:c7:10:4a:
         19:0b:2f:73:4e:e4:23:ee:98:08:07:43:49:f3:98:15:92:f5:
         ee:15:0b:cf:9b:8c:18:0f:71:58:a9:f3:a3:59:bf:e1:91:8f:
         dc:2d:9d:32:06:81:4c:14:5e:24:a2:05:5c:ce:a5:70:4f:75:
         df:92:b9:1b:b5:a1:30:96:a1:e8:c3:86:24:0a:ae:be:85:0d:
         28:e0:5c:4c:43:b6:85:2d:64:b0:d5:6d:5a:9e:6f:33:ff:7c:
         8c:a6:20:5f:98:40:06:69:39:ea:6e:ae:7c:3e:75:d2:32:0e:
         dc:e2:fa:a7:4e:3e:12:f1:d8:7b:7f:e9:39:4a:6c:f1:61:f5:
         4b:81:32:e9:70:4b:56:cf:42:02:b5:a7:4b:94:83:ab:d2:0c:
         51:92:96:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:28:24 2026 by rpki-client