Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft
File:                     MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft (raw, json)
Hash identifier:          5KulJT+hRZvBvLeZvPgiNF3I6twLP8mrbjOTQmTwRWU=
Subject key identifier:   F7:6B:88:8F:07:1F:7C:00:8D:34:1D:0E:BE:16:FF:81:9C:1E:E1:C2
Authority key identifier: 32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69
Certificate issuer:       /CN=A9172B41/serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369
Certificate serial:       0500
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft
Manifest number:          04F9
Signing time:             Sun 01 Mar 2026 00:19:11 +0000
Manifest this update:     Sun 01 Mar 2026 00:19:10 +0000
Manifest next update:     Sun 08 Mar 2026 00:19:10 +0000
Files and hashes:         1: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl (hash: y+N37FySF78rOiHplnVkQt45Zv/l/9/VfvWKEH9ZmmU=)
                          2: 5C7731E64B7111EC8E9FCB48C4F9AE02.roa (hash: IrP7jrHdQVwCdKqpccuips54ATRwjRPu8lk/ibgnCpk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl
                          rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1280 (0x500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B41, serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369
        Validity
            Not Before: Mar  1 00:19:10 2026 GMT
            Not After : Mar  8 00:19:10 2026 GMT
        Subject: CN=69a385ff-6d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:1c:c8:0b:3b:02:4c:2a:27:72:69:01:01:
                    62:fd:71:99:6b:1d:8d:62:0d:a6:36:78:5b:b4:46:
                    21:00:85:db:14:f4:41:1c:54:3a:89:55:da:1e:54:
                    73:a8:c7:24:d7:86:3e:b0:c9:2a:3d:06:66:6d:35:
                    39:f6:6c:5a:3d:d9:ad:b8:1a:d5:ac:ee:4d:86:1c:
                    89:a4:57:96:dd:c9:4a:af:50:8a:d6:c2:d2:35:67:
                    06:93:7c:74:18:f3:04:5a:47:70:5d:71:36:3c:58:
                    8d:6d:aa:8f:c4:e6:28:fc:9f:b4:fa:54:be:cd:93:
                    e7:19:7d:5d:3f:96:9e:ed:cb:ea:2b:52:61:56:e0:
                    ce:d6:50:9c:19:0b:e0:bd:8e:0c:26:7d:1d:34:80:
                    93:09:b7:75:56:67:a3:83:80:d2:14:bd:76:69:c6:
                    e8:b4:f2:0f:ad:39:49:84:ce:5d:76:66:8a:88:4c:
                    49:51:91:ad:12:07:c9:16:76:d6:b3:d0:6b:23:63:
                    22:56:58:5b:8f:90:dd:2a:4f:80:69:c0:29:74:6d:
                    42:05:a0:3a:65:46:3c:bd:43:2b:ef:54:60:52:df:
                    95:70:d4:32:31:6a:b2:2c:87:1d:c3:e7:b1:ab:15:
                    df:53:c7:7c:3e:ff:02:24:09:aa:80:b9:4e:d4:89:
                    59:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6B:88:8F:07:1F:7C:00:8D:34:1D:0E:BE:16:FF:81:9C:1E:E1:C2
            X509v3 Authority Key Identifier:
                keyid:32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:56:7c:42:c6:c2:c4:19:ac:80:78:ab:b7:dc:b1:20:c7:74:
         c6:9a:7f:fb:3c:55:c7:42:cc:69:68:30:00:25:16:17:0c:af:
         f9:92:a6:c2:b2:11:01:0f:ca:55:94:45:4b:e5:cf:df:4a:94:
         3b:97:d1:ce:5d:2c:6a:6f:81:d0:93:b6:24:cb:d7:b0:54:88:
         84:26:00:23:10:2b:78:74:ab:a3:c1:bf:ad:92:57:3d:1b:e6:
         af:db:b4:7e:9c:64:3b:d3:77:09:4b:de:c9:f0:aa:45:a9:9e:
         87:3d:48:34:8f:6a:56:45:6b:8e:72:cf:5a:4d:11:33:ea:84:
         74:fa:83:93:79:c0:7e:44:5f:d7:9e:a3:57:29:bb:80:72:36:
         d6:fb:d4:ff:82:23:eb:c4:87:31:b3:5c:2a:16:6c:52:3c:8e:
         f1:51:13:ae:84:30:06:3e:72:b9:b8:33:c4:d3:d5:03:c6:60:
         73:e1:53:3b:97:09:bc:91:9c:5f:6b:40:66:59:bb:06:cf:58:
         f0:2f:b7:c2:32:ef:9d:9a:e3:b9:24:a8:fc:1e:f5:71:62:4c:
         6c:05:a0:31:b3:6d:46:7b:39:fe:50:3a:ea:6b:01:d9:2d:da:
         92:17:57:c7:bf:96:4f:e5:da:d6:33:5f:36:5d:53:b7:50:2f:
         2f:17:fa:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJCNDExMTAvBgNVBAUTKDMyRTBGNzAwRTM4NzI0NTFBMUE4MzJDRDdEREU0MTc1
QkZCQTgzNjkwHhcNMjYwMzAxMDAxOTEwWhcNMjYwMzA4MDAxOTEwWjAYMRYwFAYD
VQQDDA02OWEzODVmZi02ZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAskwcyAs7AkwqJ3JpAQFi/XGZax2NYg2mNnhbtEYhAIXbFPRBHFQ6iVXaHlRz
qMck14Y+sMkqPQZmbTU59mxaPdmtuBrVrO5NhhyJpFeW3clKr1CK1sLSNWcGk3x0
GPMEWkdwXXE2PFiNbaqPxOYo/J+0+lS+zZPnGX1dP5ae7cvqK1JhVuDO1lCcGQvg
vY4MJn0dNICTCbd1Vmejg4DSFL12acbotPIPrTlJhM5ddmaKiExJUZGtEgfJFnbW
s9BrI2MiVlhbj5DdKk+AacApdG1CBaA6ZUY8vUMr71RgUt+VcNQyMWqyLIcdw+ex
qxXfU8d8Pv8CJAmqgLlO1IlZdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPdriI8H
H3wAjTQdDr4W/4GcHuHCMB8GA1UdIwQYMBaAFDLg9wDjhyRRoagyzX3eQXW/uoNp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0MS8xNkMwQTcxNjRC
NkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpGR2hxRExOZmQ1QmRiLTZn
MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL011RDNBT09ISkZHaHFETE5mZDVCZGItNmcyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkI0MS8xNkMwQTcxNjRCNkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpG
R2hxRExOZmQ1QmRiLTZnMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK1Z8QsbCxBmsgHirt9yxIMd0xpp/+zxVx0LMaWgwACUWFwyv+ZKmwrIRAQ/K
VZRFS+XP30qUO5fRzl0sam+B0JO2JMvXsFSIhCYAIxAreHSro8G/rZJXPRvmr9u0
fpxkO9N3CUveyfCqRamehz1INI9qVkVrjnLPWk0RM+qEdPqDk3nAfkRf156jVym7
gHI21vvU/4Ij68SHMbNcKhZsUjyO8VETroQwBj5yubgzxNPVA8Zgc+FTO5cJvJGc
X2tAZlm7Bs9Y8C+3wjLvnZrjuSSo/B71cWJMbAWgMbNtRns5/lA66msB2S3akhdX
x7+WT+Xa1jNfNl1Tt1AvLxf6ow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:45 2026 by rpki-client