Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
File:                     tU4IRltUXO7x4uEAl3XZG6QStj0.mft (raw, json)
Hash identifier:          hJh/5Skr6A5FIdvx+r4fGq1l09j+NFFHCQmjCbd7ZV4=
Subject key identifier:   86:D5:35:B4:EE:50:C3:41:D9:AE:3D:17:0C:34:1B:5C:23:35:1A:44
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
Manifest number:          4C
Signing time:             Sun 01 Mar 2026 09:44:44 +0000
Manifest this update:     Sun 01 Mar 2026 09:44:43 +0000
Manifest next update:     Sun 08 Mar 2026 09:44:43 +0000
Files and hashes:         1: tU4IRltUXO7x4uEAl3XZG6QStj0.crl (hash: 4O6s+ri2OnvvwKt2kaYxE8XhC6FNKNNFMMvmHMdfIEk=)
                          2: 5493E832AF1511F09DB9CB78C4F9AE02.roa (hash: 51gJn/VKwmKiqlKvZvK/GbzYFHcLoSwqmBRf31iipIk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Mar  1 09:44:43 2026 GMT
            Not After : Mar  8 09:44:43 2026 GMT
        Subject: CN=69a40a8c-b626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0d:b9:f2:b6:76:db:e6:26:b9:b6:9e:8c:f4:
                    7e:40:61:46:76:19:54:a7:83:55:47:30:3c:c0:39:
                    70:d7:53:c3:a1:ad:e3:ab:45:ed:8f:d8:f5:4f:1a:
                    ab:06:b8:e5:84:c1:b1:be:92:4b:7d:09:2f:9b:4c:
                    16:c4:65:d0:c6:6b:a5:86:a1:13:5e:12:97:53:8b:
                    76:a0:24:2e:b6:3f:7b:d4:22:a6:23:9f:b6:19:93:
                    1a:2e:38:33:be:34:91:47:15:2f:61:bb:c1:fa:ea:
                    40:ef:b9:3d:d7:12:09:08:b8:94:a8:1e:14:00:d7:
                    5d:29:c3:1d:ab:0e:1e:ec:02:39:68:58:2c:04:2d:
                    49:2f:24:9b:4f:85:10:4b:a8:a7:a2:b4:93:ba:ae:
                    78:a5:cf:24:aa:ee:0b:2c:72:34:1a:23:b2:32:73:
                    9e:71:5f:2e:86:69:cb:54:ee:2e:43:05:24:0c:e5:
                    07:2b:bd:96:0d:03:89:37:cd:63:1b:8c:4c:2c:57:
                    ef:aa:d5:bc:77:cb:25:b0:32:9c:7c:c6:71:85:80:
                    82:32:0a:e7:99:4b:8c:c0:bd:5f:ff:91:56:7b:57:
                    1e:f0:be:8a:be:05:b5:06:57:71:81:34:59:8f:69:
                    6b:3c:d5:84:4a:11:9e:ec:bf:95:ad:ec:99:fd:2d:
                    5f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D5:35:B4:EE:50:C3:41:D9:AE:3D:17:0C:34:1B:5C:23:35:1A:44
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:c3:9c:58:46:13:85:b4:19:32:39:75:c4:92:ce:05:3e:73:
         21:6c:22:64:fb:97:b0:f6:00:59:97:b7:7d:ae:66:05:ca:e9:
         e5:f0:05:5b:36:85:64:32:b5:bc:ce:c4:c8:ac:03:63:0e:5f:
         7e:02:21:dd:b3:d7:0f:71:1d:dd:b9:cb:5d:92:9c:41:b6:5b:
         62:49:e8:3c:60:c0:19:b9:6d:ab:55:d1:0a:20:dd:55:5c:c4:
         2a:46:a5:14:e4:97:ba:e3:31:0d:88:6c:31:f6:6c:71:c3:aa:
         32:a9:f5:f5:44:38:be:98:d7:de:15:8c:4e:ef:56:d8:34:7a:
         11:6b:4a:d9:25:5c:76:ce:74:66:be:11:b4:3e:cf:67:a2:00:
         ef:ee:d9:4a:db:a0:ac:f7:20:ac:d3:f1:e1:ae:29:3a:17:3f:
         4b:a6:f2:6e:37:af:c0:3c:42:db:89:99:e0:2a:dd:ea:35:44:
         7d:10:46:73:7e:42:12:0f:ed:bf:16:70:96:fb:b9:6b:d8:84:
         7f:cd:3d:97:c2:f3:52:3d:d0:91:bc:f9:7c:ef:13:bf:c7:bb:
         29:eb:1f:8e:ce:5e:f5:f9:68:58:16:9c:27:38:4c:0c:3f:57:
         d8:49:29:ee:21:09:a7:34:5f:50:62:bc:c1:8c:95:a6:56:06:
         3f:b0:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:27 2026 by rpki-client