Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
File:                     PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json)
Hash identifier:          puebz+flxF1nz3/At5axf/f2gvH6724YxVZTiqT4F7w=
Subject key identifier:   DD:20:7B:FB:15:0A:60:62:9F:69:B7:27:31:2E:99:1B:11:B3:E5:A4
Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72
Certificate issuer:       /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372
Certificate serial:       019A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
Manifest number:          0194
Signing time:             Sun 01 Mar 2026 05:16:46 +0000
Manifest this update:     Sun 01 Mar 2026 05:16:45 +0000
Manifest next update:     Sun 08 Mar 2026 05:16:45 +0000
Files and hashes:         1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: MHKiYyOtHn0RHn+cgYgnhYxae/1NT1wX66ISkTcvbHk=)
                          2: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: vjgahSKHgAt0pKH9ZvyBQssVmzZCnj8JvOvCUHQg/Eg=)
                          3: 78321A66068D11EF92608943C4F9AE02.roa (hash: t3FRQePlchRMM21FbtXsaZzbDzSWRANgfDaLHDn0f9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl
                          rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372
        Validity
            Not Before: Mar  1 05:16:45 2026 GMT
            Not After : Mar  8 05:16:45 2026 GMT
        Subject: CN=69a3cbbd-d54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:73:68:a7:d5:c2:61:8f:dd:da:c2:16:77:05:
                    45:69:ee:7b:05:9f:b8:05:6c:29:91:a6:2c:53:c2:
                    07:b2:be:e5:eb:5c:f4:8a:60:23:aa:cc:13:61:a7:
                    d7:1a:01:14:12:73:be:a4:c6:25:ab:c8:b2:75:ba:
                    28:e3:bf:4d:4d:f2:ad:d9:81:13:2e:26:23:de:41:
                    48:c3:9d:f0:0f:4d:cb:e5:99:76:f8:73:3b:29:29:
                    bb:f0:28:db:d1:a6:55:15:9e:1b:15:e3:95:f8:01:
                    7f:1b:df:bc:87:0c:ea:c5:15:16:db:ad:a1:77:12:
                    00:17:4b:68:00:fe:13:90:0a:73:97:77:9e:86:cb:
                    3a:df:bb:0a:dd:1f:f9:a7:55:d8:42:6d:6b:4f:35:
                    fb:24:cb:2d:15:89:38:a4:63:5e:55:b3:b4:04:41:
                    21:f9:6a:80:c1:e3:41:15:1f:e8:d1:2d:07:50:75:
                    b3:ff:10:1c:77:1f:71:9c:e6:b5:54:15:3e:27:62:
                    f5:b4:2b:16:94:6c:9b:53:75:86:b9:cd:67:61:35:
                    87:90:66:35:16:ee:c4:41:8e:a2:d3:97:86:4a:99:
                    f4:5b:bf:f0:30:cb:68:d5:3f:9c:91:5d:82:be:32:
                    6d:95:b4:0b:e3:d4:0d:89:02:83:5f:3b:ac:fe:88:
                    49:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:20:7B:FB:15:0A:60:62:9F:69:B7:27:31:2E:99:1B:11:B3:E5:A4
            X509v3 Authority Key Identifier:
                keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:25:85:20:13:1b:49:46:46:d1:7d:44:02:c8:dd:ad:74:d5:
         78:fd:69:0b:d8:e1:5f:df:ac:df:3f:6b:77:26:6b:b9:27:a8:
         64:2c:59:3e:e1:4e:ec:38:74:f9:27:2b:95:7c:a2:63:25:4d:
         9f:8d:b4:2f:01:e3:41:25:15:53:bc:14:7f:f7:cc:01:de:91:
         92:f6:cc:bd:8a:ae:04:8d:57:9f:6e:e2:46:14:59:7d:34:d9:
         4e:4e:ef:1d:cc:ff:ba:28:bb:bb:5c:01:f3:82:52:33:03:10:
         09:7a:9c:43:49:04:4c:89:94:6f:48:02:e9:ff:64:67:81:29:
         58:75:45:9c:02:f7:6c:01:ac:77:60:e1:fc:19:89:30:64:43:
         a9:69:5a:73:56:a5:51:45:c1:31:2a:15:ee:6a:8b:ca:ab:aa:
         4d:10:38:1a:56:a9:20:a7:59:4f:7c:6c:ab:49:21:cc:3f:83:
         ce:80:04:90:18:dc:e6:6e:79:8a:3f:60:f5:47:c3:83:83:53:
         48:a9:2c:c3:6f:8d:54:42:37:c2:b0:f2:ab:56:17:ff:4f:be:
         66:6e:25:26:b3:23:dc:77:8b:8c:46:52:29:e7:77:c6:41:d0:
         12:54:5d:8e:4e:2d:cc:dd:ca:c4:60:73:90:d4:9d:e0:51:96:
         c1:d7:bd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:05 2026 by rpki-client