Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
File:                     PM59J4idCNUwg0kqqJygm2jw5fA.mft (raw, json)
Hash identifier:          98ll9SJsjhf9sAZEwQSt7AP08LOZtswj8eGqL40kyD8=
Subject key identifier:   DA:1E:10:24:3E:B6:C9:A7:D8:26:CF:FE:56:BC:DD:11:05:A4:2F:F3
Authority key identifier: 3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0
Certificate issuer:       /CN=A9173161/serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
Certificate serial:       D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
Manifest number:          D4
Signing time:             Mon 02 Mar 2026 13:29:28 +0000
Manifest this update:     Mon 02 Mar 2026 13:29:28 +0000
Manifest next update:     Mon 09 Mar 2026 13:29:28 +0000
Files and hashes:         1: PM59J4idCNUwg0kqqJygm2jw5fA.crl (hash: hHFtWGz5x76bWsYMxqNBVTWuJ1GmY4xfjgs4qq/MJXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl
                          rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173161, serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
        Validity
            Not Before: Mar  2 13:29:28 2026 GMT
            Not After : Mar  9 13:29:28 2026 GMT
        Subject: CN=69a590b8-5168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:35:15:ad:43:7c:04:87:0c:f8:2f:f5:3c:a3:
                    7b:d7:b0:78:54:0c:f0:5c:c2:2e:d8:d0:2d:af:f4:
                    f7:74:0b:b1:04:f1:e8:fd:0b:72:2c:b0:aa:af:ce:
                    17:d1:55:7e:b6:0f:0e:97:e5:bd:f7:15:b6:c6:68:
                    cf:86:de:05:58:e3:a4:d2:80:02:2a:71:d8:04:64:
                    65:a2:79:df:b9:5e:2b:aa:41:a7:a8:ee:f3:b0:f1:
                    d3:01:6d:81:67:94:4f:ae:4d:a6:9e:e3:6a:20:d7:
                    33:12:8f:b7:05:ac:ce:9e:d3:1b:38:8c:f5:78:8c:
                    5d:97:99:ed:69:67:b9:3a:4e:9d:2c:1d:99:0f:c5:
                    8e:42:5f:1a:2e:04:00:4f:b2:5f:19:36:af:11:f1:
                    c2:57:49:a1:65:b8:11:fb:02:a3:3b:d6:48:28:16:
                    71:79:10:66:86:d7:9b:5d:e8:c3:0e:1a:09:d3:3e:
                    1c:16:29:bd:75:ef:fa:1a:5e:62:1a:e6:3b:d5:d4:
                    28:c8:ec:5b:41:4a:dc:89:c6:ff:d9:3c:d0:10:25:
                    2e:fd:91:76:93:9f:ac:67:49:72:c0:8e:d7:15:20:
                    02:83:9a:ba:9f:bf:ea:89:88:97:7a:d6:0e:12:a3:
                    51:5f:99:53:c1:82:9e:35:85:dd:81:cc:4e:9d:18:
                    0b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1E:10:24:3E:B6:C9:A7:D8:26:CF:FE:56:BC:DD:11:05:A4:2F:F3
            X509v3 Authority Key Identifier:
                keyid:3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:80:8d:27:6f:88:48:2f:80:bf:03:41:f2:63:cb:af:de:35:
         c1:d9:61:4b:d7:a7:a6:31:66:7a:f3:de:5b:f4:4f:90:b6:b5:
         0e:21:88:42:81:20:b4:a1:50:f5:68:7d:cd:66:8e:4f:d3:64:
         10:8b:25:d8:84:b8:93:20:77:3d:93:4f:dc:f8:6a:17:c4:7f:
         14:f5:5a:e8:e7:58:04:cb:82:78:7e:21:af:4f:22:29:0f:1e:
         1f:e8:7d:7b:d2:e7:fd:b6:6c:8d:06:4a:62:dc:83:b6:d0:76:
         d8:31:16:fe:c5:fd:9d:ec:5e:16:6f:1a:d1:e9:c2:62:b0:71:
         d4:fd:f0:91:3f:1d:4a:7b:46:2e:24:f6:e7:77:58:3f:75:4f:
         10:05:1f:ca:5d:81:f4:77:78:f2:02:7d:de:82:44:42:a5:54:
         4d:e2:7b:04:f4:f9:7f:72:27:94:bf:a8:da:5a:6f:55:e4:5c:
         fd:60:8f:74:ca:61:91:a8:58:c0:55:1b:92:57:b6:1e:94:ad:
         16:1f:f1:d7:6b:87:84:7f:e5:37:a9:37:8d:47:ef:b9:ae:a5:
         e7:2b:1f:59:ef:d5:59:d5:84:fd:f3:aa:35:7e:c4:30:74:6e:
         93:ea:2e:4e:2a:0b:f7:d5:6c:bb:7d:a6:33:32:9a:c5:11:c3:
         64:c1:44:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:29:43 2026 by rpki-client