Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
File:                     A0ZyQIbx848yyqFygmhZGcfIu28.mft (raw, json)
Hash identifier:          UsJNpZGBxa4shlMummj1lv06mibE279wzr/dSLuq17A=
Subject key identifier:   3A:EF:37:49:81:72:80:2B:01:09:B5:39:F0:0F:81:FC:FA:8A:BA:C8
Authority key identifier: 03:46:72:40:86:F1:F3:8F:32:CA:A1:72:82:68:59:19:C7:C8:BB:6F
Certificate issuer:       /CN=A9173591/serialNumber=0346724086F1F38F32CAA17282685919C7C8BB6F
Certificate serial:       0C50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
Manifest number:          0C4E
Signing time:             Sat 28 Feb 2026 18:52:42 +0000
Manifest this update:     Sat 28 Feb 2026 18:52:41 +0000
Manifest next update:     Sat 07 Mar 2026 18:52:41 +0000
Files and hashes:         1: A0ZyQIbx848yyqFygmhZGcfIu28.crl (hash: D1XyMRanBB/68UWrWi1d0CBkHeUx3cZ5IJPXkbANVow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.crl
                          rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3152 (0xc50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173591, serialNumber=0346724086F1F38F32CAA17282685919C7C8BB6F
        Validity
            Not Before: Feb 28 18:52:41 2026 GMT
            Not After : Mar  7 18:52:41 2026 GMT
        Subject: CN=69a3397a-e978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:34:01:dd:46:1b:c7:e8:ba:6f:e4:e4:40:54:
                    c9:f3:4f:3b:bd:59:d1:1e:c9:7d:38:18:5c:01:98:
                    b3:7d:3d:cb:60:bf:cc:c1:a9:b8:be:56:ae:af:49:
                    b9:80:f5:f9:20:d9:8c:43:e6:03:a2:7e:17:6f:7f:
                    44:5e:96:e9:10:08:28:55:27:fd:a9:68:c1:c0:6f:
                    9a:7c:a6:cc:a2:75:15:ac:41:2e:bf:0c:3d:d6:75:
                    71:d8:7e:c1:8a:9d:90:05:c9:e2:db:f9:2b:48:59:
                    e6:ad:c9:7b:57:39:b1:84:de:d1:56:46:29:0a:0d:
                    2c:24:0c:8d:68:14:5b:8c:fa:4d:fb:db:c1:01:2b:
                    19:8e:7b:c7:21:7f:b0:ed:aa:88:49:09:3b:4b:8b:
                    7e:b0:13:aa:18:1a:aa:0f:ac:c5:83:e9:d5:2d:00:
                    92:fd:6d:bd:1d:35:86:67:a5:fd:31:37:8b:12:3c:
                    f8:e4:c4:a2:8e:94:00:f4:cd:b0:80:bf:2a:d7:2c:
                    7f:ff:4d:47:9d:a1:66:fa:08:ed:e6:d5:92:69:10:
                    16:d5:f4:68:08:7f:4c:a3:c8:f4:8c:5c:47:90:ee:
                    5d:90:3c:48:d2:12:c5:13:31:f3:5f:8c:4c:d4:ec:
                    61:a3:b2:d8:77:e0:9d:d5:f8:a8:51:12:ee:42:5c:
                    bc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EF:37:49:81:72:80:2B:01:09:B5:39:F0:0F:81:FC:FA:8A:BA:C8
            X509v3 Authority Key Identifier:
                keyid:03:46:72:40:86:F1:F3:8F:32:CA:A1:72:82:68:59:19:C7:C8:BB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:58:5f:5c:60:e3:d3:fb:57:fd:51:d5:e5:08:cb:4a:2d:26:
         7d:8a:65:4a:ab:dd:9e:4e:99:d6:02:f5:0a:a2:f1:e7:26:4b:
         43:67:ab:d1:d6:65:da:35:1f:57:24:10:cb:b3:28:bb:94:45:
         45:1a:0c:20:1f:3a:42:a6:c8:d3:6f:3b:04:40:02:fc:5d:9b:
         64:81:a4:54:34:fd:7c:e8:64:ac:ff:25:a6:df:27:ae:df:f6:
         65:31:a9:69:e6:ad:b3:cf:a6:e0:b4:99:a1:60:91:f2:ae:9c:
         29:81:f8:c9:1b:92:92:3a:be:98:22:9a:8f:d5:04:1c:a3:fe:
         9d:ba:8c:46:3b:91:c8:70:6b:d6:7a:df:6e:82:25:78:84:13:
         c7:1e:f0:75:47:00:14:76:50:03:fc:13:34:04:7b:cf:4e:8f:
         80:b3:92:a5:cc:fc:30:46:dc:37:4d:6a:16:d1:bf:ee:94:af:
         7c:8c:5b:c3:20:f4:88:82:e6:31:06:4c:1d:0f:7c:e4:ed:6e:
         b5:72:8d:18:2e:f2:9c:e2:60:fd:39:48:89:66:2e:bb:a3:7f:
         1d:dc:3a:3b:08:9d:27:79:4f:46:d2:00:53:be:4d:19:18:07:
         75:df:b1:53:df:19:26:c9:5b:bd:07:9c:3a:a1:50:d3:7b:2c:
         d6:ee:71:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:39 2026 by rpki-client