Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
File:                     aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft (raw, json)
Hash identifier:          drwzAJmwBGUbBbdYp5bZ83ynG2pVUgNHRnT2jxTILdE=
Subject key identifier:   14:C5:79:B3:BE:C6:05:4E:A5:81:25:FC:4C:BA:C5:68:A3:E7:0E:F6
Authority key identifier: 68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10
Certificate issuer:       /CN=A9174125/serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710
Certificate serial:       1536
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
Manifest number:          1536
Signing time:             Sat 28 Feb 2026 16:52:00 +0000
Manifest this update:     Sat 28 Feb 2026 16:52:00 +0000
Manifest next update:     Sat 07 Mar 2026 16:52:00 +0000
Files and hashes:         1: aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl (hash: GRIRPl3lq16Bwvj4ZrJVIVuh1bHqgPcdxJNOJcb22kM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl
                          rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5430 (0x1536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174125, serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710
        Validity
            Not Before: Feb 28 16:52:00 2026 GMT
            Not After : Mar  7 16:52:00 2026 GMT
        Subject: CN=69a31d30-e10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:13:f0:65:f9:be:34:d0:60:64:fb:bd:8e:
                    97:ff:a0:28:e7:e6:b2:8b:5b:02:df:c0:8f:c4:d0:
                    d2:f9:1b:2b:e4:d8:c5:a7:28:34:27:e6:b8:e8:56:
                    c1:b8:48:25:f8:17:60:21:01:8f:8e:96:53:ac:12:
                    54:47:92:8e:0a:85:87:37:b7:50:a8:ec:66:87:6b:
                    cc:24:69:77:bc:ae:75:db:66:d1:11:37:5e:dd:39:
                    86:fa:79:57:f1:40:13:54:63:e8:f5:47:71:63:3e:
                    de:8e:56:cc:32:24:6e:e4:6f:ea:58:53:14:dc:c0:
                    9c:c1:f5:bc:e9:fb:df:15:43:0f:49:96:29:d7:4b:
                    40:79:f1:04:00:e7:f3:a0:56:53:64:53:03:93:31:
                    11:91:99:97:e4:2f:55:b0:1a:c0:00:0e:57:3c:73:
                    88:30:86:61:fa:23:65:ba:1b:8d:34:40:14:21:4a:
                    35:da:62:15:f9:b0:92:31:2e:b9:6f:09:b4:53:88:
                    aa:91:eb:d2:60:c4:90:ad:46:22:a5:8b:2c:c3:20:
                    ad:7f:2d:5c:21:49:03:cb:72:f7:7c:d4:4e:00:83:
                    39:38:3b:76:4f:e4:b5:05:0c:3f:15:4a:f5:e9:6a:
                    5b:ed:10:d4:ce:fc:76:07:03:66:a4:67:fe:ed:de:
                    b4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C5:79:B3:BE:C6:05:4E:A5:81:25:FC:4C:BA:C5:68:A3:E7:0E:F6
            X509v3 Authority Key Identifier:
                keyid:68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:65:f0:13:8a:6e:2d:aa:47:90:e5:a3:bd:51:16:ea:97:be:
         ed:04:6c:31:4f:27:e3:04:c1:eb:25:cb:6f:b8:08:5e:eb:f2:
         36:27:7b:92:f1:a6:6d:37:9f:f4:ee:d4:24:62:cf:0f:76:ab:
         62:62:14:c2:ca:fc:9d:e3:a1:92:d8:a0:42:c1:85:0b:55:89:
         2f:c3:77:a2:b4:28:03:78:96:99:c4:05:3b:b9:28:78:a2:f4:
         69:27:6d:1e:f6:aa:d7:80:a9:0d:f5:0c:ac:86:0e:47:86:5f:
         1e:b2:f2:a2:a2:0f:08:5b:e7:a3:8a:c4:da:82:6e:42:a4:68:
         d2:79:8c:bc:b0:ce:46:13:e7:e8:70:7a:0d:f6:d4:4c:43:c7:
         31:fc:c2:69:af:5e:ea:79:3d:4b:f9:cb:cf:67:c7:4c:c5:c2:
         ba:51:1a:f2:b5:2c:6b:ca:ee:d8:b4:50:13:79:9f:ce:3c:0c:
         0d:1c:af:26:06:cb:67:15:7e:d4:42:dd:e8:73:8d:1f:3b:86:
         eb:42:ba:7b:13:2f:61:d2:7b:49:85:e1:d4:bc:19:02:63:ff:
         9a:9b:54:f9:0c:f0:c1:ac:57:1e:47:ac:39:9e:32:73:b6:1d:
         ad:e1:6d:a0:a1:0d:68:3e:99:b8:9b:24:c7:2c:b5:22:b9:81:
         ef:10:75:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:48:23 2026 by rpki-client