Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
File:                     Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json)
Hash identifier:          CDC+WP5sh8xDjgAQDpo+CCjRZONvT/Xu+9/8gbQTfok=
Subject key identifier:   31:56:2A:32:40:FE:D9:ED:77:F6:45:92:34:DE:F1:E7:2E:78:D4:7F
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Certificate issuer:       /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial:       359A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
Manifest number:          3557
Signing time:             Sat 28 Feb 2026 14:17:26 +0000
Manifest this update:     Sat 28 Feb 2026 14:17:26 +0000
Manifest next update:     Sat 07 Mar 2026 14:17:26 +0000
Files and hashes:         1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: R9fSIfRe4aYV3WXS/wKRdrcSvHC+tSju2DyCup2uOE0=)
                          2: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: KsAXbBAtUhVz+UVmegsopThNl/Mv9RZcafSTJFJXVt4=)
                          3: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: na6D5MT1LprX316cXbP/lhvtb/2BzuNUnH7V1pK1SnQ=)
                          4: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: KSd87kYfN+cVDiwWy8vlRr1Y12RS3oWEKFNDzPhKEAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13722 (0x359a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
        Validity
            Not Before: Feb 28 14:17:26 2026 GMT
            Not After : Mar  7 14:17:26 2026 GMT
        Subject: CN=69a2f8f6-c310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c7:26:4a:ac:3c:33:f9:88:cf:a5:30:77:48:
                    2e:f9:0f:6c:e8:9f:b2:26:45:f3:47:b6:e9:45:19:
                    e4:01:7b:f0:96:5f:91:b3:22:2a:b4:46:84:89:8d:
                    b4:68:92:f3:7a:79:61:2c:c9:29:d0:62:3b:f8:d2:
                    9a:b2:69:6e:e9:5f:39:38:66:3a:9c:e3:08:8c:b2:
                    12:cb:7c:d7:19:fe:43:b5:78:63:4b:e2:5b:d5:51:
                    34:b5:9f:44:2b:82:49:37:0b:cf:c6:11:ae:b8:6c:
                    ac:85:83:93:32:68:13:c3:6a:bd:2b:b4:1b:3a:75:
                    7c:81:8f:e3:ef:b2:cf:3f:49:7b:9b:e7:78:be:1f:
                    9c:c4:26:68:3a:09:ab:95:f6:73:2d:71:49:fd:55:
                    41:7c:8e:7c:5a:aa:19:ce:48:82:31:09:b8:0c:45:
                    a4:af:87:10:ca:80:90:7c:cb:09:ce:dd:c6:b8:c5:
                    4f:88:31:b2:10:6e:71:29:10:77:7a:01:a0:4c:2b:
                    9f:62:15:e7:01:90:06:11:fd:ba:5d:5c:d0:e1:fa:
                    15:a7:9d:2b:51:1c:79:3b:73:ab:72:60:8d:93:8d:
                    76:15:8b:f2:fc:33:09:19:4c:4b:59:be:b5:bf:61:
                    35:5f:71:d8:1e:b4:cf:a7:e1:99:4b:e2:57:d4:3b:
                    0f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:56:2A:32:40:FE:D9:ED:77:F6:45:92:34:DE:F1:E7:2E:78:D4:7F
            X509v3 Authority Key Identifier:
                keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:8c:7a:89:07:63:77:df:01:54:65:15:a0:ea:40:a6:a2:1e:
         f2:80:a6:b4:2f:75:0b:c6:f7:1a:83:08:df:95:3a:24:33:14:
         10:97:91:11:ae:4c:c7:a0:ce:c6:e5:f5:1e:03:04:c3:38:d7:
         f9:31:ab:cc:77:cd:cd:80:c3:bd:e0:18:d5:78:f3:a3:6c:92:
         48:fe:97:41:1c:1b:58:a3:12:1d:86:5f:85:e2:cb:f9:52:97:
         6e:09:f3:ee:f1:01:cb:ad:b1:a4:48:b1:fc:89:b3:7f:a8:6e:
         40:81:ec:8d:71:1d:3b:a9:17:3f:97:73:b6:b3:1d:0d:11:56:
         7a:f7:e3:75:e2:65:62:bd:20:30:a5:fe:c8:47:55:d7:0f:22:
         cc:e4:86:f0:4f:e9:10:05:6f:fc:d8:d3:00:34:fc:df:4f:28:
         e2:a7:c8:b5:2c:0c:c9:e4:db:dc:86:83:e0:87:56:e0:4f:5a:
         fd:84:db:4b:e7:76:ab:dc:1f:ce:83:89:60:6a:99:8e:a8:f0:
         02:21:bc:55:c8:32:3b:5c:60:f6:33:a1:bb:c2:1b:0e:2a:e8:
         39:00:60:a4:b7:66:45:79:c3:6b:60:4f:de:ce:3f:10:64:76:
         2e:49:41:14:53:a9:5b:b9:2d:df:55:58:3f:43:8e:f5:ad:0b:
         f0:49:af:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:10 2026 by rpki-client