Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
File:                     CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json)
Hash identifier:          GJxTg5QR/KizrszXcoS0woK0jqeWkMkQRCxdOgN4pMo=
Subject key identifier:   07:92:B3:3E:EE:72:1D:AF:EC:1A:DC:DF:FD:2A:8C:C1:47:A0:ED:BA
Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA
Certificate issuer:       /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
Manifest number:          8C
Signing time:             Sun 01 Mar 2026 08:51:11 +0000
Manifest this update:     Sun 01 Mar 2026 08:51:10 +0000
Manifest next update:     Sun 08 Mar 2026 08:51:10 +0000
Files and hashes:         1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: eWGQpfwTeQ3lZnG7KxYg07FAFDtNcPt0BBatiPjYSG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl
                          rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA
        Validity
            Not Before: Mar  1 08:51:10 2026 GMT
            Not After : Mar  8 08:51:10 2026 GMT
        Subject: CN=69a3fdfe-119b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:57:95:7d:76:79:d3:37:6d:8b:13:49:42:3a:
                    4f:0e:f4:bd:c5:ba:85:85:9f:e9:c6:34:77:c1:fc:
                    1a:b3:4d:53:c0:c3:da:0f:cb:ec:ac:df:e9:0a:ae:
                    15:57:83:a1:27:81:eb:0f:a7:21:8f:43:27:75:12:
                    31:e3:ec:5a:31:eb:6f:6a:12:dd:52:10:97:23:f2:
                    25:e1:87:29:a4:a1:80:ba:df:56:61:00:48:e4:3d:
                    16:e2:2c:5c:ae:a8:66:b6:49:c6:c8:63:d8:69:12:
                    4e:0b:8f:a5:0c:5d:be:34:e8:64:4a:b8:01:a3:fc:
                    cf:88:01:83:2b:fe:ac:1c:f9:04:5e:d0:ff:41:3c:
                    a0:ef:fa:97:70:d1:96:c5:28:5b:18:34:c8:21:f2:
                    43:36:c3:f2:b2:63:34:ae:43:7a:59:29:81:82:77:
                    1d:80:0c:48:70:cb:92:b8:73:27:c9:b2:de:67:0e:
                    ec:95:f3:b0:f7:6f:66:2e:58:09:e6:bc:ed:62:fb:
                    09:f5:d9:80:d0:4c:b8:59:64:02:90:5b:ce:d1:30:
                    31:bb:d9:22:2a:2f:82:82:c7:68:4f:a3:72:4c:ab:
                    44:cd:51:22:57:5a:0e:ae:68:cc:19:a7:68:51:04:
                    1a:b8:6c:e3:27:00:d8:4d:94:bf:19:9b:6f:ed:90:
                    24:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:92:B3:3E:EE:72:1D:AF:EC:1A:DC:DF:FD:2A:8C:C1:47:A0:ED:BA
            X509v3 Authority Key Identifier:
                keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:89:ad:b1:3f:7b:42:8a:dc:e7:6f:4f:47:99:40:e8:b3:7d:
         7f:bf:8d:8c:8f:dd:bd:4e:31:3c:29:08:c6:a4:13:c3:fe:95:
         1e:f6:75:8b:a3:b2:e2:ab:7d:23:52:cc:79:5f:d4:4f:4d:fa:
         f6:96:90:d3:6a:4a:b2:08:10:4d:9e:50:25:49:41:ed:63:bc:
         e4:9c:21:40:31:4f:ba:be:0b:10:ec:b3:16:54:4b:a0:b5:a1:
         46:64:f6:7e:ca:f1:07:78:f0:d2:a7:d0:12:7f:78:d9:4e:b4:
         32:46:bf:ad:49:96:e2:50:3a:d9:56:21:f9:a3:87:3c:00:75:
         94:40:6d:df:9d:28:71:37:d5:93:70:2d:4f:07:6e:0e:20:59:
         86:c6:07:85:75:c1:d4:54:8c:99:8f:8b:af:ba:c2:b9:eb:da:
         f2:ec:97:bb:02:5f:bf:ad:b3:ce:25:cc:44:e0:29:ee:ab:1f:
         a1:ff:19:ad:fd:2f:92:56:c1:c8:cd:87:a5:2c:32:7b:05:8d:
         ce:6e:f0:83:76:a9:11:d8:58:72:04:29:03:42:ed:b2:a5:c9:
         86:69:21:c2:c0:c5:83:57:90:d7:e7:1b:fc:ba:50:90:fa:ea:
         8f:69:8d:80:4e:2b:61:f1:71:22:2b:22:9c:e5:a4:3e:f7:8c:
         be:75:08:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:07 2026 by rpki-client