Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
File:                     qEozZepSO9pPIzph5Qd_MRjWP3g.mft (raw, json)
Hash identifier:          LWeW6wZr/9QqcG9tQAwcmjXOw87c3WnP/AQpN49qMe0=
Subject key identifier:   8A:50:40:DC:62:39:A3:D7:26:1F:B7:56:8A:A9:FA:79:08:D5:3A:71
Authority key identifier: A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78
Certificate issuer:       /CN=A9174FE8/serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
Manifest number:          33
Signing time:             Sun 01 Mar 2026 10:04:37 +0000
Manifest this update:     Sun 01 Mar 2026 10:04:36 +0000
Manifest next update:     Sun 08 Mar 2026 10:04:36 +0000
Files and hashes:         1: qEozZepSO9pPIzph5Qd_MRjWP3g.crl (hash: GgjyS4IqzMe1RjdtpLSrX+Nfd40P9Af5+/k4grWb9dI=)
                          2: F5B1147ACC4C11F0B2EE7944C4F9AE02.roa (hash: rthVEOzl3I+Nrh1/x+VYyq3xjzoN6lgAA50smRMa7oE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl
                          rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174FE8, serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78
        Validity
            Not Before: Mar  1 10:04:36 2026 GMT
            Not After : Mar  8 10:04:36 2026 GMT
        Subject: CN=69a40f35-f9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:4b:a9:20:61:d8:61:d9:35:9e:6c:16:d6:
                    f5:bb:35:d6:52:a1:83:4e:2e:1c:c3:3b:4c:17:60:
                    ce:e0:c4:98:1e:cf:ef:d1:aa:68:d9:fc:60:4c:18:
                    c7:06:b3:f0:cd:3f:58:04:68:39:aa:f4:71:65:85:
                    b5:68:c4:e1:18:64:4f:0f:29:82:36:39:d8:db:52:
                    6e:d7:2c:eb:cd:ac:2f:bb:c1:62:b8:78:b1:7e:92:
                    a5:cd:7d:0c:22:9f:00:bc:6f:31:88:2f:0f:f8:a9:
                    80:57:93:f8:a5:29:e8:ad:aa:93:22:b4:98:44:ad:
                    24:26:a3:57:b4:73:ba:a2:40:68:f5:ce:4a:a3:68:
                    cf:94:3d:56:87:7c:bb:f8:ba:40:54:fb:59:a2:59:
                    42:7a:fe:04:b7:c6:a2:e8:b3:82:d2:46:83:1e:e6:
                    95:88:7c:5e:82:dd:d0:29:11:99:cb:c3:06:97:fc:
                    18:33:5c:3a:a1:16:d1:81:5f:e7:c8:ec:43:d6:35:
                    05:22:6c:f3:5e:8b:2a:11:1f:b6:72:5e:c8:ce:39:
                    3d:5c:81:2a:2e:d8:42:41:f3:43:15:bd:a9:e4:ee:
                    82:98:05:b6:fa:c2:76:25:02:45:b7:a6:ab:e5:a9:
                    75:a6:3b:6c:3d:a4:b0:00:03:3a:37:0a:5f:ef:37:
                    55:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:50:40:DC:62:39:A3:D7:26:1F:B7:56:8A:A9:FA:79:08:D5:3A:71
            X509v3 Authority Key Identifier:
                keyid:A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:36:32:04:45:20:5e:66:dc:95:9d:68:30:b3:17:d1:27:5b:
         f6:72:e4:57:44:1d:a7:5a:e9:03:a8:45:f6:d2:13:fe:b6:86:
         3d:d1:95:6a:27:1f:aa:47:59:50:be:5a:ed:91:cd:62:39:11:
         58:63:8c:6f:42:e2:97:38:f6:69:d0:23:a9:cc:60:c5:4a:3a:
         28:aa:8a:dc:5b:50:74:2a:8c:31:b6:11:e6:9e:2c:c0:52:38:
         0c:77:b6:13:80:2e:2f:13:9c:9d:17:24:23:b2:24:8c:23:b4:
         82:d4:e7:9d:b0:8e:1b:3d:60:5d:66:68:b8:f5:d2:9e:7b:68:
         0a:d9:cc:94:38:a6:90:49:92:32:e9:f1:7a:ac:e3:76:81:89:
         6e:16:c0:d2:44:35:1b:8b:b0:49:dd:b7:47:4b:25:d0:63:67:
         60:df:95:1b:ae:4a:b8:bc:2a:d8:05:43:11:a6:52:56:39:4a:
         1b:7d:19:5e:8a:f3:7b:b3:20:73:15:58:69:cc:f5:5a:a3:73:
         1d:cb:26:d2:9a:93:16:28:5b:a3:d7:13:9f:cf:5c:99:ec:0a:
         c6:78:22:51:79:45:c5:31:32:09:96:66:78:66:cc:95:0c:de:
         79:e3:93:ec:c1:67:ea:c0:2b:bd:cb:b9:30:29:ea:56:7b:a9:
         65:da:18:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:52 2026 by rpki-client