Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft
File:                     sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft (raw, json)
Hash identifier:          RP2IIH4hw1HG4fq4mU3yoMmy781PgCIvYK+YwzPGqcA=
Subject key identifier:   DF:44:76:2B:71:7E:EB:38:12:AE:70:28:A3:12:25:57:CD:DA:4A:56
Authority key identifier: B1:52:4F:BE:46:5F:E4:FB:99:FE:61:1D:FC:04:0F:51:0C:11:68:FE
Certificate issuer:       /CN=A9176E5A/serialNumber=B1524FBE465FE4FB99FE611DFC040F510C1168FE
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft
Manifest number:          62
Signing time:             Sun 01 Mar 2026 09:23:03 +0000
Manifest this update:     Sun 01 Mar 2026 09:23:03 +0000
Manifest next update:     Sun 08 Mar 2026 09:23:03 +0000
Files and hashes:         1: sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl (hash: BzIP9ToEtyTx2V+iEO6SKDQq/IaUUYkeBRuaRjmijjc=)
                          2: D9624ED082FD11F088ACD36DC4F9AE02.roa (hash: x04ROYFrMT9oBHbHLSP4ELtb1xdWEg+KH0XVVfaWkMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl
                          rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176E5A, serialNumber=B1524FBE465FE4FB99FE611DFC040F510C1168FE
        Validity
            Not Before: Mar  1 09:23:03 2026 GMT
            Not After : Mar  8 09:23:03 2026 GMT
        Subject: CN=69a40577-ca0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:0b:78:03:13:62:7c:8d:74:38:60:7e:c5:
                    64:c2:d5:ae:3f:4a:e7:80:d2:24:9d:24:50:48:47:
                    6b:b2:7e:5f:06:b4:16:5e:78:48:c8:50:0b:16:05:
                    ab:04:48:10:a9:8e:44:ea:8a:fc:ff:97:6a:dd:52:
                    fb:54:74:b1:07:37:33:84:41:02:74:41:21:7b:d9:
                    3a:21:12:51:3e:fc:d9:e6:59:81:fb:98:de:4e:a1:
                    74:fd:67:68:98:a7:79:d7:d5:7a:28:e5:bc:3c:94:
                    f1:a8:c6:dc:dc:48:1e:06:77:7d:5c:7c:ad:b4:b6:
                    5e:08:73:82:d9:93:23:6e:b1:27:48:4c:77:e7:74:
                    2d:f5:b6:4c:94:48:a6:57:c6:59:87:3b:90:06:fe:
                    f8:2b:32:9f:6b:15:6d:43:82:14:9f:32:46:d5:f9:
                    3c:d1:ca:af:00:06:6c:0c:9d:50:c9:51:19:0d:f3:
                    18:13:a3:83:26:2a:b7:55:2e:58:e3:d2:e2:50:c8:
                    60:c0:a0:bd:de:59:47:a5:d0:0b:6a:d3:6d:26:76:
                    4b:27:77:7d:32:86:64:45:ef:de:bc:a5:5c:7b:5f:
                    41:a4:e5:8c:68:e3:38:0b:c1:3d:09:7d:48:74:b8:
                    c5:ff:13:c4:5a:24:e4:f3:5c:1d:6d:ca:3b:f6:7b:
                    e0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:44:76:2B:71:7E:EB:38:12:AE:70:28:A3:12:25:57:CD:DA:4A:56
            X509v3 Authority Key Identifier:
                keyid:B1:52:4F:BE:46:5F:E4:FB:99:FE:61:1D:FC:04:0F:51:0C:11:68:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:cc:2e:61:bc:a2:f1:5d:1a:c8:39:13:f2:d6:63:0f:8b:aa:
         0c:99:e2:d3:d9:5c:0f:9e:71:f6:ce:73:6e:ad:7d:06:f5:24:
         ee:61:17:65:35:78:b4:31:fa:ec:9c:c3:a2:8a:ff:05:08:2d:
         c1:26:54:f3:5d:ef:f0:d0:cb:c7:75:97:ce:f3:b6:bc:e6:23:
         cc:9a:3c:8a:ef:e7:00:e4:7d:0e:4b:5e:d3:fc:d9:28:46:ca:
         ca:48:93:8d:3b:09:dc:ae:24:6a:4d:94:d2:6b:d0:2f:ce:45:
         c7:0b:52:67:13:c7:11:f0:3c:da:57:28:e4:33:01:68:e1:f2:
         3e:dd:92:51:f3:07:95:ca:5c:f2:b6:d8:47:24:92:80:76:83:
         71:f6:74:cb:82:e8:6f:5c:fb:73:ef:26:dd:a8:eb:c9:32:f1:
         77:52:8f:50:18:c7:f9:ad:3c:5a:9f:95:bd:4b:d2:9f:92:80:
         60:6b:c9:95:a6:35:4c:ad:fc:df:53:0b:90:55:85:35:09:62:
         3f:90:43:fe:7f:f1:44:07:d9:12:99:ea:8e:22:bb:21:63:3e:
         3e:ef:d9:33:84:e9:25:26:93:9d:a2:05:5c:dc:81:1a:a0:5e:
         fd:7d:af:aa:82:15:5e:57:df:88:dd:d3:d8:0c:60:fc:56:d7:
         b6:a6:5d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:14 2026 by rpki-client