Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
File:                     Pa__vH6RLp_80qLg2SCOvJlwmyI.mft (raw, json)
Hash identifier:          dDsmcc0dbl6IP7T/SlVtjF/rxvSMHGN220xKe1Lvk80=
Subject key identifier:   DC:5C:0D:B4:13:0D:AE:22:E4:07:F6:2B:A6:AF:ED:37:D0:85:0A:06
Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22
Certificate issuer:       /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
Certificate serial:       06A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
Manifest number:          0683
Signing time:             Sat 28 Feb 2026 23:02:35 +0000
Manifest this update:     Sat 28 Feb 2026 23:02:35 +0000
Manifest next update:     Sat 07 Mar 2026 23:02:35 +0000
Files and hashes:         1: Pa__vH6RLp_80qLg2SCOvJlwmyI.crl (hash: KPu+50zQYeLT7455VwUZfk9dnj8JtTtgLNTB300obqw=)
                          2: 5D49C24CAF1211EB8138312CC4F9AE02.roa (hash: t0PgB3trny3UGBtbQPXZ2oEACZpm7wPfgQYguo35iOE=)
                          3: 96D7EE96AF0111EB8FE37446C4F9AE02.roa (hash: XobrFToMUwwxQ4hI6JoyUOwAGYgM+9dP9JteDhsTr+c=)
                          4: 5DE13E6AAF1211EB8138312CC4F9AE02.roa (hash: T0wdRehMbf/c1n+Lvi9w5jCq5pwGOxzzrXN8PvqF9IU=)
                          5: 0CDA881EAF0311EB96FC344BC4F9AE02.roa (hash: jjYMFpQBMoseoddvz1xiuozNsn+9+akhZ3LH2vRoBv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl
                          rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1700 (0x6a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179B50, serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
        Validity
            Not Before: Feb 28 23:02:35 2026 GMT
            Not After : Mar  7 23:02:35 2026 GMT
        Subject: CN=69a3740b-a560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:70:1a:a1:83:21:55:e0:0f:d2:06:95:65:
                    b4:a9:07:90:94:d3:d1:43:57:ac:5a:6c:77:94:16:
                    a6:ef:d6:5c:3f:56:54:dc:d1:47:3b:c0:ff:85:7d:
                    a1:1d:91:bb:52:0b:86:4e:84:97:89:5d:26:32:b0:
                    45:5b:af:e3:83:8f:cf:c3:85:88:f6:69:6d:ef:dd:
                    dc:42:ea:84:f5:89:86:2a:59:09:81:b0:53:d1:56:
                    09:55:59:e0:9a:ae:6f:31:72:66:5f:ba:c5:9c:76:
                    d7:da:c8:ad:6d:e7:a0:c5:a1:ce:50:07:d3:25:67:
                    78:43:c4:b0:a1:aa:ee:dc:c5:00:1f:1d:42:76:3e:
                    4d:ac:35:48:3e:26:d0:6a:08:e8:c2:d2:9a:2c:8e:
                    5c:38:05:e1:17:12:4b:7a:e8:4d:10:dd:3c:3c:21:
                    fe:01:54:85:bf:44:69:d5:02:fc:5c:08:d5:e9:45:
                    1f:05:63:07:50:0e:a7:a1:47:1d:1b:67:6b:46:83:
                    0b:f4:b7:26:08:95:8f:fd:95:e6:6b:88:e1:fa:99:
                    af:0d:80:bf:3b:57:2d:0a:2b:8a:4e:c8:17:41:1d:
                    3c:22:c0:c9:90:cd:5d:14:09:51:48:18:37:a8:7a:
                    02:95:a7:2f:b1:35:c3:0d:1b:32:a7:c0:74:9b:28:
                    65:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5C:0D:B4:13:0D:AE:22:E4:07:F6:2B:A6:AF:ED:37:D0:85:0A:06
            X509v3 Authority Key Identifier:
                keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b3:3c:23:1d:78:22:84:39:98:74:1f:23:35:0d:50:39:99:
         df:e4:6a:86:d2:7e:45:c8:75:ff:d0:05:6a:fd:b8:de:14:74:
         25:02:cc:8a:d8:0f:20:b8:c7:ef:e7:80:f0:dc:14:a7:b5:94:
         c0:e6:eb:25:00:a4:da:22:82:e6:23:c2:8a:bb:9c:ee:4e:bb:
         15:5a:d9:bb:5d:f2:3e:50:3a:ab:62:70:56:2d:32:fa:26:c9:
         56:d6:1e:ac:be:33:3f:81:35:4d:b8:0b:21:d8:6c:84:2b:a8:
         24:40:ea:24:b9:18:b5:93:cb:da:d4:1f:9f:2c:78:23:83:6f:
         95:47:17:7b:be:6c:fd:fb:3c:4e:21:6e:93:11:83:6b:f4:7b:
         30:e9:a3:4f:2c:d3:25:90:99:50:4a:92:70:47:32:74:57:9c:
         b5:54:c5:36:b5:25:68:3b:ee:95:ca:af:4e:44:86:b9:5e:17:
         2f:4e:17:2b:09:53:f9:04:ce:32:80:c7:3e:a3:f9:26:cb:cd:
         1b:3b:41:96:68:1a:d4:54:08:26:56:85:95:d7:b5:6c:f5:11:
         40:5b:69:e2:ec:f5:b0:70:12:90:9b:f3:0d:40:15:85:a7:9a:
         b1:a8:ad:a8:29:54:5d:a7:70:9f:9a:99:3c:46:82:06:6c:e7:
         16:14:3d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:30 2026 by rpki-client