Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
File:                     33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json)
Hash identifier:          C/0XW50p886mAg+wTfXJYc55jdfuXVnZKp11/FpUBPw=
Subject key identifier:   BC:84:B7:21:D2:2B:05:D2:F8:C3:B1:80:48:1A:3C:7A:A3:A9:B5:49
Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Certificate issuer:       /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Certificate serial:       04DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
Manifest number:          04D5
Signing time:             Mon 02 Mar 2026 00:15:15 +0000
Manifest this update:     Mon 02 Mar 2026 00:15:13 +0000
Manifest next update:     Mon 09 Mar 2026 00:15:13 +0000
Files and hashes:         1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: bDXzMCbMEmofva2W4pp86CRm+RpAFvekOb1ff/G+rnQ=)
                          2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: zbXMrXwx1yzaHmM3iEw5RvlADnQZubhK6bBZesY2itA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
                          rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244 (0x4dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
        Validity
            Not Before: Mar  2 00:15:13 2026 GMT
            Not After : Mar  9 00:15:13 2026 GMT
        Subject: CN=69a4d692-2b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:6b:40:32:5c:66:6b:e9:1b:7a:92:d7:c1:
                    e8:9c:74:7e:30:db:22:f8:c6:37:7e:24:ae:21:26:
                    47:e4:5a:0b:18:60:8f:6f:94:e2:7d:e9:0a:5d:7d:
                    2f:95:3b:ef:c7:f7:e9:aa:4b:be:42:65:ef:88:be:
                    11:7e:0c:26:e8:a2:72:f9:4f:b7:e0:08:37:7d:32:
                    9d:72:6a:ed:c0:d2:ce:0b:ef:a1:9e:f4:6c:31:82:
                    a5:41:8d:ff:6b:47:67:55:83:a9:27:fd:c9:31:8a:
                    c1:d5:19:e5:9a:77:1a:23:95:ac:3b:bb:34:93:03:
                    96:49:93:c7:b0:6d:f9:ea:12:4f:25:1e:29:e5:ba:
                    57:66:a5:12:30:fb:3c:86:13:8e:39:16:a0:b6:18:
                    30:a5:9f:c3:81:8f:1d:9c:6b:c2:b4:f4:06:5d:6e:
                    33:03:5d:38:15:2b:21:1e:f8:60:34:7d:fd:31:b6:
                    3e:ba:c0:54:d1:f9:25:0f:c4:70:39:4e:b6:0d:ab:
                    4f:34:5d:fb:11:0f:54:7a:5d:47:c0:95:95:25:ce:
                    99:31:33:bc:06:e4:f9:95:17:c5:14:c2:2a:a5:6d:
                    5a:03:04:37:85:46:90:6e:7a:ba:44:b4:a7:c4:17:
                    8f:bd:cf:d1:44:ab:13:40:4f:88:45:04:62:6f:8c:
                    c1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:84:B7:21:D2:2B:05:D2:F8:C3:B1:80:48:1A:3C:7A:A3:A9:B5:49
            X509v3 Authority Key Identifier:
                keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8e:76:25:5e:bd:6c:d6:9a:53:11:4a:6b:57:b0:e6:ac:3e:
         95:e7:ac:b7:57:5b:bd:98:25:94:41:78:2f:22:f7:d3:6f:72:
         23:c8:6c:09:5d:cc:29:21:9b:d6:25:7b:a6:68:1a:a2:a2:a4:
         6c:eb:93:8b:9f:74:ed:63:06:5d:82:b2:cc:a2:fd:e1:27:4d:
         9b:3f:8d:45:c2:da:33:aa:f7:4e:a2:92:0c:b0:8c:5a:5e:68:
         eb:84:49:f7:7e:59:e4:58:51:99:4c:db:48:c2:b6:7a:2a:cc:
         08:17:93:10:11:0c:96:c9:61:1d:d2:5e:4a:ea:52:a7:16:63:
         98:ee:c2:25:55:24:e8:4d:16:c5:2b:31:e2:2b:c5:05:b0:d0:
         b2:92:95:30:9e:59:fb:65:90:36:44:47:73:c2:07:c2:a3:29:
         11:4a:c1:3b:5c:57:dd:3a:1e:af:4c:00:f6:58:1f:29:b8:6d:
         60:98:65:eb:e4:6e:0d:40:3c:3e:c4:70:f4:3c:9c:a6:90:07:
         d0:4f:cd:78:50:ca:01:99:2a:cd:e1:37:1c:6b:0e:d0:4b:6d:
         47:5b:8a:86:94:7a:90:d8:35:38:9d:a2:aa:6f:14:d5:90:49:
         06:be:86:a3:f9:95:6a:7b:e7:52:2f:95:67:46:47:97:e8:ab:
         ea:bb:4d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:12 2026 by rpki-client