Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
File:                     KN1yVzxbraKIuDKzmB_0yYsvjFE.mft (raw, json)
Hash identifier:          1pNajIr9EvaW6DQhynAZv2YZD4bUUsrf7FnYN2C/cFg=
Subject key identifier:   F3:F9:35:E4:F6:8E:DC:01:C6:0F:5D:25:55:15:51:FF:7B:3A:39:04
Authority key identifier: 28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51
Certificate issuer:       /CN=A9180174/serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51
Certificate serial:       0589
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
Manifest number:          0580
Signing time:             Sun 01 Mar 2026 23:27:40 +0000
Manifest this update:     Sun 01 Mar 2026 23:27:39 +0000
Manifest next update:     Sun 08 Mar 2026 23:27:39 +0000
Files and hashes:         1: KN1yVzxbraKIuDKzmB_0yYsvjFE.crl (hash: kk7r+IqK8t94PmAC7DWDTXttWgR6agoAWNIz5Ec1pXA=)
                          2: F6750B60168D11EC89C9CB5DC4F9AE02.roa (hash: a2MlG0wEMN1OaH7j49XfTWV8ol9vPnU4AAth6CS9+gs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl
                          rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1417 (0x589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180174, serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51
        Validity
            Not Before: Mar  1 23:27:39 2026 GMT
            Not After : Mar  8 23:27:39 2026 GMT
        Subject: CN=69a4cb6c-8018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:44:36:5e:e4:6f:de:3a:20:ea:85:8d:d5:6a:
                    86:31:df:45:97:ba:c4:fd:2b:e0:39:4f:f3:50:b1:
                    44:82:a4:88:66:26:5b:2c:00:05:b1:d6:8d:a6:8a:
                    1e:3c:6b:53:a2:e1:bd:14:ed:0f:18:74:d2:e4:d3:
                    ce:3a:b6:31:b2:c5:19:47:b1:33:a1:f3:e9:6f:32:
                    9d:14:8f:22:1c:1c:86:3a:9e:e0:7a:68:86:08:72:
                    71:e4:f5:e1:ed:5c:85:d1:3d:45:ce:3a:e0:9f:64:
                    58:59:8a:69:8f:21:a3:b8:5b:f2:f9:df:7e:ee:77:
                    f6:2d:e2:ed:c7:ef:42:ba:cb:b0:be:fc:71:c3:92:
                    d1:2e:6a:4a:bb:2d:8f:2d:26:96:c1:78:8b:26:89:
                    85:8a:25:2c:b9:09:0d:b9:6d:c9:4c:6d:10:93:aa:
                    5f:e6:12:f9:49:64:76:34:47:f5:1a:dd:0e:a0:ce:
                    71:2c:54:16:7f:30:5d:3b:34:34:80:69:43:8d:a4:
                    a9:c8:45:c8:36:74:79:2d:db:ac:b5:49:ad:38:51:
                    16:75:fd:64:92:7a:0c:28:79:0a:e3:04:38:20:e7:
                    9f:e1:a2:e2:da:29:cb:8a:18:1b:53:23:61:8f:22:
                    1b:95:bd:8d:3b:eb:16:bf:3d:98:0d:ec:9f:3f:3e:
                    eb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F9:35:E4:F6:8E:DC:01:C6:0F:5D:25:55:15:51:FF:7B:3A:39:04
            X509v3 Authority Key Identifier:
                keyid:28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:50:03:c6:1a:39:89:da:12:9d:3b:06:51:c4:9d:80:80:7e:
         5d:45:25:d8:42:fb:3d:73:60:fd:6f:56:e4:85:10:2e:a4:af:
         6a:fc:c3:c1:fc:1b:47:df:88:46:bd:27:dc:31:0e:c8:38:d6:
         09:9b:ba:2e:37:ab:66:de:33:95:3d:f2:dd:4b:6a:b4:eb:58:
         bb:62:f1:bf:ad:9b:38:cc:45:80:d3:f6:a7:40:59:ad:83:04:
         95:41:54:ef:7d:91:26:49:d9:89:e9:91:8a:50:58:cb:13:c5:
         08:ec:00:5a:98:0d:41:25:ec:a7:16:c0:ab:f0:10:73:8e:9b:
         5b:d9:78:51:6f:c9:c1:34:5c:f7:a6:cb:9b:a3:2d:7b:a5:ca:
         78:f0:bd:7f:8f:d4:6a:7d:5b:26:e8:64:b4:0a:67:b2:fe:1f:
         f8:b1:94:43:4c:1d:f2:46:e1:78:39:28:35:7b:fb:fb:ff:f1:
         56:bd:4f:14:f5:62:e5:32:f6:d7:3b:20:6d:a3:a1:50:68:32:
         25:8b:24:f8:4c:d2:22:df:3e:97:38:ef:49:ee:5f:71:95:0b:
         13:2d:5e:76:36:ec:96:1e:d8:6a:fb:a3:c6:b3:a4:df:48:89:
         f9:97:a7:d6:ab:8b:2b:38:04:e5:d4:95:f3:79:ef:21:21:4b:
         aa:a7:18:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:51:21 2026 by rpki-client