Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
File:                     Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json)
Hash identifier:          4FB0UmSz4F9iox0DU4GD6w+8P1KthsCGiWSqD5MzI/U=
Subject key identifier:   D7:AE:AB:41:A1:03:5D:2C:3D:79:04:EC:85:38:C1:E8:AC:D8:37:40
Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C
Certificate issuer:       /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
Manifest number:          EA
Signing time:             Sun 01 Mar 2026 07:31:31 +0000
Manifest this update:     Sun 01 Mar 2026 07:31:31 +0000
Manifest next update:     Sun 08 Mar 2026 07:31:31 +0000
Files and hashes:         1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: dgdwnWoF1zN1XvovZwH1K09p6MhxF731e1cXtcO2kAc=)
                          2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: 3iz7wj1YXwc+8ZUE8ZccL2zY0SUrahR9tPAyGcy55nk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl
                          rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
        Validity
            Not Before: Mar  1 07:31:31 2026 GMT
            Not After : Mar  8 07:31:31 2026 GMT
        Subject: CN=69a3eb53-d665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bd:73:02:c0:1b:93:ea:a4:62:1c:00:79:b2:
                    1e:ab:87:25:1d:e1:90:32:5f:6b:53:c4:5a:f2:04:
                    1e:3e:ad:37:8e:1c:c2:e3:39:13:ac:f9:5d:df:36:
                    ef:57:2f:7b:84:63:af:08:12:b6:3f:a4:72:2e:f6:
                    7c:99:fe:03:49:b3:2c:5a:67:76:c8:8f:35:1a:65:
                    aa:0d:79:38:42:ba:ad:5e:57:7a:32:9c:dd:96:14:
                    ef:69:bb:7f:2f:5b:be:27:11:d5:e4:52:59:3d:b0:
                    d7:51:40:7f:3b:8c:79:af:40:1b:ac:56:cd:a7:d1:
                    93:38:7f:ab:33:c0:cf:e7:56:25:98:cb:ef:89:cc:
                    7c:c6:81:80:0c:04:b6:c3:8f:e3:b8:bc:dd:ea:6a:
                    4b:e9:6c:32:f2:92:d5:e6:87:60:82:0e:87:23:d0:
                    43:ae:0e:e8:fe:0c:29:35:6b:bf:92:42:b5:fe:2f:
                    86:c3:81:04:b4:7b:22:d8:1c:30:3a:3f:82:b2:a9:
                    9c:47:22:a1:20:55:7e:e2:94:b6:4d:9e:17:45:d0:
                    9c:d9:3b:bc:2f:4d:93:ea:f2:c3:07:39:df:0e:fe:
                    04:f5:30:66:ff:db:88:3b:93:3c:95:e9:6b:93:e7:
                    14:dd:0b:dc:08:a0:5b:7f:a6:0e:e3:12:2c:01:32:
                    93:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AE:AB:41:A1:03:5D:2C:3D:79:04:EC:85:38:C1:E8:AC:D8:37:40
            X509v3 Authority Key Identifier:
                keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:5f:25:f8:06:e1:e3:f1:a7:7b:f1:cd:2d:b7:bc:d7:40:72:
         7f:3d:46:a1:3d:7b:b6:58:e1:da:4f:9c:da:70:a9:1b:f0:bd:
         b5:48:11:e1:61:54:97:5c:f7:98:dc:0b:64:70:c8:03:2e:a4:
         c9:cd:6a:90:df:a7:b3:0b:8b:fc:46:91:77:d1:c4:22:12:52:
         cc:7e:a0:db:17:88:82:38:b5:8f:35:29:eb:01:9b:6f:65:3d:
         f2:6e:04:52:3d:90:6b:21:73:66:8e:82:ba:e3:75:cf:f3:16:
         99:b5:d7:6b:f1:08:e0:05:ac:e2:ff:e3:8e:ac:27:ca:d1:14:
         6b:72:d0:b7:9d:c5:01:8b:18:fe:c6:07:2b:e5:04:b1:22:24:
         49:cf:3e:77:cb:81:56:94:c2:3f:35:6c:97:5f:c3:2e:af:cb:
         10:63:56:58:c8:30:99:c2:83:b4:10:3e:89:24:ff:e4:4a:fd:
         cc:cf:ee:60:7c:cd:22:dc:c8:38:81:88:42:26:ef:8c:4c:12:
         4d:f0:e4:ad:03:ff:bb:e6:f0:ad:81:e5:40:7c:2c:5f:cb:3e:
         0d:9f:3e:eb:45:01:89:9e:3c:50:93:b0:fa:32:2e:ee:df:f2:
         35:d1:be:ca:03:4e:4c:41:d7:ab:50:bf:00:a8:af:ba:06:c4:
         3d:3a:44:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:25 2026 by rpki-client