Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft
File:                     rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json)
Hash identifier:          XD8dWR1SZUikNm+5a8CP1PJx3i+Plcv9lCjAZeUS7ew=
Subject key identifier:   1D:74:F7:4B:78:97:A9:B7:1D:B4:FA:69:EB:DF:F0:1D:50:03:42:6E
Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93
Certificate issuer:       /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft
Manifest number:          0184
Signing time:             Wed 25 Mar 2026 03:47:13 +0000
Manifest this update:     Wed 25 Mar 2026 03:47:13 +0000
Manifest next update:     Wed 01 Apr 2026 03:47:13 +0000
Files and hashes:         1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: 3mrs8upytGhYgltYS751HVyazYI4n/oVtN6R11mdhws=)
                          2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: KwPytA+KujGmJ38zMwLjvUJdfvsWlYXoPJvKji6j9iM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl
                          rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169BAF, serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93
        Validity
            Not Before: Mar 25 03:47:13 2026 GMT
            Not After : Apr  1 03:47:13 2026 GMT
        Subject: CN=69c35ac1-48ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:55:76:37:38:e7:7b:5a:d6:f6:46:d5:8d:77:
                    39:99:38:99:3f:17:bf:12:11:31:6c:cd:ed:e7:0d:
                    65:ae:b5:0d:32:09:9a:8a:3e:d0:90:54:05:90:05:
                    d8:36:3d:93:b5:b4:0f:b0:a8:fd:91:66:f6:7f:9f:
                    14:3b:38:b4:4c:2f:6f:55:e8:10:27:72:48:ee:b4:
                    fe:81:3a:95:10:c9:8b:a8:89:3b:f5:8d:dc:6e:ca:
                    2f:83:07:96:8e:64:9f:0e:d9:d4:cc:9a:1e:af:d1:
                    06:f2:cc:8d:0b:b9:e7:c5:cc:24:9c:b4:69:cd:90:
                    94:ba:5b:32:7b:6b:6a:2b:b7:b7:05:7d:74:95:bf:
                    69:d8:a2:1d:07:e3:d5:ed:d2:ab:a2:af:c3:eb:2a:
                    05:2b:cf:67:e0:17:1a:3d:d3:84:18:2b:b1:0d:72:
                    0c:cc:8b:8a:3b:fb:e5:1c:43:d7:3d:38:19:cc:37:
                    6e:c7:80:17:45:d6:3b:78:f8:49:a2:f8:90:12:a0:
                    ce:f8:c3:ec:3b:b1:2b:74:bb:59:57:c6:47:16:6c:
                    41:a2:6a:de:51:98:8b:eb:06:58:f0:1c:e1:fc:fc:
                    41:d9:56:be:8e:c4:06:53:43:be:8b:96:64:9e:37:
                    64:f3:d2:15:21:b3:ce:f9:74:16:90:18:9b:03:d9:
                    6f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:74:F7:4B:78:97:A9:B7:1D:B4:FA:69:EB:DF:F0:1D:50:03:42:6E
            X509v3 Authority Key Identifier:
                keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e0:ef:b3:23:eb:13:fe:4d:c8:7c:ca:33:1a:5c:3a:24:c8:
         65:92:f3:ca:e7:d4:a6:28:73:1c:3a:59:fc:0f:58:56:f6:44:
         1e:b9:2e:1f:04:89:a0:b6:a0:a6:d0:92:87:39:cb:a1:8e:ee:
         c1:12:c7:2f:b0:a7:69:54:b0:32:9a:7d:fa:a7:0f:09:5f:d7:
         09:aa:8b:92:c5:d9:ac:bd:4b:96:20:59:d2:0a:64:de:f8:67:
         f2:b7:83:5c:39:3f:eb:fc:09:6d:3c:73:99:1b:e9:16:9d:d2:
         78:1e:a6:88:ef:9f:60:2c:7a:43:00:ec:0b:48:c8:0c:09:e5:
         a7:82:6c:d0:06:24:4a:97:d3:0c:ae:ea:e7:ed:a5:60:f8:bf:
         00:64:b1:b3:fc:d8:d0:8e:ac:79:98:d9:ac:a1:0e:db:4e:4d:
         62:e6:d5:36:04:04:3d:cc:77:05:fe:3a:4c:57:1f:13:03:a2:
         3d:1d:fd:19:5b:0e:b1:c1:f4:b4:0f:0b:04:81:fc:cd:0e:d1:
         3e:ba:08:9b:2a:63:ed:1c:11:a3:9a:e9:7c:1e:6e:02:81:54:
         9f:d0:ae:50:f6:cc:e9:d4:a9:3a:d3:6c:ed:c7:d1:f3:e6:b9:
         ef:6b:76:7a:ad:be:44:60:47:4e:82:73:6a:09:58:14:10:37:
         02:4a:4b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:32 2026 by rpki-client