Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
File:                     G395gdniwsMPbyw0hxophthfiQ4.mft (raw, json)
Hash identifier:          UFouYFvrP0ygCHgqdcnwuWVpgtt8U0XDccsfXoNtkLs=
Subject key identifier:   58:F5:4A:87:73:39:EA:04:0E:12:F7:F1:DC:7E:C0:0D:28:FB:8B:39
Authority key identifier: 1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
Certificate issuer:       /CN=A9170AE9/serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
Certificate serial:       059B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
Manifest number:          0594
Signing time:             Tue 24 Mar 2026 22:54:30 +0000
Manifest this update:     Tue 24 Mar 2026 22:54:29 +0000
Manifest next update:     Tue 31 Mar 2026 22:54:29 +0000
Files and hashes:         1: G395gdniwsMPbyw0hxophthfiQ4.crl (hash: m5qvnV6B7/OTTn0bWR6zjjwm5jM0puQklObJzL77+sg=)
                          2: 5D7779A6108A11EC9E1F3D49C4F9AE02.roa (hash: MARAw22DhIJFp/wfG19G5Gz01JcFPueQuJN4T376eTY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:54:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1435 (0x59b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170AE9, serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
        Validity
            Not Before: Mar 24 22:54:29 2026 GMT
            Not After : Mar 31 22:54:29 2026 GMT
        Subject: CN=69c31625-633f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:d8:ff:26:7d:0f:de:90:79:a1:7e:ce:d9:
                    33:06:79:c0:6f:04:66:20:d0:bc:ff:26:29:bd:f0:
                    9a:06:52:8d:7f:49:03:b7:01:d0:33:51:b1:cb:5c:
                    74:49:38:e5:82:c2:47:57:d8:d3:e0:03:c1:7a:95:
                    4b:88:23:2d:d1:38:6f:fb:1c:ad:66:07:bb:1a:00:
                    8c:47:78:d1:2b:9c:ad:cb:e2:28:ec:bb:c4:96:93:
                    78:9d:ed:4b:d0:bd:af:71:6a:84:78:f6:74:b5:50:
                    86:6e:20:fb:a6:bc:4f:d9:c2:8b:b3:04:50:9a:79:
                    05:69:61:cb:3c:5f:b3:e9:77:f5:72:91:53:40:28:
                    eb:91:c0:02:d4:bf:60:54:0d:f9:38:e2:c6:43:12:
                    6d:bd:62:bc:a4:48:37:d5:25:18:74:1b:b4:e6:8a:
                    0e:cf:80:97:eb:91:a2:b3:63:b3:39:05:9a:8b:48:
                    a9:35:bf:06:d1:2f:0b:43:86:c1:27:dd:b3:e6:7d:
                    21:53:da:d9:ca:48:14:33:84:3c:d1:53:d4:2c:ca:
                    da:46:9c:1e:53:00:fc:72:db:32:6a:77:b5:1f:05:
                    21:ab:f6:a8:f2:47:94:2a:c1:96:91:31:07:91:5d:
                    7a:e3:51:14:0d:eb:98:cb:19:12:23:bc:45:0b:a7:
                    12:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F5:4A:87:73:39:EA:04:0E:12:F7:F1:DC:7E:C0:0D:28:FB:8B:39
            X509v3 Authority Key Identifier:
                keyid:1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a7:32:70:bc:3c:23:90:33:32:34:cc:1c:2f:a2:7a:f8:06:
         5a:d4:e6:b8:15:63:00:fc:fc:8f:a3:d9:ba:3c:ea:62:eb:99:
         fe:f2:b6:38:93:60:c1:f1:fa:4c:ae:d3:e6:5a:7d:93:d6:9a:
         40:92:fd:b5:45:8c:56:1b:67:b0:21:af:07:ef:c4:4e:70:45:
         24:f7:45:f4:02:c2:21:04:e2:3b:0e:d6:56:38:11:ab:fb:55:
         d3:95:3b:60:e8:a5:d7:f0:a6:35:cd:8d:04:e6:52:cd:14:5f:
         a1:df:23:e7:de:21:b1:58:d2:3b:a6:4a:a1:7d:2b:de:4b:1d:
         dc:94:e8:31:2d:ce:f6:9e:3d:7f:d7:5d:b5:b4:a0:a4:e3:cb:
         5e:4d:08:f1:a9:af:d9:e0:33:ec:5f:b7:a7:83:61:9f:a7:27:
         7b:dd:c6:4c:a9:6b:15:9e:39:90:9b:a9:8a:56:4d:61:a1:fb:
         34:91:8b:68:bc:ed:13:b3:4c:e9:b3:67:be:95:c7:c8:50:cf:
         38:62:61:cf:0c:db:1b:34:10:f0:c9:4a:8f:89:e3:c7:88:10:
         24:c1:2c:5b:49:56:ac:fc:d6:75:17:91:0c:0d:80:52:a3:67:
         23:2d:47:fc:cb:81:63:19:a5:b6:45:77:7c:98:79:50:53:83:
         3f:da:4a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:28 2026 by rpki-client