Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
File:                     fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft (raw, json)
Hash identifier:          +Zi3DhlqkH8UPHZWcZEvJEW0LQb29Clvt7BYzo3R8fw=
Subject key identifier:   CD:C6:92:BF:86:4B:68:2B:AF:41:F3:CA:43:BC:29:BC:C8:36:A4:57
Authority key identifier: 7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F
Certificate issuer:       /CN=A9170AF9/serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F
Certificate serial:       06A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
Manifest number:          069F
Signing time:             Thu 26 Mar 2026 22:16:18 +0000
Manifest this update:     Thu 26 Mar 2026 22:16:17 +0000
Manifest next update:     Thu 02 Apr 2026 22:16:17 +0000
Files and hashes:         1: fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl (hash: vaZp5vma8AZYugWlFgB1wphsxO8XLMU2m/ctWpD2yuk=)
                          2: 98212A1EA7F011EB816C331FC4F9AE02.roa (hash: lW6QZXgkIKKSa0jLf9ZE4i3WNOuxkEM9pch0Rc7OqqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl
                          rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 22:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1703 (0x6a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170AF9, serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F
        Validity
            Not Before: Mar 26 22:16:17 2026 GMT
            Not After : Apr  2 22:16:17 2026 GMT
        Subject: CN=69c5b032-92db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:23:f4:b4:e2:c2:56:f5:49:57:d1:05:41:c2:
                    15:ce:a2:2f:97:f7:dd:62:3c:ef:c8:69:f1:08:c9:
                    5e:a9:b6:59:8e:6b:a2:88:e9:3b:84:0d:8d:08:00:
                    82:ba:4a:a3:50:9c:89:ad:33:e9:c3:ba:8b:5a:ec:
                    c8:8d:ff:f8:72:7c:76:42:28:04:b8:bd:17:9e:a7:
                    ff:b3:05:db:5c:f6:25:9b:6c:e0:ea:d4:b7:00:cf:
                    72:b7:e2:84:31:3b:0a:a4:e2:96:48:c8:29:b1:c2:
                    32:af:0c:9b:f2:75:32:31:32:22:4d:a5:33:2c:f7:
                    c5:a9:31:41:a7:fd:e2:dc:1a:48:9f:00:a1:73:ae:
                    78:50:1d:96:66:ac:cc:96:0f:43:b7:c4:bf:37:75:
                    82:89:5c:6d:d6:d2:42:d9:11:fb:7f:a7:5a:c4:2d:
                    ba:10:df:39:e5:7c:85:bf:7b:44:6a:0f:6c:cc:1d:
                    d2:45:11:98:8f:92:72:ae:05:8e:7d:f4:9e:a1:39:
                    71:c6:dc:2c:76:4b:98:b5:54:f5:ca:de:52:70:97:
                    79:21:a8:d8:20:b2:c3:70:9c:d2:d7:40:55:cd:a5:
                    e0:a1:71:b8:c0:65:08:4c:9c:21:42:95:86:ff:ae:
                    c2:8f:21:f7:f4:59:10:e6:ec:87:5d:3e:ea:78:15:
                    07:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C6:92:BF:86:4B:68:2B:AF:41:F3:CA:43:BC:29:BC:C8:36:A4:57
            X509v3 Authority Key Identifier:
                keyid:7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3c:da:f6:77:d5:e6:71:d5:bd:2b:cb:db:8f:9b:a1:f4:d5:
         93:41:59:28:c7:d2:a4:ef:5e:fb:69:25:c2:f3:e4:41:9f:62:
         74:4e:fc:e7:bd:14:aa:91:8b:c1:16:93:b8:0d:ab:58:9b:c8:
         27:f0:ff:a6:4d:29:47:9b:80:9d:c5:ef:63:25:46:9e:93:ba:
         fd:d2:36:e5:6a:2b:85:5f:c1:74:88:91:45:89:84:01:02:6c:
         40:1b:42:be:88:af:34:33:04:d9:72:60:47:0c:ae:80:1b:bf:
         24:e2:fd:2e:b5:9f:ae:f1:11:f6:3d:e7:7f:21:9e:fa:21:c1:
         9b:c7:71:60:b9:39:e6:80:7f:63:72:d6:ab:d0:ef:0e:4f:38:
         42:7a:64:ea:35:2b:96:b8:99:f7:e1:3e:f9:06:f7:08:fd:fe:
         35:63:99:57:63:ea:7a:46:ca:c4:24:12:2c:74:c1:3d:ec:86:
         5f:b6:cc:63:7a:fb:04:dd:33:f9:b2:e6:36:57:cb:a4:09:a8:
         39:14:4b:dc:aa:18:b0:24:0a:52:8b:eb:e4:ee:f3:ba:18:ca:
         d2:70:ef:ce:49:26:30:ad:86:85:4c:f1:3f:1b:7e:42:e2:b2:
         ed:d5:e4:59:78:76:3f:76:9f:7c:49:21:66:1f:1b:e3:cd:a8:
         e0:19:59:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:41:00 2026 by rpki-client