Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
File:                     RByw2GqSzt--gIPe1peibWI-5lU.mft (raw, json)
Hash identifier:          SlJP9DMBSspQ0MlWcbXVXhjo3FTzgdlaZPUuEf8aoqk=
Subject key identifier:   79:90:13:7F:39:A3:C4:3E:16:CF:83:AB:87:9A:0B:4E:F2:7F:66:FF
Authority key identifier: 44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55
Certificate issuer:       /CN=A9171235/serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655
Certificate serial:       03D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
Manifest number:          03C9
Signing time:             Fri 27 Mar 2026 00:21:43 +0000
Manifest this update:     Fri 27 Mar 2026 00:21:43 +0000
Manifest next update:     Fri 03 Apr 2026 00:21:43 +0000
Files and hashes:         1: RByw2GqSzt--gIPe1peibWI-5lU.crl (hash: BqWPcVG9Xr3e4VeIep2bwYNzha5750bjRYFYzeyw1HY=)
                          2: 9CD74392C9E411EC956B0A3CC4F9AE02.roa (hash: vd7/c73lLNTzKiOupkJvInFXPhKY9E+Gw/hTf0zKkVY=)
                          3: 9C072F22C9E411EC956B0A3CC4F9AE02.roa (hash: HbxNhJfwCG1ujU694+Ro5Mhy7fzReoL73klO5RKGIM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl
                          rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 983 (0x3d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171235, serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655
        Validity
            Not Before: Mar 27 00:21:43 2026 GMT
            Not After : Apr  3 00:21:43 2026 GMT
        Subject: CN=69c5cd97-a547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:ac:87:4e:de:ae:bf:57:f6:ab:bc:79:a6:
                    3e:dc:6c:04:a3:93:d5:68:b8:d6:9a:48:3f:e1:16:
                    fa:43:04:08:1b:70:d3:d1:cf:4e:b8:ca:66:d0:97:
                    5e:3b:fc:e8:0d:46:23:99:f1:2c:36:19:0e:d0:83:
                    d5:2e:a4:46:4e:c9:05:95:5e:7b:b2:bd:4e:9f:66:
                    c8:74:4c:36:75:05:66:74:58:0e:af:d3:c0:83:1a:
                    db:af:ff:51:c3:8f:88:32:02:a1:63:50:1c:7e:ad:
                    d7:f9:3f:3b:22:90:1a:f5:1b:91:c1:e0:36:62:56:
                    91:c5:b1:c0:eb:79:cf:7e:f8:ba:d0:7f:2c:22:72:
                    0f:5d:c6:8d:8c:a4:76:de:d0:e3:18:82:97:26:34:
                    c5:d0:06:bf:7a:42:3e:c6:98:4b:ab:7f:43:d6:f3:
                    67:6e:f3:b6:e1:5b:24:93:07:5d:38:b4:db:f3:74:
                    bd:81:a8:e3:66:eb:2b:79:06:80:7a:d0:d0:7f:7a:
                    4d:4d:96:2f:27:81:fd:6f:6c:61:96:9a:8e:6d:c6:
                    82:61:7e:7d:75:87:c5:ca:2a:44:7b:78:55:87:17:
                    d7:8a:50:b9:f0:37:8f:ce:75:66:89:4d:8b:48:6c:
                    45:2f:0e:60:08:e1:87:e6:f4:1f:55:b8:55:1a:44:
                    33:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:90:13:7F:39:A3:C4:3E:16:CF:83:AB:87:9A:0B:4E:F2:7F:66:FF
            X509v3 Authority Key Identifier:
                keyid:44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:38:1b:92:7a:e2:c9:46:4a:25:bb:56:39:d6:13:6f:2f:54:
         06:56:4d:a5:b1:88:38:e9:b5:1d:17:66:e6:b8:d4:f7:b5:de:
         d3:67:30:bd:1e:f9:ed:53:a2:3f:ae:ec:07:71:d7:68:cc:8e:
         f9:93:3d:5e:70:3e:47:cf:b6:cb:d5:b5:af:c4:fe:ea:9d:63:
         bc:ca:6c:99:23:ce:3c:d0:8e:2b:aa:ca:52:61:0c:9a:ae:df:
         57:f2:a8:26:5c:72:c8:43:f0:64:05:47:7f:57:98:bc:d3:42:
         78:10:00:5a:2f:13:8b:4a:36:d0:a9:c4:c1:a0:a4:40:d0:3b:
         6e:70:eb:7c:6b:0f:53:53:20:c4:3c:df:2c:7e:10:60:48:1a:
         87:b0:0e:84:db:4b:cc:c8:25:72:7c:cb:fe:ea:f4:3a:c9:c5:
         8e:81:54:97:14:17:70:cf:99:78:20:db:39:ad:12:52:2e:c2:
         94:1b:65:59:8a:62:e5:24:a2:e4:3c:f9:63:a8:43:1e:6e:3f:
         cd:f7:a0:7d:08:a8:c7:c7:60:37:40:71:c4:1e:b9:63:3c:f3:
         5f:39:b1:15:2b:9c:54:56:4e:47:01:6b:56:5e:c5:3d:3b:c0:
         db:3a:eb:0c:91:2b:ca:ed:e0:03:83:13:90:6d:d2:a7:15:3d:
         8d:53:c0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:49:23 2026 by rpki-client