Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
File:                     nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft (raw, json)
Hash identifier:          9A9lKiSYf7bX+q4XMs9rx9kjUFrykJ/97fGKnZ59iiA=
Subject key identifier:   92:82:A6:45:D1:FC:E2:F7:5C:F1:6D:54:11:D1:3A:55:21:7E:9E:A5
Authority key identifier: 9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41
Certificate issuer:       /CN=A9172CE3/serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841
Certificate serial:       051B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
Manifest number:          051B
Signing time:             Tue 24 Mar 2026 23:15:11 +0000
Manifest this update:     Tue 24 Mar 2026 23:15:11 +0000
Manifest next update:     Tue 31 Mar 2026 23:15:11 +0000
Files and hashes:         1: nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl (hash: H68AvuT1B020EcPPFp0DHnz8F30dTX+82sp1eHELoSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl
                          rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1307 (0x51b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172CE3, serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841
        Validity
            Not Before: Mar 24 23:15:11 2026 GMT
            Not After : Mar 31 23:15:11 2026 GMT
        Subject: CN=69c31aff-c205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:34:99:bc:f8:03:27:74:3c:28:a6:9b:98:
                    3b:91:13:e1:d0:32:50:9a:88:56:7f:0a:76:c1:85:
                    fe:b8:34:8c:0b:7c:b2:0f:d7:a5:e2:27:c6:5e:ad:
                    f0:ec:54:e1:e7:00:3d:2f:79:2b:b5:53:dc:8a:fd:
                    7e:af:11:ec:2c:5a:0b:07:4e:91:9c:7c:77:71:9a:
                    e0:6a:28:f6:5d:a9:cf:f0:4b:47:e8:fc:5e:a6:1a:
                    b4:36:d2:e0:90:e7:47:da:ee:34:6f:41:41:b9:b8:
                    a4:11:24:75:b2:24:01:42:c6:00:8b:a7:55:a1:38:
                    13:ba:28:1e:15:1f:30:02:e1:60:6f:38:53:13:9a:
                    d4:4f:d2:97:a3:ff:42:73:52:27:1d:a8:fa:bb:9a:
                    58:f6:98:c9:bb:a5:90:fb:fd:50:60:7b:8a:e2:aa:
                    56:07:d9:89:d1:f3:6e:17:31:c7:76:56:11:48:a7:
                    20:47:db:92:48:bd:19:12:43:5c:02:80:ee:99:7c:
                    04:fd:9f:31:15:86:91:17:c1:3a:6f:86:e1:7d:36:
                    d0:d7:9a:90:65:5b:27:75:c6:ba:14:24:ae:e0:aa:
                    7c:37:27:f2:b4:c1:82:2b:59:fb:af:65:02:be:99:
                    df:4a:c0:a9:b9:77:57:c5:e3:0d:7f:4e:1c:66:bd:
                    5f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:82:A6:45:D1:FC:E2:F7:5C:F1:6D:54:11:D1:3A:55:21:7E:9E:A5
            X509v3 Authority Key Identifier:
                keyid:9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:81:dd:51:a6:d9:e8:01:e9:26:5d:6d:9c:2d:49:0b:53:3c:
         71:2b:24:6f:58:07:c2:81:45:cc:b5:3f:23:0f:4d:c3:4d:a4:
         b7:e5:de:2d:d4:36:d7:74:2f:79:f6:48:15:9d:30:1e:38:a2:
         e3:bf:d0:58:d5:50:92:da:25:0c:76:8e:00:04:26:cb:5e:21:
         6d:69:67:25:3e:03:01:96:ec:03:c8:6c:21:ef:1b:38:e1:b8:
         56:7b:04:03:7b:08:4a:7b:14:e5:5a:6e:d5:9f:de:18:6a:26:
         1a:47:f7:34:46:6d:1d:30:a1:cd:a4:ca:d4:44:95:fd:89:da:
         9f:3c:a9:11:05:06:fd:22:f9:52:a4:a0:fa:26:cc:07:56:f8:
         e7:4c:79:33:f1:68:07:8a:23:9a:6a:62:08:06:d2:b7:78:d9:
         2d:a0:fb:d1:cb:08:37:a6:73:e0:ce:26:84:3b:cd:ba:ce:0a:
         a5:9e:88:84:68:1b:b3:74:cd:f8:88:01:c6:f8:4d:53:d4:8e:
         59:d3:54:63:95:44:7b:50:73:e8:48:a6:c5:8e:47:b1:a0:21:
         22:a0:cc:3d:b5:0f:5a:c4:db:64:de:b2:38:9e:41:5e:48:b5:
         e6:72:d5:e1:35:ef:8a:3a:74:72:1c:56:67:b6:2e:06:5d:2d:
         82:4d:ef:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:51 2026 by rpki-client