Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
File:                     f99iGPoBXQoAdKhEJFGAaij53fU.mft (raw, json)
Hash identifier:          P9OFbRsEvmdZuHQcc5FRcJJLYBsmn6SOE+Lue3duowk=
Subject key identifier:   B1:37:63:8F:34:C0:E8:CB:BB:88:F1:E5:0F:6C:BF:20:CC:5C:00:78
Authority key identifier: 7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5
Certificate issuer:       /CN=A9173060/serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5
Certificate serial:       0847
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
Manifest number:          083F
Signing time:             Tue 24 Mar 2026 20:36:56 +0000
Manifest this update:     Tue 24 Mar 2026 20:36:56 +0000
Manifest next update:     Tue 31 Mar 2026 20:36:56 +0000
Files and hashes:         1: f99iGPoBXQoAdKhEJFGAaij53fU.crl (hash: 0kv3iaM2dtHjOzgGHmJ2ok1/j5KF8wIXA+7CqRpzobE=)
                          2: 7FAEDE3A03B411EBBB548A5EC4F9AE02.roa (hash: IukELGpabDdGm9dh0mRYoQIuev5GllWS4FmX9CKUBYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl
                          rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2119 (0x847)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173060, serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5
        Validity
            Not Before: Mar 24 20:36:56 2026 GMT
            Not After : Mar 31 20:36:56 2026 GMT
        Subject: CN=69c2f5e8-79a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:65:4a:47:0a:fe:4b:e1:13:a4:8c:15:84:
                    54:b1:82:79:50:19:20:f9:9e:9c:c5:68:ee:5b:b9:
                    8d:91:6a:ed:0f:8b:e7:25:8d:58:00:fc:36:d0:ae:
                    d4:01:dd:c3:04:2b:6d:b5:2b:2c:0a:79:9b:5e:62:
                    e1:dc:39:77:05:d4:76:61:d6:36:4d:31:7a:df:b9:
                    76:7e:b9:b2:85:1a:03:29:d1:d3:cb:65:a5:42:f6:
                    91:e5:53:6a:86:fd:3f:ba:d9:e0:94:fb:67:09:c5:
                    1a:2a:79:f2:a2:fd:67:fb:bd:cf:74:be:0e:21:8c:
                    17:45:74:0d:20:7a:5c:84:af:7e:bc:c7:33:de:da:
                    2d:fc:22:3b:40:a7:a3:8e:5b:2f:f3:24:d9:85:31:
                    91:d8:4b:80:9b:01:c9:09:e4:6a:50:90:06:47:51:
                    20:69:d4:a2:67:61:22:24:9f:d8:3c:4d:bc:19:91:
                    cf:f6:b3:1f:5a:bd:09:b2:00:2c:a7:e7:a0:79:96:
                    82:56:17:40:ab:d3:1d:5a:7d:95:bc:39:da:17:f2:
                    56:2f:05:3b:ab:8d:a7:46:52:83:58:72:d9:27:31:
                    1d:0b:df:82:0c:27:f4:1c:a5:50:ff:41:3e:f3:fa:
                    3b:72:a5:30:70:6d:5b:b5:19:59:ac:39:b5:c4:92:
                    3e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:37:63:8F:34:C0:E8:CB:BB:88:F1:E5:0F:6C:BF:20:CC:5C:00:78
            X509v3 Authority Key Identifier:
                keyid:7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:8a:99:8c:ea:d8:f0:5c:21:94:ce:89:64:38:70:dd:9d:79:
         bd:c6:f6:cf:0e:72:76:3e:af:3a:e4:e6:22:59:49:54:6a:20:
         4f:96:d5:0b:85:82:a2:30:f6:e8:39:e8:7b:b5:35:7c:1d:76:
         44:cc:9a:a4:37:d6:34:cf:ea:46:1e:a5:a0:5a:fd:ec:fb:40:
         99:a2:c8:f1:76:72:29:16:3a:f8:82:03:9d:a5:4b:83:8e:7a:
         7c:38:5a:b2:f0:a6:d8:01:69:45:e3:70:38:1a:a6:92:67:8e:
         b7:f8:e3:ac:26:66:00:e1:45:d7:30:0e:ec:ed:c6:83:a4:ff:
         bf:37:c2:2e:00:08:62:d8:bd:44:28:1b:53:01:9b:b8:dc:da:
         c5:cf:6b:a1:ca:26:62:c4:a4:ed:8e:4d:df:3f:e6:1e:28:5a:
         35:7b:bc:98:16:b1:08:f1:26:90:93:04:bb:65:98:04:97:41:
         56:6d:b2:4a:62:52:ca:a5:6f:c7:25:04:bf:2b:dd:bf:5f:e9:
         e8:6c:96:89:3c:49:0a:26:b1:1d:59:5f:cd:27:af:a1:5a:a7:
         bf:20:75:87:69:e6:b3:c3:1b:c5:16:0b:12:0c:d4:a7:5f:8e:
         7b:ab:e2:89:5b:65:09:ef:16:79:a0:15:fe:03:fc:0f:24:3e:
         74:96:6c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:13 2026 by rpki-client