Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
File:                     PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft (raw, json)
Hash identifier:          0zxcDMOmH4wwoU+3K5E5DcbBtdkRAe3zCUpsO/Rf1g0=
Subject key identifier:   74:BD:B2:A6:17:CB:54:13:FC:9D:4E:FF:4A:B6:87:16:2B:8C:D1:6B
Authority key identifier: 3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2
Certificate issuer:       /CN=A9173FAC/serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
Manifest number:          B6
Signing time:             Wed 25 Mar 2026 06:15:28 +0000
Manifest this update:     Wed 25 Mar 2026 06:15:27 +0000
Manifest next update:     Wed 01 Apr 2026 06:15:27 +0000
Files and hashes:         1: PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl (hash: XwfaVuQvXIfUeWCHqltYnl0Xe4PwgarEH6e3uWAXLPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl
                          rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173FAC, serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2
        Validity
            Not Before: Mar 25 06:15:27 2026 GMT
            Not After : Apr  1 06:15:27 2026 GMT
        Subject: CN=69c37d80-5919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:38:b4:61:3f:a5:d0:47:e1:65:74:8a:ae:
                    82:d5:a4:dc:0d:94:61:76:c0:2a:e7:ae:9a:ae:1c:
                    b4:13:76:49:09:1b:23:5d:99:8e:b4:ef:b8:29:dd:
                    b2:19:db:7c:79:e0:b1:3a:67:16:56:b9:d8:41:a5:
                    e3:3d:d2:6e:02:db:58:f9:59:c2:43:73:87:44:08:
                    fb:6d:a6:1d:31:9f:0b:84:a3:8b:03:3c:ee:db:90:
                    78:50:2a:08:f6:f4:d5:7e:15:d4:85:30:10:7f:21:
                    d4:73:3c:49:ca:34:0b:a6:86:32:88:d8:16:cc:54:
                    73:a9:88:d8:97:99:43:6e:dc:a3:31:c6:9d:67:88:
                    09:0d:c7:81:5d:d2:78:39:3c:92:9b:c5:4c:fd:2f:
                    f6:e8:fb:74:42:1c:29:7c:b0:cb:79:3d:4d:a4:fa:
                    60:63:b0:4b:c2:a2:15:16:50:6d:37:cd:9d:db:d9:
                    5a:15:12:83:e2:03:c1:70:56:91:4f:11:5d:39:14:
                    72:68:de:7e:33:49:9d:58:a5:94:73:18:a9:2e:8d:
                    28:1f:92:37:77:89:41:8d:bf:02:ab:db:d2:1b:27:
                    ed:20:22:93:ba:bb:9c:73:a8:33:43:82:61:1f:10:
                    b5:7c:6b:27:87:ae:c5:c4:c4:68:5b:60:8e:b3:46:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BD:B2:A6:17:CB:54:13:FC:9D:4E:FF:4A:B6:87:16:2B:8C:D1:6B
            X509v3 Authority Key Identifier:
                keyid:3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:43:03:32:52:b5:55:05:78:7e:14:09:47:7e:f4:fe:b9:e0:
         23:33:fd:88:98:23:c1:78:6f:85:a2:12:da:02:3e:f7:38:1a:
         5c:10:7c:3c:67:61:94:10:e1:f3:c7:d1:06:5c:55:8b:83:c2:
         5d:8d:d4:53:15:d3:f1:f3:6e:c2:3f:ea:67:e9:cc:1d:2d:ff:
         bd:f1:41:d9:df:1a:96:31:e0:73:7b:f8:c1:eb:1b:c6:3a:c8:
         8e:00:34:66:97:54:3d:87:f2:1f:52:eb:98:df:c0:fb:ae:b3:
         62:9b:c9:92:82:6c:00:ba:d4:66:2b:29:20:3c:06:b6:2d:49:
         9a:00:12:ce:2b:99:e8:fe:65:8b:18:cd:f4:7f:70:f5:86:e7:
         ad:9d:70:83:ab:a0:34:8c:40:86:98:08:bd:8e:1f:c8:96:63:
         bb:12:2d:1b:ba:91:0b:f9:48:33:e5:44:72:05:00:ff:a3:fa:
         e8:30:aa:a4:91:b7:6f:7c:ba:44:b5:c0:6e:e8:1a:b3:05:1d:
         70:d2:5a:b7:16:6f:47:0c:8e:65:37:14:53:79:72:b1:46:64:
         cf:9e:f1:f1:aa:a8:1c:78:cc:4b:f4:ec:42:4e:9a:16:e1:59:
         b3:65:6b:f3:b1:12:29:6c:f5:f7:ff:76:11:b6:d1:09:5e:10:
         e1:05:37:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:35 2026 by rpki-client