Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
File:                     CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json)
Hash identifier:          JpaY1MZSyRII/ZkgSrnAEdKnno7bpVJwbOttYJ4337M=
Subject key identifier:   74:E1:03:6D:3F:32:40:5D:D9:8D:40:F0:7F:F2:95:60:7E:A1:97:6B
Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA
Certificate issuer:       /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
Manifest number:          99
Signing time:             Fri 27 Mar 2026 06:56:04 +0000
Manifest this update:     Fri 27 Mar 2026 06:56:03 +0000
Manifest next update:     Fri 03 Apr 2026 06:56:03 +0000
Files and hashes:         1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: 10p/FubzxkVIlR6z9TvzP3mp41+ZJxedSU54ctZFjnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl
                          rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 06:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA
        Validity
            Not Before: Mar 27 06:56:03 2026 GMT
            Not After : Apr  3 06:56:03 2026 GMT
        Subject: CN=69c62a04-6b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:81:39:5f:67:fb:57:28:09:3b:ea:ca:a7:20:
                    2d:41:13:77:fa:14:32:9e:71:b0:40:95:91:46:59:
                    67:86:d6:2c:85:b2:31:52:18:30:db:d7:cb:58:bc:
                    8e:b0:78:16:0e:93:f4:f0:bf:ac:57:fd:ab:c3:d7:
                    38:b6:03:ad:7e:cc:38:49:52:66:4f:6c:75:b4:90:
                    a6:44:7f:54:fa:35:77:ac:b2:52:7f:55:f5:d3:9c:
                    e3:2c:06:79:96:35:2a:52:24:29:af:ce:a7:21:45:
                    3f:88:5f:cd:8c:dc:4d:36:47:2b:7f:d0:d5:b8:31:
                    fd:dc:75:c6:60:67:68:91:fa:a2:49:87:87:62:cb:
                    0e:01:c1:7d:1c:1f:15:66:f0:75:38:36:f7:35:be:
                    2d:e2:f8:30:b7:8f:c3:f8:11:9f:60:66:2d:73:a1:
                    5a:1c:c7:23:99:20:82:1e:02:c1:cd:71:a1:a8:ce:
                    86:48:f4:3d:32:d5:bf:2a:3c:da:c7:f4:0d:02:d5:
                    b1:99:5e:cb:15:1b:50:a0:d1:89:ac:b4:73:4b:c1:
                    f1:1c:f3:f7:9c:9a:5a:23:41:ae:e4:22:04:5c:4f:
                    74:5d:97:15:c6:dd:5c:90:bd:50:49:35:e8:f3:4b:
                    1d:b9:ad:bc:ae:60:ff:c7:33:94:5e:b3:1d:ce:b1:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E1:03:6D:3F:32:40:5D:D9:8D:40:F0:7F:F2:95:60:7E:A1:97:6B
            X509v3 Authority Key Identifier:
                keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:26:14:60:27:e3:fd:07:fc:9a:51:f5:a0:a1:fc:b6:78:3c:
         38:e0:61:4f:42:7a:46:1e:4e:66:36:73:16:93:83:ca:2f:1c:
         7e:7f:e0:f5:90:99:5c:0b:2c:3b:8d:8d:26:cc:ea:54:73:5e:
         6e:d7:7e:f9:eb:b0:42:09:9c:38:9b:91:5d:a7:79:a7:51:56:
         d5:07:3c:63:8c:e1:9c:f5:76:44:04:8b:95:83:35:d8:e0:e6:
         e6:3c:6e:c2:d4:45:d5:07:45:34:7b:a7:32:f5:00:12:63:7c:
         cd:c0:f3:50:47:f4:f0:aa:0e:d7:f5:c7:b2:f8:f6:b5:13:ad:
         16:f2:14:23:0d:69:49:f4:8b:e1:f9:4b:d2:34:03:59:89:48:
         c6:d4:5b:dc:af:56:e3:a0:c7:88:5a:ac:c1:84:f4:d3:37:ba:
         8a:21:e5:77:8c:7b:45:84:b9:7b:1b:78:a2:26:9e:54:5d:c7:
         95:18:b3:b8:4b:d7:95:f5:0d:7b:53:a3:e1:89:65:d1:3b:b2:
         d9:22:36:fb:ac:c9:40:2f:b6:3f:4f:0a:e2:0e:5d:62:6f:75:
         1f:76:ea:f2:47:81:51:db:b0:b1:1b:dd:18:2c:05:81:2f:b8:
         7b:a0:a2:81:b3:57:5e:45:98:6d:1d:b9:ad:64:b2:3b:00:95:
         ce:1a:92:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:48 2026 by rpki-client