Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
File:                     Du4Pv3hqd39MJ0FT91NvPfiflJI.mft (raw, json)
Hash identifier:          O3g3wElELup28rN2cMfWtY1sJMu2D0TPfcs1mwoWjvo=
Subject key identifier:   E2:3C:91:8A:D1:F8:D9:EC:3F:D0:28:CC:51:67:24:56:28:DF:3E:5E
Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92
Certificate issuer:       /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492
Certificate serial:       0CA0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
Manifest number:          0C95
Signing time:             Tue 24 Mar 2026 18:22:43 +0000
Manifest this update:     Tue 24 Mar 2026 18:22:43 +0000
Manifest next update:     Tue 31 Mar 2026 18:22:43 +0000
Files and hashes:         1: Du4Pv3hqd39MJ0FT91NvPfiflJI.crl (hash: l2VbyRo7/qAqskuJo9x8807gAf0Q4rwO4KVymENXOGw=)
                          2: 9C749C7C140811EABB746522C4F9AE02.roa (hash: 3KMGe5qUUyYX05XayDx8IgLDNPx7Xx1E+icm0sK1QNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl
                          rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3232 (0xca0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177285, serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492
        Validity
            Not Before: Mar 24 18:22:43 2026 GMT
            Not After : Mar 31 18:22:43 2026 GMT
        Subject: CN=69c2d673-e185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:8c:0f:38:92:a8:6c:c7:41:b1:72:8e:12:
                    9f:ae:09:1f:03:ab:ea:ae:aa:89:fb:3a:8b:b9:86:
                    67:c5:3e:c7:51:77:95:9b:1a:c9:9b:a3:55:ca:93:
                    c6:4b:15:a7:bd:42:1f:16:51:56:9d:c2:a3:5c:87:
                    3b:8c:57:8c:3c:9b:93:31:8e:15:4a:0a:38:1f:e0:
                    be:34:5a:58:4c:3b:2d:f1:02:74:78:9c:8e:91:b6:
                    e7:3b:3a:38:fe:c7:61:90:d8:48:0c:95:14:bb:6e:
                    b1:23:9a:bd:39:d4:39:05:4d:f4:3d:5c:71:52:ec:
                    05:2b:02:ef:ec:ed:39:90:22:79:9a:0b:3c:c4:47:
                    b5:f9:76:50:8f:ab:bb:22:57:c4:89:8d:d8:90:b6:
                    3f:b9:ff:c9:e0:00:6d:6e:a2:56:41:0a:91:8c:c7:
                    b9:1c:fe:01:08:c5:b1:4a:52:d2:69:8e:53:dc:a2:
                    af:65:5f:8d:14:c9:41:7c:dc:3d:b5:e7:29:66:32:
                    2b:68:f8:fd:cd:08:64:81:4f:a2:b3:35:44:df:23:
                    bf:6a:e1:72:7a:fd:97:c7:26:f1:91:a0:24:25:1b:
                    87:30:14:05:40:26:e3:61:72:3b:23:41:96:18:aa:
                    98:e7:7b:ae:36:88:b7:57:ae:a5:d2:cc:96:c5:c0:
                    53:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3C:91:8A:D1:F8:D9:EC:3F:D0:28:CC:51:67:24:56:28:DF:3E:5E
            X509v3 Authority Key Identifier:
                keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7c:9c:32:da:ff:31:b9:9d:e4:2c:53:2a:5e:f2:00:8b:e7:
         1e:32:84:b1:6d:cc:58:05:8f:93:6f:84:85:6c:d5:0b:f7:78:
         52:b5:72:5b:6f:b8:94:95:c5:22:c6:a7:0d:56:fb:57:95:4c:
         5f:41:fb:9a:ed:ee:ff:31:38:8d:c1:4f:96:97:2b:eb:65:9d:
         0b:70:18:94:d7:64:9e:b2:8e:92:a5:b2:15:1a:e9:a6:25:72:
         7a:10:e4:a8:05:03:6f:b6:ca:38:cf:36:93:e7:d2:2b:b0:2e:
         e7:0c:51:3f:1d:e6:c7:c8:33:1e:3a:10:79:87:bd:6f:47:fa:
         db:88:7c:a9:e3:78:0a:5f:b8:64:66:b9:37:cd:6c:4d:6d:20:
         d0:19:83:e8:3c:f2:c6:01:48:9c:67:33:05:19:f4:95:02:08:
         51:81:eb:52:a8:19:89:8a:f5:eb:cf:bc:68:2a:a3:25:d9:2a:
         d8:c6:c5:7f:0d:4c:02:ad:ee:0b:5b:5d:b2:5c:b1:3a:47:6a:
         d8:ae:99:2d:fa:57:fd:6a:9d:14:ed:b6:ac:b0:f0:04:0d:ad:
         b0:ed:a1:53:d2:6a:39:d4:47:01:59:30:d3:ec:b7:88:a8:8e:
         b3:dd:ef:ab:dd:ce:a3:b0:e8:0e:2b:eb:b9:d6:9a:0e:77:0f:
         f1:09:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:20 2026 by rpki-client