Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
File:                     YptQlj68agIuJ67LYTQg5A5020o.mft (raw, json)
Hash identifier:          NGWIXL5KHRGm8pS/v7jJVUayIrklJ1TmAIzvpaGMTVA=
Subject key identifier:   BD:01:75:66:02:03:F1:A4:3C:7F:B3:BC:B2:5D:11:57:30:45:56:41
Authority key identifier: 62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A
Certificate issuer:       /CN=A911392E/serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
Manifest number:          0138
Signing time:             Wed 25 Mar 2026 04:39:13 +0000
Manifest this update:     Wed 25 Mar 2026 04:39:13 +0000
Manifest next update:     Wed 01 Apr 2026 04:39:13 +0000
Files and hashes:         1: YptQlj68agIuJ67LYTQg5A5020o.crl (hash: a591uv+aSNiN+UN16RYFQz9ki/O4xxim1vYFbmFSe2g=)
                          2: 8E9B074050E311EF8624AC36C4F9AE02.roa (hash: DNo6LAjYKJT9hMbFIUnOrjoJbdOcs5kpnOeIkHugpwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl
                          rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911392E, serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A
        Validity
            Not Before: Mar 25 04:39:13 2026 GMT
            Not After : Apr  1 04:39:13 2026 GMT
        Subject: CN=69c366f1-c717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:73:43:45:e9:ca:5f:ef:62:8f:e5:87:01:31:
                    28:7b:c6:7f:6e:af:7f:ed:ff:88:fe:30:87:37:3c:
                    68:94:4a:35:79:05:b6:26:bc:f3:af:58:dd:c7:b5:
                    18:b5:22:dd:f8:f8:d4:04:08:af:7e:c9:87:37:eb:
                    39:43:43:1d:ce:0b:1e:a7:4b:c3:97:24:91:1b:f5:
                    7d:99:2d:a8:07:74:9f:00:79:aa:4c:04:d3:e1:1a:
                    d7:6f:6b:df:e9:cd:e6:3c:0e:01:c8:46:79:a7:48:
                    64:a1:c4:e6:67:2b:22:eb:be:c6:f2:d5:df:6e:3d:
                    bb:de:97:73:da:db:68:db:51:40:4b:0e:62:af:60:
                    84:ea:b6:5e:94:0f:0b:c8:b3:59:b5:6d:32:d8:66:
                    d6:6b:6b:a1:73:32:f5:39:c9:d5:ba:7f:c8:98:4f:
                    bc:73:27:d5:c3:45:7d:99:b9:62:5f:eb:40:20:aa:
                    1a:22:ee:40:76:d9:53:04:0a:4e:d5:60:79:b4:77:
                    af:f3:27:4c:69:3f:a8:94:8b:ad:26:e1:4f:8a:e9:
                    b5:ca:24:66:59:fa:2d:4f:f3:ab:cc:6a:ad:0a:ba:
                    1b:c0:0c:fd:d3:3f:75:6e:9b:43:48:52:49:ec:a7:
                    3a:60:ec:53:2c:f1:16:ff:22:53:32:b7:2f:40:d4:
                    4c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:01:75:66:02:03:F1:A4:3C:7F:B3:BC:B2:5D:11:57:30:45:56:41
            X509v3 Authority Key Identifier:
                keyid:62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b2:9c:f5:f4:e8:e1:b4:9f:cb:48:09:a9:a0:72:65:e3:c3:
         4e:c3:bb:9e:64:02:0c:6c:ee:c7:e7:8b:c1:d0:d2:93:08:c0:
         45:75:62:fd:07:b8:87:0d:b6:16:27:4c:8f:7b:cc:4d:ca:c1:
         84:83:d4:f6:7e:55:fa:cd:69:1f:4b:05:7f:94:9a:c6:1e:7f:
         96:48:57:01:6a:3b:53:19:50:1a:89:9f:1e:94:86:96:03:d1:
         1e:92:b9:a1:9b:74:d7:9b:ec:5e:e0:5f:8f:24:9b:4d:0b:00:
         2e:01:4f:51:fa:9a:19:a1:b0:bf:fb:81:b4:b3:fc:08:63:68:
         fc:ed:54:9f:ba:71:b8:77:29:51:23:34:cf:90:dd:3a:52:aa:
         92:02:7e:01:53:1f:f7:74:85:1b:c3:c5:4f:77:91:47:2f:68:
         92:ab:21:f5:8d:22:07:68:be:6c:cb:73:64:32:71:b8:e6:e1:
         d9:2d:a7:f5:a5:49:52:e1:bd:d3:0b:e5:ea:ef:c4:b5:00:e5:
         d3:3c:99:bb:05:18:31:69:74:e0:39:63:12:43:21:75:b9:38:
         d6:58:38:55:41:7a:74:f2:4d:c0:9a:b3:45:73:6b:78:e7:f2:
         80:c9:89:67:62:e6:16:13:d9:f3:4d:e2:9f:92:30:d7:0c:5f:
         ca:ce:05:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:54:18 2026 by rpki-client