Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
File:                     yUSBytAO-x3qepOcvimo9F8l4gs.mft (raw, json)
Hash identifier:          c+pvSE2H3Tv14eDUdNg5X+ljU70oJfoNag0OL8oDcaw=
Subject key identifier:   49:72:BB:F1:3A:6B:29:46:0C:A2:FD:16:18:37:0F:A8:5D:D1:BE:30
Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B
Certificate issuer:       /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
Certificate serial:       0294
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
Manifest number:          028E
Signing time:             Wed 25 Mar 2026 01:09:54 +0000
Manifest this update:     Wed 25 Mar 2026 01:09:54 +0000
Manifest next update:     Wed 01 Apr 2026 01:09:54 +0000
Files and hashes:         1: yUSBytAO-x3qepOcvimo9F8l4gs.crl (hash: 1fPoIgi0vgNv4UIia65bzuTpJIlbiAgNn70T/Ygyp5Q=)
                          2: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (hash: NLXZ65JDAAnPzadraE0zYkg0or9UL4J3E22WlvbjmhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl
                          rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113F63, serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
        Validity
            Not Before: Mar 25 01:09:54 2026 GMT
            Not After : Apr  1 01:09:54 2026 GMT
        Subject: CN=69c335e2-9a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b8:a3:42:6f:60:a8:53:8c:b4:a7:2f:91:cf:
                    6a:42:83:bf:ce:71:e2:93:ce:11:f5:8e:88:42:96:
                    21:b8:18:83:df:b7:6f:b4:6a:7c:d7:49:28:cf:05:
                    43:e3:32:d5:fd:67:1e:27:6b:4c:26:b0:19:6b:a7:
                    e7:35:20:11:ad:4a:ac:35:9c:a8:1c:61:35:3e:0c:
                    93:2a:32:ae:9f:61:d9:9f:5f:e5:2a:19:62:85:e9:
                    29:84:9e:65:f2:e6:dc:cb:3e:29:80:a6:ff:ac:81:
                    7e:47:b4:46:32:8e:3e:90:61:1d:ee:f8:7e:c7:57:
                    63:34:e5:dc:c9:8a:d9:2b:93:69:0f:86:8f:2e:95:
                    39:28:fb:e4:21:cf:88:fb:5e:dd:d0:5b:a4:ad:c9:
                    71:6e:36:68:3f:42:06:ec:72:a7:08:28:9e:60:89:
                    74:79:1c:43:bc:16:af:e9:60:fc:44:0f:86:5c:21:
                    32:c4:aa:01:7d:61:00:dd:4a:94:56:fd:0a:69:cb:
                    0a:7a:47:52:e8:b3:ec:ad:f9:6d:05:21:6a:8f:36:
                    e6:c9:7d:b3:0a:c6:3d:83:5f:73:1a:44:57:2b:79:
                    52:bd:b0:29:d6:00:ac:11:7c:a6:54:d4:8f:4a:cd:
                    a7:ea:c2:f2:b6:97:f0:35:20:66:c2:50:e3:a6:2c:
                    29:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:72:BB:F1:3A:6B:29:46:0C:A2:FD:16:18:37:0F:A8:5D:D1:BE:30
            X509v3 Authority Key Identifier:
                keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a9:db:0c:c6:24:6b:7d:2f:c3:44:11:d5:21:bd:e0:a0:d7:
         88:46:63:03:31:1c:22:8f:ac:dc:a0:22:93:2f:2e:2b:cc:a1:
         c4:af:8c:7d:a0:ac:10:7b:6d:57:5d:b1:2b:e2:9a:4b:01:b9:
         fa:b0:a6:99:a0:89:e1:88:20:dc:dc:90:18:77:2d:12:d9:07:
         85:51:d9:2b:45:78:d8:fa:37:ad:ef:0a:da:d8:9c:7b:1c:a4:
         ce:68:ac:e0:a3:98:2c:f7:db:76:ba:91:c4:77:12:e2:dd:b5:
         09:63:b3:68:3c:5b:31:92:cc:e4:dc:5d:9b:c3:08:12:dd:7d:
         71:cb:d8:ba:99:00:ef:61:af:e1:15:e6:ce:e8:ab:14:45:21:
         1e:86:63:50:f3:16:d4:9d:f4:01:11:ad:08:26:90:81:7e:8f:
         58:2b:0e:e0:ca:3d:03:de:fb:ee:8e:87:ed:3a:17:36:b6:86:
         27:56:14:ba:d2:df:21:2c:66:67:d5:37:cd:c9:b2:0c:6c:b3:
         ef:b7:d8:91:cc:02:aa:8d:38:c8:c0:3b:e4:fe:e9:08:81:0f:
         38:10:35:d2:cc:49:18:30:6f:99:f0:14:06:51:bc:65:f2:de:
         9e:97:4e:06:b8:f1:6d:7b:55:32:e4:c6:b9:33:9e:31:f9:bb:
         df:35:91:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNGNjMxMTAvBgNVBAUTKEM5NDQ4MUNBRDAwRUZCMURFQTdBOTM5Q0JFMjlBOEY0
NUYyNUUyMEIwHhcNMjYwMzI1MDEwOTU0WhcNMjYwNDAxMDEwOTU0WjAYMRYwFAYD
VQQDEw02OWMzMzVlMi05YTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4bijQm9gqFOMtKcvkc9qQoO/znHik84R9Y6IQpYhuBiD37dvtGp810kozwVD
4zLV/WceJ2tMJrAZa6fnNSARrUqsNZyoHGE1PgyTKjKun2HZn1/lKhlihekphJ5l
8ubcyz4pgKb/rIF+R7RGMo4+kGEd7vh+x1djNOXcyYrZK5NpD4aPLpU5KPvkIc+I
+17d0FukrclxbjZoP0IG7HKnCCieYIl0eRxDvBav6WD8RA+GXCEyxKoBfWEA3UqU
Vv0KacsKekdS6LPsrfltBSFqjzbmyX2zCsY9g19zGkRXK3lSvbAp1gCsEXymVNSP
Ss2n6sLytpfwNSBmwlDjpiwpZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFElyu/E6
aylGDKL9Fhg3D6hd0b4wMB8GA1UdIwQYMBaAFMlEgcrQDvsd6nqTnL4pqPRfJeIL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0Y2My81MTlCNjRBNjQw
RUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14M3FlcE9jdmltbzlGOGw0
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lVU0J5dEFPLXgzcWVwT2N2aW1vOUY4bDRncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0Y2My81MTlCNjRBNjQwRUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14
M3FlcE9jdmltbzlGOGw0Z3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR6nbDMYka30vw0QR1SG94KDXiEZjAzEcIo+s3KAiky8uK8yhxK+MfaCsEHtt
V12xK+KaSwG5+rCmmaCJ4Ygg3NyQGHctEtkHhVHZK0V42Po3re8K2ticexykzmis
4KOYLPfbdrqRxHcS4t21CWOzaDxbMZLM5Nxdm8MIEt19ccvYupkA72Gv4RXmzuir
FEUhHoZjUPMW1J30ARGtCCaQgX6PWCsO4Mo9A9777o6H7ToXNraGJ1YUutLfISxm
Z9U3zcmyDGyz77fYkcwCqo04yMA75P7pCIEPOBA10sxJGDBvmfAUBlG8ZfLenpdO
BrjxbXtVMuTGuTOeMfm73zWREw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:01 2026 by rpki-client