Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
File:                     1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft (raw, json)
Hash identifier:          rBEaMJFNZeeQdgHFtskcgdFSXTFhyl73RLq9fgrLHbc=
Subject key identifier:   40:47:4A:34:C6:48:08:D2:F6:58:D3:63:E3:7C:26:0D:D4:01:1F:E9
Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02
Certificate issuer:       /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
Certificate serial:       0227
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
Manifest number:          0D78
Signing time:             Tue 24 Mar 2026 19:00:18 +0000
Manifest this update:     Tue 24 Mar 2026 19:00:18 +0000
Manifest next update:     Tue 31 Mar 2026 19:00:18 +0000
Files and hashes:         1: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl (hash: Ex7WgovTh2bdsyrZ7lvv4uY/3bjvyUji31GkfDzTvXI=)
                          2: 751E90665BAB11EFB9769A80C4F9AE02.roa (hash: lp1mIWHv50H67/1sWvgWafFsHRljAsP65REDU9P4PJ4=)
                          3: 21980772889311F09BCDF026C4F9AE02.roa (hash: 7Sm1JatgpXAermztWSIArPQJA32zizmhEoRTzDBQ5FE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl
                          rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
        Validity
            Not Before: Mar 24 19:00:18 2026 GMT
            Not After : Mar 31 19:00:18 2026 GMT
        Subject: CN=69c2df42-ff77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:dd:f2:89:36:c2:e5:66:ba:85:00:84:26:e8:
                    48:71:48:52:04:03:c3:6d:e1:7d:3a:77:f3:4b:5b:
                    91:c8:15:92:f8:85:80:69:fe:11:f4:7e:09:4a:dc:
                    d5:69:0f:93:7e:b9:e0:c6:18:f1:31:94:9e:5f:e8:
                    4a:ee:a3:7d:0f:1c:a3:e3:7e:ed:19:4b:7e:7b:c5:
                    71:4c:ef:4f:6a:67:8a:a0:98:28:9b:30:aa:7d:a5:
                    7d:9f:b8:de:7e:08:ed:74:60:96:c2:79:b6:00:c2:
                    af:b6:6b:18:e3:ee:ad:bc:d4:71:1a:b7:0e:bb:15:
                    4c:5d:93:6c:21:67:79:f8:fd:b5:66:99:17:a0:af:
                    8a:a6:0b:ea:c1:68:52:7a:52:ea:32:67:8e:45:f3:
                    84:cc:17:1c:75:f5:bc:62:f2:47:aa:a2:64:4e:32:
                    5d:4b:1d:e0:f6:32:60:98:a9:fd:58:b4:7d:d0:55:
                    80:0b:a4:11:c4:13:47:7d:e5:df:b5:15:6b:34:9a:
                    f9:9c:d3:e4:13:03:3f:9d:23:a0:0d:a4:cf:af:65:
                    51:f0:6e:de:e8:68:b6:86:43:eb:a9:18:66:18:ff:
                    bd:fb:bd:a5:eb:2f:d5:21:d8:a5:9f:ac:8e:84:ce:
                    d6:35:12:3f:df:ed:95:96:f8:09:bb:e5:19:85:27:
                    cc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:47:4A:34:C6:48:08:D2:F6:58:D3:63:E3:7C:26:0D:D4:01:1F:E9
            X509v3 Authority Key Identifier:
                keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:87:99:76:f4:30:55:4b:63:8f:e8:e3:bb:57:35:40:22:6f:
         49:0b:1a:e7:ce:02:a8:54:f4:48:30:f9:8e:3a:20:48:bd:75:
         c2:d3:01:60:e3:b5:54:a7:0c:14:d5:64:cb:01:ea:9e:2a:5d:
         03:65:af:74:e2:af:d0:8f:77:20:b0:89:7d:eb:e9:dc:18:3a:
         2e:c3:ff:cb:b4:99:7d:47:f1:c9:11:84:6c:54:99:97:7d:2f:
         8f:35:a7:79:a1:2f:2e:85:6f:e9:17:8d:30:31:ad:c4:92:d4:
         4e:7c:34:b6:72:19:e7:59:17:e9:c5:17:8d:80:dd:cd:c4:f2:
         63:5c:f6:46:b1:23:f7:d9:ff:60:0c:f8:bd:ff:05:f7:41:de:
         b8:6e:c2:35:ea:53:0d:e5:22:d8:f0:85:59:26:f7:af:3c:4c:
         93:70:bf:9c:4a:45:75:3b:f3:4f:7c:ab:fe:7b:09:07:5a:0b:
         d5:00:94:af:ff:50:09:2b:14:b0:73:97:80:fe:55:46:e0:bd:
         d0:48:67:6a:39:6c:33:51:af:8c:70:21:78:0e:3f:cf:af:b7:
         a3:19:6d:56:fd:71:50:52:40:55:85:99:f6:fc:94:60:91:90:
         53:f1:25:dd:65:92:74:27:54:fb:3a:23:5c:c8:89:ed:32:23:
         71:22:b2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:31:37 2026 by rpki-client