Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft
File:                     yyTPMxKhYnFYzDraiI5bywxnzqE.mft (raw, json)
Hash identifier:          MIXugErVAJq9ZFIfLZi8nphEtnFh64wev5KeUSfnwWw=
Subject key identifier:   BB:B2:1E:C7:6E:67:66:6B:9E:89:43:C0:85:A2:35:70:D1:7B:B9:F8
Authority key identifier: CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1
Certificate issuer:       /CN=A9122342/serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1
Certificate serial:       0A26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft
Manifest number:          0A1E
Signing time:             Tue 24 Mar 2026 19:33:39 +0000
Manifest this update:     Tue 24 Mar 2026 19:33:38 +0000
Manifest next update:     Tue 31 Mar 2026 19:33:38 +0000
Files and hashes:         1: yyTPMxKhYnFYzDraiI5bywxnzqE.crl (hash: J9mRYswpVdOa5b2zDnCRSr3G00cNV2hLqsRqXjS9cP4=)
                          2: 4D23A77E8E8F11EAB30DCA1AC4F9AE02.roa (hash: 0KyBtVxlmiU4yD9g8RswElbHQYxJyKsb4zJLZ1lp6S4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl
                          rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2598 (0xa26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122342, serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1
        Validity
            Not Before: Mar 24 19:33:38 2026 GMT
            Not After : Mar 31 19:33:38 2026 GMT
        Subject: CN=69c2e713-c2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:af:5a:31:ff:5b:0f:40:9f:f9:54:27:6c:b5:
                    45:fe:71:55:3c:8a:f2:be:81:c1:5d:06:2b:0e:63:
                    37:72:ad:9c:8b:b2:c0:d1:52:dc:f1:c3:1e:fb:d6:
                    24:d5:58:a2:80:72:7e:1b:ee:0a:78:17:c2:30:8a:
                    5f:5d:a3:89:30:07:18:20:05:af:71:d8:60:f5:2c:
                    5a:09:70:fb:2d:82:1e:8a:00:b5:04:8e:a3:9c:3c:
                    eb:e4:6f:a9:f4:cd:69:65:fe:6e:6d:85:a0:c9:bb:
                    50:ed:15:88:ce:aa:8f:c9:0d:c4:22:e7:91:41:08:
                    6c:60:af:e9:bb:e8:e5:bb:52:9f:89:73:ec:cd:88:
                    71:c5:14:9c:6b:c2:4c:bb:e5:05:9b:d0:12:19:7c:
                    67:c6:0b:5e:22:67:97:0c:4f:d6:0b:2e:b1:4d:0f:
                    77:26:cd:3a:6a:e1:65:d1:6f:fc:1a:be:c1:bc:4b:
                    0c:8d:af:90:24:e5:35:d1:51:94:17:dd:27:14:bf:
                    59:5f:f7:47:86:0d:0e:73:5b:e7:0e:c2:11:c0:18:
                    3a:c2:4f:3d:f8:32:79:f9:7a:89:94:d6:c2:c5:01:
                    95:e2:61:57:4d:dd:57:dd:2b:ff:d7:af:c2:21:84:
                    c0:e5:d1:a5:9d:38:56:89:bb:10:3f:04:c0:14:7d:
                    c4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B2:1E:C7:6E:67:66:6B:9E:89:43:C0:85:A2:35:70:D1:7B:B9:F8
            X509v3 Authority Key Identifier:
                keyid:CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:01:be:94:9c:62:4d:a8:04:94:f4:30:ce:be:c5:bf:5b:59:
         56:e7:1c:b8:3a:9d:6e:04:e5:bd:9a:d4:cd:b4:67:a0:d7:a6:
         7c:2e:e6:19:c5:2a:3e:7e:40:d7:2c:de:42:54:22:d2:88:cc:
         06:e9:ca:84:f6:fb:45:f2:0f:2e:bc:39:11:61:77:e5:01:2f:
         87:54:3d:a4:a4:e0:f3:de:48:0a:ea:04:e9:17:54:f7:02:10:
         a3:23:30:e9:b8:01:b7:0a:58:14:24:ff:e9:5d:3c:fd:80:0f:
         f7:4f:ff:51:b3:b5:f8:b9:16:4d:21:f1:98:0e:43:25:e8:71:
         7f:ed:f7:5a:c0:dc:f1:6f:68:8b:e5:ff:23:b9:d7:2b:40:7d:
         4e:7f:e7:b7:8a:5b:e4:82:5f:65:f8:1d:c2:5f:bf:95:4c:8b:
         b5:27:dd:8e:88:ca:e5:5a:d7:10:16:bf:70:fd:21:b2:0a:c5:
         03:88:67:45:9e:a0:26:8b:52:cb:df:7c:fa:0e:de:ab:98:34:
         d4:4c:7f:93:20:01:6e:4a:56:b1:dd:9e:8c:55:bd:e4:4c:7d:
         a2:4e:3e:2c:0f:29:82:63:9d:a4:a4:4a:a2:e0:a2:ca:e6:06:
         f2:69:e4:3b:d3:fb:07:ce:7b:ff:19:ad:88:4c:be:ba:fd:62:
         96:21:dd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:43 2026 by rpki-client