Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
File:                     yIwqqUquXvn01JfoOHo53RvOk50.mft (raw, json)
Hash identifier:          qRCPKwBWDu83beGv3ReUWCNUTbCy1hHsLpF1tr2wepQ=
Subject key identifier:   EB:C7:66:7D:C5:BE:4D:37:CC:72:E9:7E:A1:87:DB:D6:64:64:B8:57
Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
Certificate issuer:       /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Certificate serial:       01CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
Manifest number:          01C7
Signing time:             Wed 25 Mar 2026 03:04:16 +0000
Manifest this update:     Wed 25 Mar 2026 03:04:16 +0000
Manifest next update:     Wed 01 Apr 2026 03:04:16 +0000
Files and hashes:         1: yIwqqUquXvn01JfoOHo53RvOk50.crl (hash: iLNcgHZuuWEQJsQz16gnSRt/wRYpOVq4rfW2Ao5/f8o=)
                          2: EF98E11472E211EEB93A4F72C4F9AE02.roa (hash: g62n6MuaUWV6TMBxgw6JfizdoiYQ10/TclDcRrurcgo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl
                          rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91228E2, serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
        Validity
            Not Before: Mar 25 03:04:16 2026 GMT
            Not After : Apr  1 03:04:16 2026 GMT
        Subject: CN=69c350b0-3cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:95:16:68:fb:68:61:77:0b:ad:40:5f:16:
                    03:2e:20:29:50:24:f1:74:f5:08:72:78:4e:8d:77:
                    a2:d9:3f:be:2d:7e:9b:b7:63:39:b6:4a:c9:db:a9:
                    9c:54:03:02:63:a1:7f:89:aa:25:9c:14:37:e1:7c:
                    86:bc:26:72:88:e3:9a:2e:8d:c5:ce:a0:c4:ad:e9:
                    01:08:d0:1b:a3:d4:a6:7e:00:c9:18:fd:4b:24:2d:
                    72:63:e4:99:45:cd:f3:0e:05:36:84:aa:15:b1:42:
                    43:0e:66:e3:11:9c:a3:c4:1a:9f:0b:b0:a8:e5:1c:
                    b2:94:53:44:73:a0:46:b6:6b:2a:52:bf:0e:10:09:
                    51:58:e3:34:ca:9f:5d:a3:fd:80:66:73:94:dd:ab:
                    e3:1d:c2:3c:c8:68:a7:70:31:48:12:eb:55:b0:52:
                    13:fc:74:4d:9d:be:7d:d7:a6:e8:37:61:1c:24:58:
                    e6:01:bf:fd:4f:8e:c6:44:2e:b0:6a:c0:49:36:af:
                    e6:8b:0c:57:a0:42:6e:af:06:80:ed:c2:5b:b5:21:
                    30:47:e7:1a:e2:cd:1a:4a:d5:cf:12:07:bb:60:36:
                    2e:a3:3a:6a:23:64:2c:0d:96:da:12:07:73:96:4f:
                    ee:f4:8f:1a:9d:42:c1:35:ce:52:15:b0:98:f0:f3:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C7:66:7D:C5:BE:4D:37:CC:72:E9:7E:A1:87:DB:D6:64:64:B8:57
            X509v3 Authority Key Identifier:
                keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:dd:fd:d2:3e:2d:e0:c3:77:35:2b:47:a7:c2:46:21:32:03:
         87:c1:a9:5b:a7:c5:a9:b9:95:9f:d0:9e:9b:7b:57:74:cb:50:
         95:e8:db:30:b0:46:7b:82:6f:3c:3a:b6:7e:3b:e7:34:4a:81:
         57:71:93:c8:ef:35:52:8b:5d:9c:36:7c:58:ac:8d:a2:7f:cf:
         1f:ba:ff:78:4b:af:ca:9c:96:6d:1f:56:43:f2:7f:ab:a8:fa:
         e5:52:a9:21:67:11:5d:8c:d6:cd:c8:bf:48:57:b9:e5:b1:1f:
         a2:26:a9:a0:07:03:da:b3:6f:33:77:1f:ad:25:95:7a:dd:01:
         c3:5c:2a:e1:58:41:de:c1:e5:8f:f4:87:86:a0:e1:ac:99:58:
         31:b8:27:8e:ce:8f:5e:6e:1f:f9:e7:39:8a:62:41:43:c5:f9:
         e6:c5:bb:9e:1c:52:0b:d3:3e:bb:a3:d1:fc:38:73:bc:f6:d6:
         29:70:bb:25:ea:91:b2:31:df:2d:45:ad:79:6d:ea:77:00:7f:
         17:46:ab:b5:d3:f4:1b:3f:b0:09:4d:f9:6f:7f:d9:2f:16:b7:
         82:7b:cb:d8:a7:41:af:83:73:1d:fd:83:da:ab:d4:1b:3b:75:
         f6:14:f9:d7:47:5b:59:32:f5:67:03:90:1a:61:a6:65:ec:0a:
         75:d2:cf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:36:24 2026 by rpki-client