Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
File:                     yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json)
Hash identifier:          6sxHxqqbdNTDTGL5mcY2x5hlIp4l2tbzfaPfG9cFc5M=
Subject key identifier:   E5:94:3B:80:04:0C:34:3B:2B:44:E4:2B:30:A7:24:F2:73:08:8D:FB
Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
Certificate issuer:       /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Certificate serial:       0812
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
Manifest number:          07FC
Signing time:             Tue 24 Mar 2026 20:59:17 +0000
Manifest this update:     Tue 24 Mar 2026 20:59:16 +0000
Manifest next update:     Tue 31 Mar 2026 20:59:16 +0000
Files and hashes:         1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: T+4KmAQHbEcXvFxw2pFOXTf9/kyDf4b7urePNbtDRCs=)
                          2: 5C95BDC0C12E11EEA47CBB59C4F9AE02.roa (hash: O0xpewKz8Q7J1ZZQXG0b/KCwkQGEq6Jb5YHKjy66mLk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl
                          rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2066 (0x812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
        Validity
            Not Before: Mar 24 20:59:16 2026 GMT
            Not After : Mar 31 20:59:16 2026 GMT
        Subject: CN=69c2fb25-b2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1c:91:68:45:49:b3:05:1a:35:c7:54:82:98:
                    80:db:9a:6c:ad:af:72:65:c2:ae:4f:41:7c:d0:6e:
                    c0:89:c7:7c:c2:ae:32:b3:94:0f:84:c5:76:07:dd:
                    02:1a:2d:0a:38:2d:ea:3e:72:1b:18:f2:b8:45:47:
                    95:af:43:89:33:71:77:c3:84:06:57:dc:e7:6d:4e:
                    30:30:ab:8a:a2:68:d1:56:eb:fc:33:7c:84:43:bd:
                    28:88:9e:65:30:d9:8c:1f:72:78:5f:d1:cd:ec:41:
                    f1:cc:da:d6:c6:6e:58:60:8d:61:2a:7a:d2:25:e0:
                    c5:d1:63:27:5c:dc:59:a6:16:5b:df:73:78:dc:f9:
                    d8:38:8e:77:43:a6:3a:34:54:9a:c6:5b:71:8b:d5:
                    df:f4:a9:92:fb:2a:47:6b:34:d2:81:3c:c5:91:d9:
                    b8:19:9e:fa:4a:a9:ec:18:cf:ea:2f:19:a3:8c:0c:
                    76:bb:04:ee:a8:a3:68:ff:2e:98:31:fe:bb:fd:5f:
                    f6:54:69:c5:f2:a3:07:d9:eb:f1:75:cc:cc:16:fa:
                    b6:fc:fa:10:52:87:ea:e8:18:c5:ba:41:38:c6:2b:
                    64:07:88:31:26:74:a0:1f:d1:1d:1d:a8:d7:a3:ed:
                    d8:2a:72:e5:00:0d:09:39:c7:b6:d3:63:ae:5b:4e:
                    70:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:94:3B:80:04:0C:34:3B:2B:44:E4:2B:30:A7:24:F2:73:08:8D:FB
            X509v3 Authority Key Identifier:
                keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:2c:a6:b5:44:c9:1e:79:3e:fd:c6:20:e5:84:75:a0:fa:74:
         2a:bb:8c:ab:c4:cb:8e:54:14:18:f0:52:0d:96:de:97:4c:9c:
         49:87:91:d2:94:84:65:74:d2:94:6f:c5:f8:2e:fa:16:4e:c2:
         12:b3:ee:a1:0c:16:9e:7e:c1:78:b8:59:5d:e7:29:7e:42:5d:
         a4:ca:9f:a4:f9:0a:cb:95:4c:f9:0c:15:ca:c4:4c:47:ec:cb:
         6f:58:9a:35:d6:7b:87:13:c6:10:c9:4b:ea:41:1c:54:b3:31:
         b3:41:8d:5c:ab:39:f2:e0:2a:7c:4b:82:62:43:a9:e8:1a:30:
         96:cf:6b:39:b6:ad:00:bd:ca:6b:1b:3b:66:ad:ba:0b:24:c4:
         d7:c5:7c:f1:24:c8:e1:ca:0e:1a:6b:cd:54:8d:b3:ea:d1:92:
         6e:1f:9d:ad:06:6b:01:f8:3c:7c:54:f0:d1:86:38:57:f4:be:
         a3:da:e1:43:24:6e:2c:13:b7:03:26:0c:09:b1:9f:27:f9:08:
         df:0f:bb:dc:4e:12:40:f7:fd:e3:46:f1:3f:21:8c:7b:1e:95:
         8d:51:2c:e5:37:a1:40:3f:f9:7a:76:39:02:a4:7c:75:67:89:
         5a:81:32:63:c4:21:5e:c1:6a:20:0b:2d:0f:f8:0f:dd:09:31:
         cc:95:b0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:09:30 2026 by rpki-client