Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
File:                     09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json)
Hash identifier:          5A4G8Uh82IVZyjRm3P0+XZqTIkA1CU4lt2fHjeqjisE=
Subject key identifier:   01:8A:A5:8F:87:D3:85:99:2D:06:0A:FE:AD:79:0B:FB:F5:0B:CC:0B
Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16
Certificate issuer:       /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16
Certificate serial:       020C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
Manifest number:          01FE
Signing time:             Wed 25 Mar 2026 02:32:16 +0000
Manifest this update:     Wed 25 Mar 2026 02:32:16 +0000
Manifest next update:     Wed 01 Apr 2026 02:32:16 +0000
Files and hashes:         1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: 3maPl/aOwRb269m6EeCZd6qyu+yHFRiVnjcCJcJYwY8=)
                          2: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: 0bElPxBjauRXpVNFFxGy9YP+xctGpLoQsZSJlTgz+9k=)
                          3: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: Csy9xn8YVykTwlTrdK4oyxiVi/Dh8Dq8HQrWcuNnI3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl
                          rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16
        Validity
            Not Before: Mar 25 02:32:16 2026 GMT
            Not After : Apr  1 02:32:16 2026 GMT
        Subject: CN=69c34930-1822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:6f:35:d4:0a:03:51:53:04:1f:02:5d:76:
                    df:9e:3a:eb:5e:ab:dc:10:cd:31:5f:9d:f4:f2:21:
                    d5:df:7b:7e:2b:d8:d5:05:76:26:7d:d4:c8:1a:bc:
                    6f:79:c4:d1:ce:88:9e:48:c8:62:e5:ef:0d:af:7f:
                    9e:15:c8:00:1b:c1:e8:81:fd:98:a9:da:4b:0a:72:
                    20:6a:e4:e8:e9:bb:6b:4b:61:a7:13:79:00:6b:81:
                    aa:1f:db:42:eb:dc:5f:5f:a5:a2:ba:17:fc:81:9b:
                    c0:9b:5c:87:5f:80:3a:ef:aa:44:f8:11:ba:c3:cf:
                    9b:38:93:ad:01:4c:a3:66:86:7b:ba:44:06:b4:c4:
                    b0:94:ee:0c:3c:84:91:8c:e6:3c:f3:4d:3c:23:e3:
                    95:a1:ad:dc:82:ae:84:ac:42:90:7c:d9:97:4a:70:
                    c5:ba:a1:ed:03:d3:53:e8:30:27:ea:d5:c2:05:72:
                    fe:97:cd:45:51:44:7c:93:19:22:dd:06:74:95:cd:
                    4b:95:97:77:e0:41:c4:fb:5a:ca:a8:0e:e0:65:3e:
                    cf:a1:11:43:db:a3:d8:09:6a:75:84:4f:a0:79:60:
                    43:17:e4:7b:c1:ae:1b:e4:d1:9a:b7:d9:8b:30:6d:
                    53:f7:61:ea:56:68:66:5c:2b:b8:7e:fc:d3:1c:3c:
                    cc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8A:A5:8F:87:D3:85:99:2D:06:0A:FE:AD:79:0B:FB:F5:0B:CC:0B
            X509v3 Authority Key Identifier:
                keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ed:d1:b1:76:6a:20:f4:2f:3b:5e:f4:3f:eb:1e:82:d6:27:
         dc:6c:a6:4e:8d:ea:f1:6c:17:2e:09:10:a2:e7:4f:84:33:37:
         d0:3e:8d:aa:93:48:fa:54:43:9c:03:82:f2:5e:6d:bb:9d:3f:
         ab:b0:17:bd:bf:4d:4b:04:c9:f1:9b:72:32:32:fb:9d:97:6f:
         54:89:c3:a9:19:a5:9a:36:97:f1:a7:c8:f0:b7:c4:60:dd:42:
         01:19:fd:47:b3:f3:c4:02:a6:09:16:c6:a6:02:86:0a:f6:9f:
         da:fa:0c:89:23:ca:c1:23:de:6a:db:91:f5:9e:df:ba:62:90:
         ed:bc:5c:95:ea:f5:37:66:6a:be:cc:bd:b6:c5:a6:34:98:c5:
         f6:e8:6d:53:07:9f:a5:90:f3:0e:97:83:2b:32:66:55:54:90:
         02:42:e0:71:41:04:fe:91:ae:21:0d:06:c8:da:47:37:d9:e8:
         3c:b1:01:9e:ab:c7:fa:3f:2d:d7:2a:06:2f:f5:30:c0:84:18:
         fb:38:a5:c2:e6:e2:89:6c:da:10:de:be:a6:b9:63:0b:08:61:
         aa:c1:1c:bc:05:68:53:08:79:3d:7f:00:44:2d:27:13:6d:83:
         6b:0b:57:3d:ab:66:32:c0:12:3d:92:d5:cc:33:c4:56:24:17:
         25:b1:6b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:42 2026 by rpki-client