Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
File:                     yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft (raw, json)
Hash identifier:          Gleou6f+4tKoZt7L3bB4d1zTOpSJm6BxPbk+PshJ21A=
Subject key identifier:   89:F6:2D:E7:43:13:7B:CD:5A:BC:33:4D:3B:EE:D0:89:F6:49:D1:E8
Authority key identifier: C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82
Certificate issuer:       /CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
Certificate serial:       1015
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
Manifest number:          0FFF
Signing time:             Tue 24 Mar 2026 17:21:03 +0000
Manifest this update:     Tue 24 Mar 2026 17:21:03 +0000
Manifest next update:     Tue 31 Mar 2026 17:21:03 +0000
Files and hashes:         1: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl (hash: BrGfce96wSoECUqzN4koA494Wsp6mVGhUnksYv83xFI=)
                          2: 05449490E17B11EC93AB7473C4F9AE02.roa (hash: b4RHmMbFBRWJFcnsmHpleiRHLLRNwyJ8lJiARBOoS8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl
                          rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4117 (0x1015)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B2EE, serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
        Validity
            Not Before: Mar 24 17:21:03 2026 GMT
            Not After : Mar 31 17:21:03 2026 GMT
        Subject: CN=69c2c7ff-75d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:04:15:75:9f:5b:40:7d:dd:e9:91:9c:06:
                    7d:d6:01:61:60:2d:1c:93:10:1f:4a:e5:87:ab:56:
                    7a:4b:08:7a:b0:9b:6c:4f:10:a6:bd:d7:20:fd:57:
                    6c:e0:1c:27:71:94:ae:e4:9a:9b:99:48:90:04:93:
                    bb:44:07:30:6e:a1:fe:21:2c:ec:43:5d:ad:df:5f:
                    e0:39:86:eb:18:43:95:2a:49:cb:17:b3:81:64:e5:
                    ca:67:44:01:93:84:0f:10:15:6e:f2:87:76:0b:7d:
                    cc:8c:34:6d:62:2a:8a:22:16:33:5c:ba:ac:fe:13:
                    47:94:f9:20:73:82:d0:08:a6:2a:3f:29:1b:73:ee:
                    59:bb:db:ff:2a:3b:da:e2:4e:39:8a:d4:cb:fd:04:
                    eb:85:88:d7:1e:20:98:69:d3:d6:f1:3d:20:1b:39:
                    0c:27:4f:cd:d0:00:f8:b6:b5:73:7f:bd:08:36:a9:
                    f0:89:eb:ac:16:88:5d:74:db:ec:5e:e0:b6:f0:4d:
                    ba:69:12:04:7b:5c:07:47:0e:dd:6e:e6:61:0c:b1:
                    d4:3e:c6:35:79:4a:95:9f:a9:bb:e2:f9:6e:10:0d:
                    48:26:b8:0b:b4:a4:86:f3:61:a3:0e:36:65:9d:e8:
                    19:e1:c6:82:75:9d:35:a6:34:44:a3:a6:34:4d:44:
                    86:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F6:2D:E7:43:13:7B:CD:5A:BC:33:4D:3B:EE:D0:89:F6:49:D1:E8
            X509v3 Authority Key Identifier:
                keyid:C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f1:98:a9:16:da:ce:d0:7b:24:81:58:6c:74:b7:52:2b:b7:
         09:c9:d5:83:bc:12:04:6e:7c:d9:3e:e7:40:eb:bc:6b:38:2d:
         85:14:aa:80:ab:bc:f3:c0:d3:c1:45:90:ce:9d:62:42:e7:09:
         de:1b:23:83:fc:43:bc:06:fb:53:8b:54:86:e0:5c:b2:74:2e:
         16:c3:c0:e9:50:21:53:d8:85:0a:ce:91:93:32:da:47:8f:a1:
         b7:ae:80:c6:7c:a2:29:f5:99:84:fa:de:83:1d:32:8c:83:96:
         d4:2b:43:f5:87:3c:8c:5a:34:eb:85:55:ba:4d:f6:87:00:2c:
         05:ef:2f:e2:95:29:25:93:36:c5:15:d0:e8:43:ae:9c:3b:c5:
         04:d0:4d:5b:72:5d:74:2e:95:85:0f:5c:04:8e:d8:16:01:f8:
         e0:47:fd:f6:b8:49:6e:9b:50:c7:8a:be:7f:e7:f6:72:4c:63:
         5a:8f:28:b6:42:18:47:e3:eb:9f:8d:fc:07:bf:0a:07:bf:d0:
         f8:de:c0:89:87:ee:a3:57:01:51:38:ce:62:33:39:fb:b3:25:
         f1:98:fa:95:6b:06:a3:be:6b:b9:1e:f4:27:13:ee:20:bc:e2:
         ab:23:2c:bc:3c:0d:7e:c0:34:fc:f7:ee:54:d9:85:6a:5b:cf:
         b8:5f:97:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:26 2026 by rpki-client