Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
File:                     YmINYNuoUorqQhLM7bcpYTqZFVw.mft (raw, json)
Hash identifier:          5ESTD+BQQRyZSxJ8foGzS1GGkcFUEMX39qb7Os1BjPE=
Subject key identifier:   13:92:3B:87:B6:A0:22:66:7F:65:48:8C:38:37:41:2F:1A:97:1D:EC
Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
Certificate issuer:       /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
Certificate serial:       03F5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
Manifest number:          03ED
Signing time:             Tue 24 Mar 2026 21:42:39 +0000
Manifest this update:     Tue 24 Mar 2026 21:42:39 +0000
Manifest next update:     Tue 31 Mar 2026 21:42:39 +0000
Files and hashes:         1: YmINYNuoUorqQhLM7bcpYTqZFVw.crl (hash: mMCUjilTEDpdjthVSy/czqFO01CBojUiUyqXpaGmPEU=)
                          2: C9E2B406804111EEA6703F81C4F9AE02.roa (hash: s9x9gIirWntlK8Owx596ebxdwlOGog5ZPg7HYcpO694=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5, serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
        Validity
            Not Before: Mar 24 21:42:39 2026 GMT
            Not After : Mar 31 21:42:39 2026 GMT
        Subject: CN=69c3054f-c677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:bd:71:6a:15:36:27:0f:e1:b0:1e:77:a9:
                    6b:6d:d1:32:71:3a:11:f7:19:13:00:03:aa:27:4d:
                    0b:88:fd:0d:e2:f9:47:20:b9:e0:47:36:e3:62:d1:
                    07:34:ce:ae:a4:95:ff:3b:1d:19:8d:7e:2e:9c:70:
                    64:0c:c0:ac:b6:ac:63:0e:09:85:e4:ed:60:cb:b9:
                    4e:7a:e0:47:49:67:ec:89:40:b0:a8:b2:af:bf:a0:
                    ac:ca:40:c7:3c:6b:35:31:7d:1a:2a:82:be:8f:bf:
                    19:31:7b:04:e3:a8:da:ea:4f:a1:73:7a:97:3f:79:
                    80:87:4b:37:bc:05:5b:04:3e:1d:ba:3b:4f:49:f2:
                    16:e0:c7:4e:b4:b3:c2:c9:5b:8b:fd:71:ba:4c:86:
                    38:b7:03:68:b1:d0:3a:57:50:bf:b1:13:d4:3c:f8:
                    7f:db:b1:a5:be:65:89:ee:c1:26:48:1b:99:2a:07:
                    3e:4b:70:af:1d:7b:ee:e3:5a:02:32:7f:fc:58:ac:
                    ed:92:3d:6b:db:0f:0e:cd:ec:bc:82:a3:c2:d0:d1:
                    b9:2c:a8:1c:aa:55:3e:c5:3b:bd:0e:98:97:fa:fd:
                    fb:64:22:34:9b:35:ef:b6:05:62:86:90:6f:bb:2a:
                    43:76:29:2c:83:16:e2:03:d4:f2:2e:55:c7:97:82:
                    b1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:92:3B:87:B6:A0:22:66:7F:65:48:8C:38:37:41:2F:1A:97:1D:EC
            X509v3 Authority Key Identifier:
                keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:28:0c:e1:3e:7d:32:2a:e5:21:1a:1a:5e:7d:cf:bc:b3:bb:
         27:a9:ff:35:d4:76:e6:a6:78:a7:0d:f6:73:93:29:62:1e:b1:
         2e:4a:92:9a:68:6b:98:f4:ed:cb:a4:69:aa:6c:b6:ff:6e:41:
         76:ef:02:5a:78:a8:8b:65:21:15:7c:d8:ec:f1:74:cc:cf:f4:
         70:f5:86:57:d2:6e:f1:46:30:0e:e7:3b:d3:8a:28:e2:d8:05:
         72:71:8d:ea:2d:cc:c2:b4:3b:79:c5:3b:91:36:91:b8:e1:f5:
         ce:66:1b:be:49:e6:1f:c9:7c:a1:a5:8b:c1:87:73:ee:5d:90:
         e7:6f:0d:ba:13:87:13:7e:99:5c:76:50:ac:37:1a:13:81:f3:
         2b:9e:57:59:17:30:a0:03:90:24:a5:9a:90:57:0d:84:8c:81:
         a4:38:fc:61:83:67:65:83:43:4e:99:40:3a:5e:a2:ff:7d:60:
         6d:60:a7:31:3d:19:9c:10:b0:88:78:6b:94:f4:9f:8f:55:1d:
         71:21:e2:6b:59:e2:0c:6d:a5:4a:ca:c5:b4:64:c6:58:b7:1c:
         bb:89:1e:6a:6d:9f:db:55:f1:01:16:a8:f6:1c:f3:3a:7f:86:
         12:15:3c:36:19:c5:0f:c7:42:c4:3d:e2:52:5e:66:a3:3d:54:
         48:ed:81:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:36:44 2026 by rpki-client