Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
File:                     yoPUPlpeWcd1mxubL72YqUff07w.mft (raw, json)
Hash identifier:          EA+C3eNJZC5uoyG2y2w9rDwouE+y8JxthM/WyMLzQCc=
Subject key identifier:   88:3F:BD:D4:68:1C:46:AD:81:CB:D3:13:6C:C8:B2:F1:FC:B7:E2:FD
Authority key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC
Certificate issuer:       /CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
Certificate serial:       1136
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
Manifest number:          1105
Signing time:             Thu 26 Mar 2026 17:16:08 +0000
Manifest this update:     Thu 26 Mar 2026 17:16:07 +0000
Manifest next update:     Thu 02 Apr 2026 17:16:07 +0000
Files and hashes:         1: yoPUPlpeWcd1mxubL72YqUff07w.crl (hash: EQjzDMAyhVvc5yaHv9HAm9BElwHT1vuwOZebx20jx0c=)
                          2: 7B306A34218D11EC87C96D6DC4F9AE02.roa (hash: UaBguah8aqrFfyBedD0PzoPcWPfm260vsagvZpaZCng=)
                          3: AAAA30A6288411EEAD22D65DC4F9AE02.roa (hash: 7K/QpVAO7JoVbT1z1p+Qj6Yu5pdtMluMhKw9vV8LigY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl
                          rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4406 (0x1136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6, serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
        Validity
            Not Before: Mar 26 17:16:07 2026 GMT
            Not After : Apr  2 17:16:07 2026 GMT
        Subject: CN=69c569d7-5f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:65:8b:d0:f5:7d:c8:9c:c8:84:06:67:f6:
                    d4:8d:9b:59:b9:4b:57:bf:e6:e7:d2:1c:d0:a4:a9:
                    8a:4b:75:ab:3f:3e:62:df:bb:c4:2f:07:07:2a:d3:
                    6f:15:a0:de:e5:4e:77:5d:3f:c5:38:63:42:bc:9c:
                    5b:44:7b:a8:be:62:1a:9a:e0:7f:84:09:1c:29:68:
                    af:dd:e4:fd:8d:86:89:71:2c:61:a4:2f:d6:db:04:
                    71:ed:cd:aa:a4:dd:79:5d:20:b1:bd:5f:9e:36:d9:
                    3f:14:bb:56:e5:03:99:8b:49:34:ba:b6:f0:90:a2:
                    cf:ed:dd:82:28:50:38:f4:8d:8b:1f:4e:37:d0:0b:
                    ee:7c:0c:ae:33:e7:91:38:d4:2b:fe:9d:c4:4e:94:
                    bb:61:04:be:89:f0:be:f5:2e:0d:28:a8:53:8a:e6:
                    d5:a1:ed:cd:c1:8f:4c:29:87:63:c4:60:c5:3f:13:
                    07:da:bb:2d:b4:60:f9:82:a3:1e:4d:6f:df:e7:ce:
                    b1:bf:1f:c2:f8:5d:6b:bc:70:74:ce:d0:2d:cc:31:
                    81:05:fd:98:39:f4:1e:26:0b:10:fc:74:c4:fc:3b:
                    58:e2:85:ea:3f:ed:c9:8d:f8:bb:f9:97:3d:8a:da:
                    8b:80:89:b2:cb:01:63:65:1d:61:8e:29:ee:0f:cd:
                    92:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3F:BD:D4:68:1C:46:AD:81:CB:D3:13:6C:C8:B2:F1:FC:B7:E2:FD
            X509v3 Authority Key Identifier:
                keyid:CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:bf:e6:c5:fc:31:64:9d:7c:8a:df:88:c9:52:42:59:86:d4:
         8e:76:35:43:b4:32:8b:bc:7f:c6:d2:87:e5:d3:79:c7:19:af:
         ee:cf:99:c2:7e:f5:2c:e1:51:94:22:94:b2:39:dc:c3:09:18:
         2d:23:94:65:a3:a0:2d:cc:d6:31:d8:73:4e:08:42:45:76:37:
         bc:1f:bc:f4:bb:44:dc:a8:0a:88:a3:a1:30:fa:5f:b3:67:96:
         52:18:bf:6e:31:70:f3:44:6e:c5:7d:2a:51:f5:ec:df:86:4f:
         f8:50:fc:2e:ee:06:83:e4:f0:84:d3:04:df:ff:13:65:27:c1:
         5c:00:27:66:e3:c7:e9:de:20:60:a9:6b:44:cc:8c:22:d6:db:
         c6:7a:0b:a4:41:be:fd:5b:d1:4d:4d:9d:41:a3:61:68:54:8c:
         c4:09:24:64:f0:5c:ea:f9:0f:bd:18:4c:a1:f5:32:da:7e:18:
         5d:3c:5b:de:3d:90:24:40:b5:cf:a1:fe:7d:14:5b:0f:b3:e0:
         73:50:62:73:4d:2c:e9:81:f1:1c:f8:f8:c7:f3:a4:ac:48:67:
         b9:46:4f:76:a1:02:22:98:a0:50:61:69:ee:57:11:53:04:22:
         7d:d8:d6:44:35:fc:a6:a2:09:c5:c3:bc:85:c8:a0:5c:61:10:
         6e:0f:23:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICETYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZERDYxMTAvBgNVBAUTKENBODNENDNFNUE1RTU5Qzc3NTlCMUI5QjJGQkQ5OEE5
NDdERkQzQkMwHhcNMjYwMzI2MTcxNjA3WhcNMjYwNDAyMTcxNjA3WjAYMRYwFAYD
VQQDEw02OWM1NjlkNy01ZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAol5li9D1fcicyIQGZ/bUjZtZuUtXv+bn0hzQpKmKS3WrPz5i37vELwcHKtNv
FaDe5U53XT/FOGNCvJxbRHuovmIamuB/hAkcKWiv3eT9jYaJcSxhpC/W2wRx7c2q
pN15XSCxvV+eNtk/FLtW5QOZi0k0urbwkKLP7d2CKFA49I2LH0430AvufAyuM+eR
ONQr/p3ETpS7YQS+ifC+9S4NKKhTiubVoe3NwY9MKYdjxGDFPxMH2rsttGD5gqMe
TW/f586xvx/C+F1rvHB0ztAtzDGBBf2YOfQeJgsQ/HTE/DtY4oXqP+3Jjfi7+Zc9
itqLgImyywFjZR1hjinuD82SSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIg/vdRo
HEatgcvTE2zIsvH8t+L9MB8GA1UdIwQYMBaAFMqD1D5aXlnHdZsbmy+9mKlH39O8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9ERjM4OTU1RTNC
MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi95b1BVUGxwZVdjZDFteHViTDcyWXFVZmYw
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lvUFVQbHBlV2NkMW14dWJMNzJZcVVmZjA3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkRENi9ERjM4OTU1RTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi95b1BVUGxwZVdj
ZDFteHViTDcyWXFVZmYwN3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASr/mxfwxZJ18it+IyVJCWYbUjnY1Q7Qyi7x/xtKH5dN5xxmv7s+Zwn71LOFR
lCKUsjncwwkYLSOUZaOgLczWMdhzTghCRXY3vB+89LtE3KgKiKOhMPpfs2eWUhi/
bjFw80RuxX0qUfXs34ZP+FD8Lu4Gg+TwhNME3/8TZSfBXAAnZuPH6d4gYKlrRMyM
ItbbxnoLpEG+/VvRTU2dQaNhaFSMxAkkZPBc6vkPvRhMofUy2n4YXTxb3j2QJEC1
z6H+fRRbD7Pgc1Bic00s6YHxHPj4x/OkrEhnuUZPdqECIpigUGFp7lcRUwQifdjW
RDX8pqIJxcO8hcigXGEQbg8jrw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:53 2026 by rpki-client