Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
File:                     YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json)
Hash identifier:          HHrTT21bgcBPrHWbZ8gCjnyvj3A6rA2h9x0JNzlU/gA=
Subject key identifier:   73:93:3E:21:9B:9F:DF:D6:2D:7D:86:49:02:A8:73:AD:C5:DD:22:13
Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E
Certificate issuer:       /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
Manifest number:          019E
Signing time:             Wed 25 Mar 2026 03:34:14 +0000
Manifest this update:     Wed 25 Mar 2026 03:34:13 +0000
Manifest next update:     Wed 01 Apr 2026 03:34:13 +0000
Files and hashes:         1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: f1S1fwtsayn0VrOkROiYJW2v3AP6cPXr8qDe8GXaEa0=)
                          2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: ExYQsL4DX6Hi4BKxNjsrHvE6gNcBGNmimGeGw2+s/0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl
                          rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:34:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
        Validity
            Not Before: Mar 25 03:34:13 2026 GMT
            Not After : Apr  1 03:34:13 2026 GMT
        Subject: CN=69c357b5-279c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:81:5f:99:bf:9e:21:0f:9b:63:aa:06:78:2b:
                    be:68:0b:66:ac:19:14:f3:7e:ce:0c:c9:0f:75:e0:
                    2e:8f:cf:9e:53:2c:af:da:57:7e:15:59:3a:aa:3a:
                    61:13:40:d4:6f:13:2b:d3:b2:69:68:99:d9:48:91:
                    2f:52:8a:7c:ff:50:ef:e0:95:51:03:36:6e:99:b5:
                    0f:91:ab:2a:e1:fc:3b:e7:b8:f5:a4:79:c9:dc:af:
                    ff:3e:2d:6e:28:3c:b2:22:62:82:d5:22:db:2a:6e:
                    39:71:32:b3:e1:49:b3:44:3a:c5:07:72:d1:fa:17:
                    92:3e:f0:1c:a6:bb:f7:74:a9:cc:6c:5c:85:72:7e:
                    e8:9e:0d:08:44:b6:d2:13:a5:99:67:4b:d7:c2:54:
                    0c:65:65:b7:ef:44:15:4e:9b:ca:67:bc:d2:52:61:
                    25:d3:b6:4b:01:9a:22:86:bf:21:15:3c:a5:37:9a:
                    13:da:e4:2b:6a:e5:26:2d:c1:a7:58:1e:c0:0d:df:
                    04:0b:34:0f:3a:21:ff:f1:b8:d5:93:15:d2:21:81:
                    64:78:0f:c4:fe:1a:f3:14:5a:5d:ca:d5:92:64:5f:
                    fd:24:18:08:51:b6:33:8c:59:96:ab:28:a1:54:04:
                    c4:04:b1:e2:ed:26:58:24:e8:69:08:d4:0b:9c:c7:
                    f2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:93:3E:21:9B:9F:DF:D6:2D:7D:86:49:02:A8:73:AD:C5:DD:22:13
            X509v3 Authority Key Identifier:
                keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:cb:b7:90:1d:1e:16:cf:d7:80:e5:28:04:07:b1:53:2f:dc:
         d2:e6:d9:15:5e:0a:3e:04:7d:5f:9c:8b:12:c6:32:f0:f3:6d:
         71:a0:d1:bc:ee:21:f6:06:47:53:5e:74:0d:9b:60:d7:47:75:
         59:cf:86:c3:22:c7:56:49:a6:a2:51:c4:bd:78:d2:37:10:df:
         61:52:31:aa:6c:0c:4e:9c:33:fe:6c:38:74:71:a4:1f:ef:42:
         c8:53:49:ef:76:40:9e:e6:f0:1f:d6:df:2c:a5:fe:50:ed:84:
         21:7c:90:aa:81:e5:74:e5:42:9b:70:33:5e:e6:e2:68:01:fc:
         2e:92:26:fb:6e:4b:db:3b:53:48:11:23:d2:d4:d8:d3:d2:6a:
         98:c1:e3:a2:e8:ba:31:de:48:7d:84:a2:5e:37:27:96:f2:19:
         c1:cf:91:39:c7:57:8a:39:ee:b7:0f:f1:73:63:a1:a3:98:57:
         fb:d0:8b:22:48:67:8e:e5:a0:14:2b:77:bf:a1:5c:12:61:6b:
         3f:88:cd:49:58:11:c3:08:7d:ed:c1:41:e6:4f:e3:33:24:b9:
         89:ad:17:89:82:26:8e:ff:a7:fe:02:c0:a6:9a:47:61:34:e5:
         de:7f:93:6b:cc:8d:b7:bb:51:f3:d4:e5:6a:51:42:1d:fe:39:
         ac:67:be:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:26 2026 by rpki-client