Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
File:                     -Y3cNC9-J7aMoI09R8emmyaVXqE.mft (raw, json)
Hash identifier:          e49HHTj39Q24AWp4SCKQBi8iH16zOzr6td9rnsjwPhU=
Subject key identifier:   DA:0A:F1:49:9C:D2:92:31:35:DA:52:11:BE:5B:B3:70:AF:3B:FA:EC
Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1
Certificate issuer:       /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
Manifest number:          01E5
Signing time:             Wed 25 Mar 2026 02:56:55 +0000
Manifest this update:     Wed 25 Mar 2026 02:56:55 +0000
Manifest next update:     Wed 01 Apr 2026 02:56:55 +0000
Files and hashes:         1: -Y3cNC9-J7aMoI09R8emmyaVXqE.crl (hash: u3wQV9jfXhdeTfN78I9knw6o5u18yKnfcHFFTS5s26Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl
                          rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C68B, serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
        Validity
            Not Before: Mar 25 02:56:55 2026 GMT
            Not After : Apr  1 02:56:55 2026 GMT
        Subject: CN=69c34ef7-8bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:a3:b3:c5:2b:c9:15:da:4c:50:a0:13:70:
                    94:9a:2e:d0:3c:25:30:91:77:d9:7d:6a:7d:e6:ff:
                    0a:6f:3c:19:ec:6c:41:06:a3:e7:25:07:59:ef:8b:
                    06:5f:59:a4:67:82:ee:64:63:48:f3:4e:99:f2:5f:
                    68:08:e4:41:aa:23:dc:3e:91:87:35:c3:c5:9b:e0:
                    24:b2:55:66:34:55:86:46:61:41:b1:cd:58:59:e2:
                    b4:6c:b5:8c:fc:b0:f7:36:d6:61:08:5d:7a:cd:c3:
                    39:61:b1:8c:48:a2:b6:f9:bc:42:c5:0e:84:1f:48:
                    ea:e4:c0:52:18:f1:1f:79:fc:91:7d:09:db:b8:90:
                    e4:10:ef:06:59:f1:3a:88:c7:69:6c:c8:7c:1b:fa:
                    44:16:10:b4:9c:04:47:73:6d:fe:3c:e8:f3:ba:e9:
                    71:7e:4d:16:18:71:54:fa:0c:ed:bb:2a:a0:fe:d3:
                    06:49:bb:aa:e7:cb:cf:fc:e1:41:0c:cb:d6:7d:a7:
                    ce:f1:ab:35:28:3c:ff:f5:1a:23:6c:a2:cd:37:f6:
                    28:a2:c1:09:17:f5:ba:c0:b2:db:1d:b9:57:ae:5e:
                    39:d8:19:3e:98:7b:c4:37:5a:67:c0:d4:52:9b:8f:
                    5b:0f:4c:94:3c:41:b6:de:4b:42:37:4b:2f:6b:39:
                    08:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0A:F1:49:9C:D2:92:31:35:DA:52:11:BE:5B:B3:70:AF:3B:FA:EC
            X509v3 Authority Key Identifier:
                keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:57:9b:09:a3:ad:e9:76:ef:ac:44:04:2b:54:21:3c:e8:c8:
         df:d5:a8:df:f7:49:13:cf:97:c6:b8:fa:1f:8b:8d:3c:23:aa:
         02:30:a5:1b:c5:13:28:e2:29:df:52:c9:74:07:41:d9:d6:03:
         99:3d:0f:f2:85:83:ce:d6:69:65:58:b4:05:c5:37:a2:57:4c:
         6b:10:cb:17:0c:56:69:6b:ae:ca:83:0e:04:3e:e0:42:33:9f:
         bc:50:1c:f1:a3:c5:97:5f:1a:35:4b:84:b1:5a:e3:78:72:ef:
         f1:e6:9b:47:6f:0f:69:ea:64:3e:5f:ec:b4:35:ea:be:fc:7c:
         68:54:24:03:9e:0a:46:4d:cd:5a:3c:09:ce:64:96:72:28:c9:
         ce:86:60:aa:e4:e8:38:c2:88:c9:ad:4a:5e:91:c0:f6:71:27:
         09:6e:75:5a:d4:3f:31:6b:b9:04:f5:20:06:4c:55:5c:cb:e7:
         ba:78:18:93:fb:0c:0a:bc:02:8e:89:cc:2e:f3:4f:ee:8f:81:
         d6:9d:8d:bb:77:64:3b:9b:a3:7e:94:45:ad:65:ed:44:a8:79:
         e7:ad:44:de:d5:d6:9c:c3:7c:a8:6d:22:38:dd:08:8d:5d:45:
         cc:d3:80:f4:bc:ad:94:f8:ee:f7:12:7c:20:a5:ee:77:c3:4b:
         33:6a:3c:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M2OEIxMTAvBgNVBAUTKEY5OEREQzM0MkY3RTI3QjY4Q0EwOEQzRDQ3QzdBNjlC
MjY5NTVFQTEwHhcNMjYwMzI1MDI1NjU1WhcNMjYwNDAxMDI1NjU1WjAYMRYwFAYD
VQQDEw02OWMzNGVmNy04YmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqgKjs8UryRXaTFCgE3CUmi7QPCUwkXfZfWp95v8KbzwZ7GxBBqPnJQdZ74sG
X1mkZ4LuZGNI806Z8l9oCORBqiPcPpGHNcPFm+AkslVmNFWGRmFBsc1YWeK0bLWM
/LD3NtZhCF16zcM5YbGMSKK2+bxCxQ6EH0jq5MBSGPEfefyRfQnbuJDkEO8GWfE6
iMdpbMh8G/pEFhC0nARHc23+POjzuulxfk0WGHFU+gztuyqg/tMGSbuq58vP/OFB
DMvWfafO8as1KDz/9RojbKLNN/YoosEJF/W6wLLbHblXrl452Bk+mHvEN1pnwNRS
m49bD0yUPEG23ktCN0svazkIpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNoK8Umc
0pIxNdpSEb5bs3CvO/rsMB8GA1UdIwQYMBaAFPmN3DQvfie2jKCNPUfHppsmlV6h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzY4Qi80RTlDMUY5MDYy
RDExMUVFQUExQzg2NERDNEY5QUUwMi8tWTNjTkM5LUo3YU1vSTA5UjhlbW15YVZY
cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1ZM2NOQzktSjdhTW9JMDlSOGVtbXlhVlhxRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzY4Qi80RTlDMUY5MDYyRDExMUVFQUExQzg2NERDNEY5QUUwMi8tWTNjTkM5LUo3
YU1vSTA5UjhlbW15YVZYcUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgVebCaOt6XbvrEQEK1QhPOjI39Wo3/dJE8+Xxrj6H4uNPCOqAjClG8UTKOIp
31LJdAdB2dYDmT0P8oWDztZpZVi0BcU3oldMaxDLFwxWaWuuyoMOBD7gQjOfvFAc
8aPFl18aNUuEsVrjeHLv8eabR28PaepkPl/stDXqvvx8aFQkA54KRk3NWjwJzmSW
cijJzoZgquToOMKIya1KXpHA9nEnCW51WtQ/MWu5BPUgBkxVXMvnungYk/sMCrwC
jonMLvNP7o+B1p2Nu3dkO5ujfpRFrWXtRKh5561E3tXWnMN8qG0iON0IjV1FzNOA
9LytlPju9xJ8IKXud8NLM2o8TA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:22:03 2026 by rpki-client