Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
File:                     zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json)
Hash identifier:          d0MmW3/Z7TwohSAThFnZ9nlVOWjbW5MUDI7C+WkreXU=
Subject key identifier:   71:79:88:DB:2B:A3:1E:D5:DF:71:F3:4D:75:CD:4D:67:1F:E3:55:EB
Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
Certificate issuer:       /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
Manifest number:          01BA
Signing time:             Wed 25 Mar 2026 03:17:55 +0000
Manifest this update:     Wed 25 Mar 2026 03:17:55 +0000
Manifest next update:     Wed 01 Apr 2026 03:17:55 +0000
Files and hashes:         1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: dDCXaqBV5ieFgaC7DYpQ5fUrHA9PRNZJbRk5BglQZX0=)
                          2: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: ARuPA5StUqswZMj5Q2BXw5Z0iKJJC2awoPAkKPCdInM=)
                          3: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: KXFtRkkFX0jxsfltHXamlZ+jG+IhfgzkLv0dS+9a8To=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
                          rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
        Validity
            Not Before: Mar 25 03:17:55 2026 GMT
            Not After : Apr  1 03:17:55 2026 GMT
        Subject: CN=69c353e3-1a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:82:44:1b:69:d8:41:ab:2b:7f:6a:80:9f:fe:
                    73:68:27:12:a9:28:aa:e2:62:b6:8a:9a:a0:7d:fc:
                    3d:b7:c0:4a:b4:44:16:7f:01:43:fd:b1:c3:a5:7e:
                    0d:fe:cb:01:cd:39:9d:17:5d:b0:c0:cc:4f:9c:2b:
                    87:2e:29:2d:8c:95:43:41:9c:71:f8:85:57:60:6c:
                    ff:ee:f6:08:c1:36:ed:97:54:cd:73:9c:45:e1:e6:
                    de:28:b9:7c:48:1e:da:c5:9c:2e:23:a3:7d:96:63:
                    41:4c:eb:b5:bb:f4:3a:df:ef:80:9f:94:5e:73:19:
                    b4:4c:ea:62:00:aa:17:d1:99:21:fe:bc:ff:99:de:
                    15:54:94:52:23:ea:22:71:df:bd:ae:0a:24:93:39:
                    42:6e:8a:18:d9:21:05:99:37:79:3c:76:e4:f8:a0:
                    82:fb:e3:4d:56:bb:90:da:d0:39:47:eb:4a:a3:2f:
                    5c:17:e3:a3:43:e2:3f:11:51:1f:34:6c:b7:19:91:
                    11:40:33:aa:40:7d:6a:5b:6a:98:f5:f2:47:42:a7:
                    64:d0:c3:aa:09:1e:b0:0c:d5:ac:86:58:82:11:c9:
                    b7:22:e8:13:9b:fe:6a:56:5c:a9:66:56:4b:48:c3:
                    e2:9d:2e:9c:25:72:02:b5:c0:27:0d:44:2a:27:a2:
                    d1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:79:88:DB:2B:A3:1E:D5:DF:71:F3:4D:75:CD:4D:67:1F:E3:55:EB
            X509v3 Authority Key Identifier:
                keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:bb:4a:c5:fc:36:46:94:ad:87:40:bc:ca:96:2e:a0:27:d0:
         53:7c:73:ba:04:de:b9:4e:15:44:95:08:9d:93:49:95:2c:74:
         3c:a2:33:58:d6:4b:31:93:d9:99:03:3f:e7:3e:08:a9:6a:35:
         5d:4c:89:39:19:f6:9c:1b:ac:8f:9e:c1:26:86:a7:15:e0:28:
         10:a1:82:6c:b9:00:cf:05:52:fe:85:a9:1d:fe:5b:49:40:53:
         05:16:ae:32:ee:ad:ea:c8:35:a0:cb:06:b7:77:44:b7:56:61:
         f3:72:e7:b4:c7:88:5a:1f:54:94:34:c3:5d:df:d2:d3:b8:dc:
         3e:de:c4:d6:93:11:fa:04:c8:b9:57:65:b8:ff:76:d4:a3:0f:
         33:b9:b6:89:03:e7:4e:01:58:f3:fa:47:da:54:ca:3e:62:0c:
         7a:f6:b5:5a:7f:9e:5a:f6:18:74:67:a3:ab:4e:ea:82:9e:89:
         a9:ad:87:d3:c3:64:a1:28:28:05:76:09:04:cf:63:5f:73:0d:
         32:36:1f:f6:81:ea:1a:3c:46:1f:fc:a9:1b:59:f1:de:27:22:
         90:d4:79:24:8e:98:a2:72:59:aa:29:6f:37:49:85:8c:c2:10:
         e1:91:33:58:30:70:5e:ec:2f:4f:de:00:70:20:3c:ae:1e:cc:
         17:3d:37:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:40 2026 by rpki-client