Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
File:                     yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json)
Hash identifier:          8l+Lv1MZpuUR2cadgSHA3LaD65kEQlW2Z3bMWNfcwjs=
Subject key identifier:   FC:7A:3A:BE:62:12:F8:88:59:5C:F9:F2:A0:B8:DF:EA:96:DC:7C:65
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Certificate issuer:       /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial:       083B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
Manifest number:          0830
Signing time:             Tue 24 Mar 2026 20:41:09 +0000
Manifest this update:     Tue 24 Mar 2026 20:41:08 +0000
Manifest next update:     Tue 31 Mar 2026 20:41:08 +0000
Files and hashes:         1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: gQFzpgSpQcYRk5fGWHrn6kTmjf9g04iMC77I2MH3c74=)
                          2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: zGD9lcUTmqWV8Ub5PXm3WZs7NlAXgc4Pjs1NPpumIiQ=)
                          3: E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa (hash: OlWC46i6lVGRyQNBF4VXZE/tYTQkG/ur7HJmGVnjsmE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
                          rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107 (0x83b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
        Validity
            Not Before: Mar 24 20:41:08 2026 GMT
            Not After : Mar 31 20:41:08 2026 GMT
        Subject: CN=69c2f6e5-a5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:bc:65:2a:4d:8d:fe:28:dc:a6:0e:e0:71:
                    8b:97:53:46:ef:a4:5a:49:f4:ce:c5:7d:01:9d:8c:
                    74:bf:52:36:91:e8:7e:cd:d9:61:8b:ec:a2:81:9b:
                    33:b3:99:61:88:2e:c6:04:fe:34:88:0c:84:80:74:
                    b3:50:e2:a1:96:be:bb:12:20:1d:a1:b3:de:1f:f1:
                    08:84:ca:69:51:c4:a4:98:d3:db:89:4e:52:d1:bb:
                    a5:e5:92:5d:5e:3c:d7:0e:bf:b6:70:bd:65:4c:10:
                    1d:0b:7f:70:1f:07:2e:5d:1c:6c:09:79:a1:a3:16:
                    16:4a:7d:cd:bf:65:cb:45:53:97:83:fe:e5:20:e8:
                    b6:ce:f7:71:d3:e4:f1:69:01:69:4e:f6:8d:24:43:
                    d4:ef:87:1d:23:be:a4:53:9f:b1:6f:ce:0e:b6:7d:
                    73:e8:1d:ad:90:68:da:70:43:75:67:7c:bf:8a:21:
                    f4:5d:2a:d4:90:02:b9:d4:ad:af:2b:88:09:00:6d:
                    9b:c0:fd:bc:83:a0:6b:e6:62:15:86:47:d3:63:da:
                    58:f0:ae:45:1f:b5:93:92:14:4a:06:05:ce:6c:49:
                    68:8f:8c:dd:a7:4b:9e:27:9b:4b:39:9e:82:fd:47:
                    71:8d:fc:e0:4d:cc:15:1d:f4:8a:cb:bb:87:5d:78:
                    0c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7A:3A:BE:62:12:F8:88:59:5C:F9:F2:A0:B8:DF:EA:96:DC:7C:65
            X509v3 Authority Key Identifier:
                keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:04:a6:79:10:3e:5f:47:a0:69:f1:44:ce:45:3b:5c:e5:9c:
         96:1e:45:e7:3f:b5:ff:82:93:66:f5:bf:da:60:ed:5e:a7:c1:
         e5:21:dd:e1:fe:8a:2d:87:ba:26:28:59:06:b9:ea:16:f4:63:
         02:0a:2b:6f:e8:2f:de:36:44:7b:ad:a7:66:35:d9:00:a1:34:
         bb:8b:d7:be:93:3e:75:41:91:c1:42:7c:6c:17:22:48:b9:2a:
         0e:a7:d8:7f:35:8c:f8:54:4d:0e:5b:1b:8b:61:09:aa:86:48:
         8e:ec:99:3f:c6:eb:79:25:10:70:a2:04:50:fe:70:ed:3d:6d:
         f8:d4:ec:0c:7e:97:c4:bd:51:ee:4f:fc:a1:ed:5a:7d:e9:9e:
         5b:f3:20:bd:6e:a4:c2:3d:5c:12:03:52:2a:06:3b:59:e4:35:
         16:03:f4:ee:17:96:ec:00:f9:5d:0f:7f:b4:24:c0:14:60:e2:
         f4:93:05:c7:02:93:7f:05:84:83:7f:5d:21:c7:72:e9:2d:d1:
         83:38:5e:91:1d:a2:42:c5:9b:97:e5:d7:44:fd:67:2d:ce:93:
         c8:39:2b:78:d9:19:82:b4:93:71:13:d7:66:74:6e:07:c3:51:
         8a:2c:b3:aa:55:f2:e2:e3:d9:cf:d4:32:bd:1a:64:ed:9b:a9:
         ab:f3:03:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:57 2026 by rpki-client