Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft
File:                     YlWvHFTHD2B02LCsoatcuHg4dic.mft (raw, json)
Hash identifier:          PwtyVdLpMpc4g0YFYBUwirI/jJaUFkUfcWstWYz1RAg=
Subject key identifier:   CD:AE:3F:B8:34:E8:58:C2:73:5C:8A:B1:80:EB:8B:DE:6A:D9:6B:D9
Authority key identifier: 62:55:AF:1C:54:C7:0F:60:74:D8:B0:AC:A1:AB:5C:B8:78:38:76:27
Certificate issuer:       /CN=A9148CCE/serialNumber=6255AF1C54C70F6074D8B0ACA1AB5CB878387627
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft
Manifest number:          8F
Signing time:             Wed 25 Mar 2026 06:43:16 +0000
Manifest this update:     Wed 25 Mar 2026 06:43:16 +0000
Manifest next update:     Wed 01 Apr 2026 06:43:16 +0000
Files and hashes:         1: YlWvHFTHD2B02LCsoatcuHg4dic.crl (hash: 5l/0WAA5H4wnXhKfd9Ax+zZIwWMdYa2Rf16S5vXHoFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.crl
                          rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148CCE, serialNumber=6255AF1C54C70F6074D8B0ACA1AB5CB878387627
        Validity
            Not Before: Mar 25 06:43:16 2026 GMT
            Not After : Apr  1 06:43:16 2026 GMT
        Subject: CN=69c38404-44d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:21:8c:78:8a:43:6b:b6:96:3f:2a:47:31:9a:
                    f9:9c:c6:79:30:18:82:be:f2:24:ff:36:6b:d9:71:
                    ce:ed:ed:3c:dc:8e:c8:22:7d:2e:76:8d:d6:98:6a:
                    2f:a5:18:3f:22:22:75:eb:0e:35:05:ef:cb:f5:2a:
                    92:aa:1c:16:92:9b:3f:45:f3:73:e5:a4:67:08:99:
                    39:4d:d7:df:4a:64:44:23:54:f8:d3:c4:f4:a4:63:
                    88:b2:4f:89:1e:7b:8b:7c:f2:1c:cb:52:e2:22:43:
                    af:e4:11:42:bc:de:32:f3:e7:c4:58:0b:66:26:8f:
                    90:a1:be:71:d5:40:3d:92:37:4a:d7:c6:06:39:39:
                    e7:8e:45:fa:4e:0c:a9:0b:9a:3d:ea:dd:c3:da:06:
                    02:15:95:37:48:03:84:75:46:81:13:c4:a8:39:da:
                    ef:5d:be:7b:4b:d1:ba:0d:d0:ae:47:3e:8d:ad:f0:
                    2b:61:05:65:cc:fa:f1:7e:6c:c7:a5:1c:58:77:64:
                    da:c4:94:0c:56:e7:02:ca:97:e1:99:d4:77:70:cb:
                    ea:fe:e3:68:52:ee:45:93:d9:bf:3b:8f:88:69:55:
                    3f:85:1a:dd:f6:47:e2:4b:81:6a:88:c0:b9:bd:7c:
                    7f:28:84:9b:5b:ac:9d:a2:a3:72:ff:9d:db:9b:32:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AE:3F:B8:34:E8:58:C2:73:5C:8A:B1:80:EB:8B:DE:6A:D9:6B:D9
            X509v3 Authority Key Identifier:
                keyid:62:55:AF:1C:54:C7:0F:60:74:D8:B0:AC:A1:AB:5C:B8:78:38:76:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a0:59:a8:4a:07:70:e4:d7:45:10:cb:7d:82:84:4c:4d:e8:
         ef:d4:83:cc:17:7c:3d:15:1d:8c:fb:0d:a7:3d:3b:df:08:9b:
         c0:e9:2b:3a:8b:b6:a9:2d:50:92:b6:48:bd:ab:8b:b9:81:55:
         82:b4:86:2e:ed:8a:56:ab:59:71:6f:d2:78:91:2c:f2:a2:38:
         47:9d:6f:b3:77:4d:c8:ff:f8:d1:0b:f9:11:9b:41:e5:c8:53:
         4e:b2:59:56:c6:65:3b:c1:72:62:57:0c:5d:38:f5:b8:61:9f:
         ae:97:a4:d9:07:58:7e:74:76:d4:78:23:97:9a:2d:b1:f9:7e:
         45:bf:82:6d:db:8e:30:24:19:89:12:be:9a:92:4b:4c:27:f6:
         6f:be:48:bd:62:e1:5d:c2:a1:66:a6:63:4f:b9:8c:e2:42:1c:
         25:77:bf:a4:73:7a:ee:78:01:04:b8:ab:c3:0f:0d:01:54:e7:
         61:b1:18:19:70:87:72:7d:2c:d6:9e:0e:28:99:07:03:8d:ff:
         dc:2f:31:93:36:69:00:d6:5b:60:1b:b6:58:c4:4f:4d:ff:60:
         87:58:da:86:d7:84:83:19:1d:cd:b7:56:0f:80:46:45:81:ca:
         db:57:7e:c9:c4:d3:8a:a9:80:83:75:9e:fe:f5:f5:2d:b9:ec:
         e7:85:20:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:59 2026 by rpki-client