Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
File:                     YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft (raw, json)
Hash identifier:          sdPT0NN7WDy7cR1eYXUMB3uRc025fkaPsjgcjfLDhAA=
Subject key identifier:   2C:A1:55:74:49:87:7B:40:6E:32:B2:3E:49:CD:57:B8:41:40:BD:77
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       06A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
Manifest number:          0601
Signing time:             Tue 24 Mar 2026 22:45:07 +0000
Manifest this update:     Tue 24 Mar 2026 22:45:06 +0000
Manifest next update:     Tue 31 Mar 2026 22:45:06 +0000
Files and hashes:         1: YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl (hash: FAzzwdu/d/MibCDaOQfnDz+CNxq8vwX7fJSjLEl7+jo=)
                          2: 3F780E2A179211ECB303FF58C4F9AE02.roa (hash: mSIvH4Gi+T1y6gFOjB4Y+pWqnrIDj+Mx9XwrmpuQ8qw=)
                          3: 3BE907D6178411EC83735974C4F9AE02.roa (hash: tFk/h7QxdaaYpeNdRusqQ5yvBEm+neo77X+gkWKcJG0=)
                          4: 04545D1C9AB911ECBC6CFA20C4F9AE02.roa (hash: bfM/I9MI61wpx9SI9z0ncpfFzbqWQMVFRjvnxiVGThE=)
                          5: DA504F0E175911EC87322F85C4F9AE02.roa (hash: bC2UE2VmY1gflbaTcYGLmz6R86UeQbBi5GPFc7aGC20=)
                          6: 7DAE1400175111EC8D2A3722C4F9AE02.roa (hash: tX0MTPWA9P2CY1G2KCJQGGM6TFNQMY0kmhuwfNbndgE=)
                          7: D97BFEC0175911EC87322F85C4F9AE02.roa (hash: W217Cvl+a3RS3snx4LYy35dWortZRD2tZixavhdLGx8=)
                          8: C6B686020E7811EF85000B7BC4F9AE02.roa (hash: ZJmUX2G6Tl+kycQRHjPwdULRZJWUs4ScsOffcVitw8g=)
                          9: 16637998DB5311EE9F9F1F75C4F9AE02.roa (hash: 1+Pf4CxXczREzjqp7Ph5y8t73GX+ZHQlj5fHrRYlZ4o=)
                          10: 7E42E396175111EC8D2A3722C4F9AE02.roa (hash: 5SeDKnVW+Z2bZrOh/tUD/fazda7G0sNTdN9LtEAWN7E=)
                          11: 3B398B8A178411EC83735974C4F9AE02.roa (hash: jepYWPzCxGmh/GQlfw9G88MeUoi1KXNr+jBvdSKu2EU=)
                          12: DB208FD4175911EC87322F85C4F9AE02.roa (hash: cJTkfxanvIj+RM9OMhYOY3C3bXPLhNB/j9ZiLmWvJ4M=)
                          13: 1B31B0E4270E11EC97471F53C4F9AE02.roa (hash: IxcEdM3NtqIWpGs5CaLmmTvLz8ooYXKO4DZfm0izdno=)
                          14: 8293F5FC179711ECB7F7A075C4F9AE02.roa (hash: l3SoQw2Kbr40xk9JE2geXsImyws3yLJRcPxUIxNF/vg=)
                          15: 283A4D20174911EC896AD61BC4F9AE02.roa (hash: A8TFtA5rACeGqCDNmb9TtCXa4fYNuagT0rkCSS1kUpo=)
                          16: 3A9DF21A178411EC83735974C4F9AE02.roa (hash: wIbYsh/hItpf1FaU4uJEJakBW02mq1IFUdy9tNUpxj4=)
                          17: 7FCB16B6175111EC8D2A3722C4F9AE02.roa (hash: tT/fnjB2azP2c1Bes9KkfGycw+0VmrQqgMxit51iAYE=)
                          18: 27A1A5A2174911EC896AD61BC4F9AE02.roa (hash: zUix48EdQq0BIeEP+F00ihYlfB76GvYk5qHGU11xzgo=)
                          19: C74D18CE0E7811EF85000B7BC4F9AE02.roa (hash: q/oyJF+c7xMBWWu1hrOqXPzTS58cWYtyCiOvHXnwGqs=)
                          20: 7EF28CBA175111EC8D2A3722C4F9AE02.roa (hash: IhpgMXVhUYugw7nNSA1+ZnbHjLI9c5SxOlLFwueit3I=)
                          21: 20564D22DB5311EEA8BB3775C4F9AE02.roa (hash: uj2PDKgEvrFTp0bmqnaDNFQLwlcT8SaIHayTDM9beNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:45:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1705 (0x6a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Mar 24 22:45:06 2026 GMT
            Not After : Mar 31 22:45:06 2026 GMT
        Subject: CN=69c313f3-edfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:40:8b:6f:72:aa:3f:8a:fc:0b:f8:59:b9:5e:
                    4b:ca:02:b0:b9:16:77:f2:52:20:ec:cd:bc:0b:64:
                    f2:40:99:99:fd:48:fd:79:85:02:d8:9a:fe:5c:03:
                    e1:0b:fe:f4:7f:4b:6c:d9:25:4b:81:87:70:79:3f:
                    2b:80:52:69:62:2b:da:bc:e3:84:f1:df:3a:34:e3:
                    b8:3d:49:19:d1:34:43:f7:6a:aa:21:f2:65:f5:cf:
                    cf:27:e5:13:ca:8e:65:40:2b:a5:40:6d:55:33:a0:
                    85:f4:84:c8:9e:c7:fe:2d:34:ea:02:63:9e:b7:2c:
                    00:52:62:04:bf:dd:ac:2b:26:d0:b0:44:bb:65:2e:
                    9a:64:1a:30:80:41:b1:33:81:85:f9:40:42:28:22:
                    68:8a:0c:bf:a0:20:4f:9c:53:58:f9:a2:a8:82:c2:
                    2c:42:46:bc:00:76:07:85:ed:7a:a0:8e:05:7f:df:
                    71:7c:29:91:27:ba:07:ad:42:75:ea:c3:a3:76:bf:
                    cf:5d:70:fa:cc:e0:e5:24:85:10:fa:a9:f6:0d:3f:
                    28:71:9b:2a:20:50:fb:45:cc:05:4d:01:b2:27:34:
                    9d:40:b5:0b:54:b6:86:14:8f:65:f9:24:61:8a:e8:
                    8c:9d:da:3a:47:63:26:51:72:0d:88:1b:0e:63:3e:
                    d4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A1:55:74:49:87:7B:40:6E:32:B2:3E:49:CD:57:B8:41:40:BD:77
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d0:1f:9d:3d:12:02:50:18:f6:6c:fd:12:37:f5:8e:06:d9:
         ba:58:fb:04:9f:6c:eb:77:46:26:95:c1:8d:ee:be:b3:47:4f:
         cc:42:67:b4:0b:1e:f2:2d:44:a6:c2:c1:6b:34:91:41:00:2d:
         f2:05:04:2c:00:7f:ae:26:f9:a0:c8:d8:c4:88:c0:0a:9b:75:
         68:6a:e7:ff:1c:bf:ec:d7:92:0a:1a:f8:3d:40:11:ef:34:44:
         41:aa:85:6f:bd:56:0f:04:6a:66:24:ec:c4:6d:41:c2:e9:ec:
         c9:7d:4e:f9:7e:58:eb:f1:83:73:7a:90:82:01:67:dd:dc:a8:
         67:77:91:07:87:be:b7:af:b3:02:71:0c:3c:3a:56:01:e1:fd:
         d2:ff:4d:52:70:2f:81:96:78:c8:ca:2e:b6:ba:cc:ad:52:69:
         5b:2c:a0:7d:5b:0e:38:ad:db:86:32:64:eb:5b:b1:98:9d:e5:
         02:77:79:e5:7b:cf:8a:a8:f8:8f:fd:13:5b:a4:f3:fe:0d:89:
         4b:61:f0:42:a6:89:e8:2b:3c:ad:95:25:76:38:d3:e1:78:6e:
         e8:40:3e:9e:6f:a6:2a:27:f5:53:02:03:66:27:38:45:7e:82:
         dd:1b:a9:8e:5d:26:e8:ff:93:f9:18:ec:fb:61:ed:ec:29:30:
         7f:6a:46:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:51:39 2026 by rpki-client