Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
File:                     RYBbVYDVFRl9GmFa1myLnUhU9eo.mft (raw, json)
Hash identifier:          zMjwkZt7cSfiOfyAKzkdIYi8pld73HcDyrDh+wmwt8E=
Subject key identifier:   E7:D1:17:BA:53:30:D6:C8:29:04:19:9E:38:D3:23:3D:94:6B:34:A6
Authority key identifier: 45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA
Certificate issuer:       /CN=A91589E7/serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
Certificate serial:       1884
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
Manifest number:          1879
Signing time:             Tue 24 Mar 2026 16:24:38 +0000
Manifest this update:     Tue 24 Mar 2026 16:24:37 +0000
Manifest next update:     Tue 31 Mar 2026 16:24:37 +0000
Files and hashes:         1: RYBbVYDVFRl9GmFa1myLnUhU9eo.crl (hash: mKq/KchMN1m3HtsGNoNnb5xDav/vI6Rcw7i2Ee71s0k=)
                          2: 94A1F97A369711EA866E381CC4F9AE02.roa (hash: 6HQUJT9HfaQ0kHLipfm5EZcRoS4c3RMqyseCSnA5uo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl
                          rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6276 (0x1884)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91589E7, serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
        Validity
            Not Before: Mar 24 16:24:37 2026 GMT
            Not After : Mar 31 16:24:37 2026 GMT
        Subject: CN=69c2bac6-2258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8c:e9:bc:82:03:46:12:c4:5e:b6:5b:d7:66:
                    c7:cf:6c:1f:71:bd:be:a6:1d:6d:2c:16:ae:61:37:
                    a1:7f:9e:3d:08:c5:24:a7:d8:a7:01:52:df:b2:e5:
                    07:d5:7b:da:d5:8a:4b:16:fa:1c:30:ec:e3:6a:4d:
                    94:59:69:ce:4b:6b:a9:69:1b:35:63:4e:aa:57:08:
                    24:38:dd:55:88:81:3b:e1:e1:01:b4:db:8c:42:1b:
                    8a:44:b8:91:47:61:9d:41:25:c5:0a:74:d5:39:8d:
                    8f:3e:f1:bc:b7:e1:19:7b:23:0c:5b:4b:dc:c0:d0:
                    a6:93:39:08:7f:ff:f4:c9:17:dd:a2:9b:a6:57:d5:
                    16:29:79:c3:bf:88:fa:bc:1f:39:f8:49:58:82:fc:
                    9b:fc:b0:ac:9a:66:f7:26:81:53:a8:91:4a:8a:56:
                    68:a6:5b:fa:f8:12:20:31:10:03:fe:e2:6e:06:50:
                    9f:9d:50:b2:54:8f:0c:b9:40:8b:1d:fc:05:a3:d7:
                    d7:41:64:89:75:41:c8:3c:b6:22:ed:a6:3c:42:b0:
                    55:c3:6c:3c:bd:d5:22:cf:eb:85:e9:dc:d1:a1:29:
                    6b:45:3d:0d:88:e3:09:58:e5:ee:26:2a:e7:45:46:
                    00:fb:8e:6b:dd:91:97:35:20:44:6d:6a:65:07:2f:
                    68:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D1:17:BA:53:30:D6:C8:29:04:19:9E:38:D3:23:3D:94:6B:34:A6
            X509v3 Authority Key Identifier:
                keyid:45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:99:8e:0b:a0:fa:93:47:d4:8b:b3:55:28:59:46:a9:7a:c1:
         c0:8e:d5:71:14:c5:c3:46:21:cf:3a:6e:25:d8:ae:d3:95:87:
         67:ec:53:cc:0b:87:1e:a4:6b:5f:69:ce:87:0a:a4:dc:70:86:
         32:40:ea:23:ee:1c:51:bc:a5:2b:a1:2a:fe:1d:ed:5d:37:ff:
         31:5f:b8:fd:07:77:20:23:5a:49:c5:19:de:2c:80:b3:c6:80:
         45:e8:58:3d:3f:00:b9:4d:3a:42:9f:1f:2d:38:1c:9a:71:68:
         af:3f:b3:ff:3e:3a:58:ce:b7:69:87:b4:bd:7e:57:54:19:05:
         49:06:72:32:c8:24:7f:7c:7c:96:2a:d8:05:41:bc:2e:61:44:
         ba:8b:c7:61:a4:fa:8d:90:60:c6:08:6e:ef:2f:31:62:81:37:
         4d:25:ee:39:a9:f1:b6:2e:e5:a0:d9:bc:32:36:d3:1e:d9:bd:
         f6:50:b4:ff:53:8b:bf:e2:9b:3d:af:b5:ad:ec:7f:45:1d:6e:
         ae:4f:17:23:6e:0e:08:a2:00:d1:75:98:2d:c9:6f:25:8d:8c:
         d5:29:59:3b:d2:49:3a:31:4e:06:09:fa:a6:7c:7f:14:bc:1f:
         47:5c:a8:9a:df:79:0a:5f:c5:d0:7c:3d:5f:63:08:3c:7c:b5:
         19:8c:13:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:39 2026 by rpki-client