Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
File:                     yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json)
Hash identifier:          ILqC6c8oaUqw5mXM5s0vuvS3qB9tA/5arJLVm6VtTrs=
Subject key identifier:   E6:45:E8:04:B4:B4:7B:1D:2A:0C:89:6F:10:8D:A4:68:BA:ED:55:50
Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
Certificate issuer:       /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Certificate serial:       0E47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
Manifest number:          0E2C
Signing time:             Tue 24 Mar 2026 17:40:22 +0000
Manifest this update:     Tue 24 Mar 2026 17:40:21 +0000
Manifest next update:     Tue 31 Mar 2026 17:40:21 +0000
Files and hashes:         1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: v/RLtb2avF+9KGoOYqqMaVUJrENxAlYo7o/XMgcP8ic=)
                          2: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: tk96VxBbpWdjYmc5SF84zVk0NfFSbTDNVAWRkR1LXZY=)
                          3: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: rao4FTEGX/zW0+huzRC0qNfwXpqPe2ob+2j+XfZyiN0=)
                          4: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: QnTisy237EcVvBJ9011A1rJ4E+fXkfCawvsS6RPcKIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
                          rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:40:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3655 (0xe47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
        Validity
            Not Before: Mar 24 17:40:21 2026 GMT
            Not After : Mar 31 17:40:21 2026 GMT
        Subject: CN=69c2cc86-9a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6d:cc:49:25:cc:f3:f7:5c:d3:f7:e2:cb:60:
                    66:f8:40:52:62:4f:5f:ac:5a:6f:fd:0a:3f:aa:8e:
                    ed:90:f9:c2:4f:d1:12:91:70:c4:52:d6:55:40:94:
                    2f:cc:5b:20:7d:57:cc:a5:35:af:b3:97:af:9e:7c:
                    3b:06:d9:4e:ff:e3:ac:08:16:a9:cd:94:20:4a:49:
                    65:2c:fd:57:a7:50:9e:12:29:d4:f1:a4:f2:b1:73:
                    16:0c:50:0a:9a:e4:d9:2e:23:d7:a9:a8:dd:d4:5d:
                    bf:f0:05:bf:66:c8:16:24:b9:f5:41:90:4d:88:f9:
                    f7:47:3f:75:f2:2c:08:cd:c5:b4:21:87:8a:3e:8f:
                    13:55:f0:b3:da:b2:10:04:13:07:11:b3:75:7a:0b:
                    cf:6f:50:08:b5:8e:bb:c0:df:40:e8:15:3c:06:d8:
                    bf:73:07:22:13:fc:c4:4b:90:be:e8:8a:dc:2b:ec:
                    24:dc:69:de:a9:b5:41:1d:9d:a8:0a:49:29:01:37:
                    f1:34:78:8d:9e:d0:11:49:fe:cf:b9:23:fb:39:d7:
                    ac:5e:44:f5:a8:de:dd:c9:d4:2a:4f:90:d4:1b:fc:
                    2d:46:76:1c:b3:62:d4:37:67:55:73:c1:10:8b:96:
                    da:8f:d0:eb:32:5b:18:18:89:7d:18:d7:3b:ae:5d:
                    ce:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:45:E8:04:B4:B4:7B:1D:2A:0C:89:6F:10:8D:A4:68:BA:ED:55:50
            X509v3 Authority Key Identifier:
                keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e9:70:9c:34:d2:74:97:fa:e3:51:e5:ce:32:5b:8d:b8:c1:
         df:00:19:b8:b6:8b:34:dc:04:f4:16:69:b0:85:14:b9:d9:f8:
         ba:72:3a:67:7f:f6:c9:1d:72:0f:2a:fa:9a:75:92:1c:0d:3d:
         cd:c8:2b:83:9b:65:97:0d:3b:b3:cc:12:2f:bf:1a:79:64:56:
         37:fb:f1:27:88:db:1f:74:3d:91:56:7f:2a:81:d5:d9:81:50:
         fa:b1:fe:dc:66:6d:fa:a1:11:40:a3:b2:f2:65:13:f5:f4:c6:
         6c:f6:72:a8:e9:90:b3:33:af:19:f8:5d:7e:27:e0:80:64:8e:
         1b:5c:34:0c:10:f4:24:27:da:62:6f:48:ba:6e:b5:d6:42:d4:
         c6:97:a1:f4:96:83:24:5c:da:17:2e:72:ad:36:5b:8a:af:33:
         df:ed:10:4a:ad:34:56:50:0e:4d:4d:fb:76:63:9e:8d:e1:92:
         11:8c:a0:9a:62:b3:65:5d:c0:8f:dc:7c:86:24:38:35:8c:b9:
         33:a6:01:64:bc:64:47:a1:22:6a:b0:94:7f:4e:a4:4e:ff:b7:
         25:b7:25:d0:0f:a0:01:7e:26:56:a7:0b:2b:7b:0c:de:23:9a:
         61:0f:d1:17:2f:c7:58:35:93:d1:fa:f9:38:14:82:11:cc:c0:
         97:a2:95:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:55 2026 by rpki-client