Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
File:                     yT-PYPBn4kwb_PI7LPQivVhkvss.mft (raw, json)
Hash identifier:          EDyw7p8zFdl8uPtGdUHBMAL7ONS1ytEk8O/33Xdn4eM=
Subject key identifier:   DE:CC:06:1F:03:42:DE:B5:6F:2E:59:67:1D:30:90:F5:6E:00:C0:8E
Authority key identifier: C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB
Certificate issuer:       /CN=A915E4A4/serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
Manifest number:          73
Signing time:             Fri 27 Mar 2026 07:22:51 +0000
Manifest this update:     Fri 27 Mar 2026 07:22:50 +0000
Manifest next update:     Fri 03 Apr 2026 07:22:50 +0000
Files and hashes:         1: yT-PYPBn4kwb_PI7LPQivVhkvss.crl (hash: WxbInSkJbgvw1StQdfchCSyRBpIfSh2enR93nL65BUU=)
                          2: 7452F54C7D7D11F09C982A7CC4F9AE02.roa (hash: JrWQTIVZFI8a0pln7P+m0meftjgxZRSu/Rs2hLgG4ZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl
                          rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E4A4, serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB
        Validity
            Not Before: Mar 27 07:22:50 2026 GMT
            Not After : Apr  3 07:22:50 2026 GMT
        Subject: CN=69c6304b-aa72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fb:3d:f9:a0:08:7b:75:f8:4b:0d:05:78:6e:
                    e9:bb:f0:9c:4c:36:45:3b:72:67:58:87:b1:99:5f:
                    b0:41:bd:90:5f:68:7c:58:50:ca:df:af:f7:d6:dd:
                    2e:db:0d:f8:a1:b6:0e:10:35:ea:8e:c4:b2:e7:bf:
                    cb:50:db:42:93:cc:6c:07:71:e5:15:d1:e6:ba:c6:
                    b1:e3:2b:2b:81:fe:20:a4:23:da:bd:11:37:81:16:
                    18:94:d1:99:a1:96:77:45:7a:05:b8:20:7a:47:c2:
                    38:55:48:b3:14:3d:51:b1:28:3c:7f:2e:f5:e5:55:
                    75:5d:7c:6c:5d:55:de:c2:f6:f5:d0:25:eb:ba:32:
                    81:e9:4c:d2:2c:6e:df:d9:dd:66:6b:4a:5b:9f:43:
                    f2:31:c9:e8:05:fd:d9:a1:9c:3d:51:a6:b2:81:f0:
                    79:1f:36:f9:b3:7a:77:71:95:0a:08:50:a4:c1:6b:
                    77:93:be:0f:1d:9d:ab:a1:c4:7b:bc:d0:08:05:a7:
                    ee:e9:b3:2a:af:f9:ca:0e:ef:98:d1:23:57:3b:15:
                    ff:38:1d:eb:94:7a:5e:ef:b4:95:97:1f:99:74:f3:
                    9d:a8:63:b8:dc:64:b2:6f:67:c6:19:0c:3b:e2:31:
                    dd:4f:df:0f:bf:cd:d9:3f:80:f5:5f:78:7e:97:10:
                    05:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CC:06:1F:03:42:DE:B5:6F:2E:59:67:1D:30:90:F5:6E:00:C0:8E
            X509v3 Authority Key Identifier:
                keyid:C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d2:10:55:59:8a:df:e8:bd:08:59:d0:cf:ff:b3:4f:cd:03:
         22:4a:1f:3f:0e:fc:dc:7b:4a:24:ce:7a:04:f5:30:7c:46:f4:
         af:9f:0f:37:3c:ff:0e:37:5e:95:e6:94:6e:8d:ec:52:2a:ef:
         98:ee:39:e9:70:c0:7b:48:dc:9b:1c:2c:c4:6c:0b:15:a3:e8:
         33:9a:54:a1:74:db:ad:46:d9:49:18:82:9c:d6:5d:4c:8c:27:
         ec:15:58:58:47:54:9c:04:11:30:2f:76:19:3f:7d:4a:19:ef:
         24:c9:4d:da:50:d4:9e:a6:75:f5:56:d0:a7:c8:b3:87:8d:29:
         6b:3d:b3:3a:13:7a:76:73:bc:14:68:b2:36:a9:54:09:41:e4:
         bd:4e:0a:fa:e8:19:9b:02:fb:96:97:a0:97:c5:e9:e8:ea:2d:
         81:88:6b:df:ec:0e:14:43:ca:44:28:a8:61:61:99:53:7b:92:
         d6:fd:15:f9:67:3f:34:c7:0a:45:8d:df:7e:08:cd:28:b8:b2:
         d7:fd:0b:55:d5:74:c6:85:cd:3b:0a:99:11:1f:f7:9b:3d:6f:
         6c:81:0f:c5:f7:1b:b3:e8:9d:d9:69:77:98:ad:0c:02:f6:85:
         32:9e:1f:77:f2:63:c0:d4:2e:f8:36:f3:43:ce:da:a6:e9:4e:
         e3:62:4a:00
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RTRBNDExMC8GA1UEBRMoQzkzRjhGNjBGMDY3RTI0QzFCRkNGMjNCMkNGNDIyQkQ1
ODY0QkVDQjAeFw0yNjAzMjcwNzIyNTBaFw0yNjA0MDMwNzIyNTBaMBgxFjAUBgNV
BAMTDTY5YzYzMDRiLWFhNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDa+z35oAh7dfhLDQV4bum78JxMNkU7cmdYh7GZX7BBvZBfaHxYUMrfr/fW3S7b
Dfihtg4QNeqOxLLnv8tQ20KTzGwHceUV0ea6xrHjKyuB/iCkI9q9ETeBFhiU0Zmh
lndFegW4IHpHwjhVSLMUPVGxKDx/LvXlVXVdfGxdVd7C9vXQJeu6MoHpTNIsbt/Z
3WZrSlufQ/IxyegF/dmhnD1RprKB8HkfNvmzendxlQoIUKTBa3eTvg8dnauhxHu8
0AgFp+7psyqv+coO75jRI1c7Ff84HeuUel7vtJWXH5l0852oY7jcZLJvZ8YZDDvi
Md1P3w+/zdk/gPVfeH6XEAVrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3swGHwNC
3rVvLllnHTCQ9W4AwI4wHwYDVR0jBBgwFoAUyT+PYPBn4kwb/PI7LPQivVhkvssw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFNEE0L0VBQjE3QkY2N0Q3
QzExRjA5NkU1OTU3OUM0RjlBRTAyL3lULVBZUEJuNGt3Yl9QSTdMUFFpdlZoa3Zz
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveVQtUFlQQm40a3diX1BJN0xQUWl2VmhrdnNzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF
NEE0L0VBQjE3QkY2N0Q3QzExRjA5NkU1OTU3OUM0RjlBRTAyL3lULVBZUEJuNGt3
Yl9QSTdMUFFpdlZoa3Zzcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAL0hBVWYrf6L0IWdDP/7NPzQMiSh8/Dvzce0okznoE9TB8RvSvnw83PP8ON16V
5pRujexSKu+Y7jnpcMB7SNybHCzEbAsVo+gzmlShdNutRtlJGIKc1l1MjCfsFVhY
R1ScBBEwL3YZP31KGe8kyU3aUNSepnX1VtCnyLOHjSlrPbM6E3p2c7wUaLI2qVQJ
QeS9Tgr66BmbAvuWl6CXxeno6i2BiGvf7A4UQ8pEKKhhYZlTe5LW/RX5Zz80xwpF
jd9+CM0ouLLX/QtV1XTGhc07CpkRH/ebPW9sgQ/F9xuz6J3ZaXeYrQwC9oUynh93
8mPA1C74NvNDztqm6U7jYkoA
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:00 2026 by rpki-client