Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
File:                     YeT4YWtiQmYakffQErbNHkCTiQs.mft (raw, json)
Hash identifier:          +f+wup7ZLTakT2mWSZbBB2E4qSHL0zars6q/v5W81L4=
Subject key identifier:   9F:AA:ED:F2:83:6F:C1:01:B2:54:4A:97:32:2B:4F:D6:9C:14:44:A7
Authority key identifier: 61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B
Certificate issuer:       /CN=A91605D7/serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
Manifest number:          017C
Signing time:             Wed 25 Mar 2026 03:53:34 +0000
Manifest this update:     Wed 25 Mar 2026 03:53:34 +0000
Manifest next update:     Wed 01 Apr 2026 03:53:34 +0000
Files and hashes:         1: YeT4YWtiQmYakffQErbNHkCTiQs.crl (hash: D7V+Hm98vzvnoKhntbvEqpr0eevp+snJ6wWL9JsU34Q=)
                          2: EA46D7ECE57F11EE96F8FB39C4F9AE02.roa (hash: eGXhWTghID7LXCNSIEK8G8iUBL46dL5mXlz39bqNtkc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl
                          rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91605D7, serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
        Validity
            Not Before: Mar 25 03:53:34 2026 GMT
            Not After : Apr  1 03:53:34 2026 GMT
        Subject: CN=69c35c3e-9a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:ed:31:58:7d:df:4b:eb:d9:60:ab:d0:44:
                    88:02:cd:cc:5b:84:83:55:4d:2f:5a:4f:ce:fe:cd:
                    00:55:67:1e:09:e0:56:b8:05:61:bb:84:f5:6a:02:
                    ec:88:f2:59:61:66:52:ff:8e:55:f3:97:c3:90:d3:
                    14:60:5e:82:49:ac:4e:2d:e0:b3:d8:76:f6:af:48:
                    3a:0e:0d:f2:89:ff:58:85:06:66:6c:27:45:1f:1e:
                    8a:d3:68:67:71:7d:07:26:60:33:c5:3c:f9:3e:9b:
                    75:2c:08:7f:93:1c:dd:d0:2d:a6:a9:a6:ec:8c:8a:
                    7a:3f:a0:92:f3:1a:42:42:f1:0a:3f:ed:ee:b7:eb:
                    42:78:1b:fc:47:37:0b:53:53:ff:23:6b:1a:16:5f:
                    a7:a5:0f:8d:9a:e5:a3:87:62:37:68:70:3f:7b:74:
                    a0:c9:c8:70:d7:fd:0a:6b:20:b5:45:46:90:76:34:
                    14:de:6b:f2:3c:71:51:94:b0:23:f3:07:5e:c3:ee:
                    4d:9a:a7:ef:f9:55:7d:d4:97:f8:2a:e6:8a:a9:4c:
                    e0:f2:a8:a5:f8:17:76:9a:6a:71:04:bd:bf:c9:b7:
                    2c:ae:9e:63:75:98:77:b4:c8:2a:bf:52:a2:06:89:
                    63:09:b4:d3:8f:9c:f4:bc:05:1e:3a:8b:87:ca:e6:
                    12:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AA:ED:F2:83:6F:C1:01:B2:54:4A:97:32:2B:4F:D6:9C:14:44:A7
            X509v3 Authority Key Identifier:
                keyid:61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9b:e4:5e:f3:e7:c4:d3:71:27:a9:85:b0:86:44:17:69:d5:
         25:ad:34:5f:f1:a5:e9:10:46:4e:99:07:9b:a4:ea:19:0d:52:
         8e:19:58:12:85:08:94:c4:6e:79:a8:8c:6b:4c:32:ad:51:71:
         16:7a:78:54:2e:56:01:73:e7:77:fd:a5:54:2f:56:dd:71:2a:
         6d:64:b9:79:7d:c3:01:27:0c:e0:b2:01:ba:f8:40:43:fb:45:
         fc:10:5b:16:93:0b:95:b9:64:41:e1:5b:9d:78:90:23:dd:a0:
         b1:04:77:8c:0c:98:ef:4c:e5:7a:46:12:99:f4:23:e5:76:7d:
         95:50:0b:b4:c7:1f:6e:4d:de:8a:db:be:45:92:49:21:ec:ac:
         34:70:76:58:8c:5d:ce:98:63:31:93:d4:25:a7:ff:e0:06:a4:
         41:a3:cb:3f:33:bb:7d:23:f4:63:15:d9:14:ff:e8:8d:65:b3:
         44:db:24:de:a6:2f:cb:f9:ad:d8:45:a7:48:8e:42:bb:83:24:
         ac:08:48:21:17:8c:00:18:03:53:87:03:60:61:67:ef:a0:fc:
         21:a9:c6:26:c8:ea:32:66:d5:95:7e:49:c1:c8:87:3b:ef:d4:
         2b:1c:5b:7b:f4:4c:63:b6:e0:5b:2d:d8:2c:8f:1b:d2:eb:93:
         e3:7c:8e:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA1RDcxMTAvBgNVBAUTKDYxRTRGODYxNkI2MjQyNjYxQTkxRjdEMDEyQjZDRDFF
NDA5Mzg5MEIwHhcNMjYwMzI1MDM1MzM0WhcNMjYwNDAxMDM1MzM0WjAYMRYwFAYD
VQQDEw02OWMzNWMzZS05YTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzwjtMVh930vr2WCr0ESIAs3MW4SDVU0vWk/O/s0AVWceCeBWuAVhu4T1agLs
iPJZYWZS/45V85fDkNMUYF6CSaxOLeCz2Hb2r0g6Dg3yif9YhQZmbCdFHx6K02hn
cX0HJmAzxTz5Ppt1LAh/kxzd0C2mqabsjIp6P6CS8xpCQvEKP+3ut+tCeBv8RzcL
U1P/I2saFl+npQ+NmuWjh2I3aHA/e3Sgychw1/0KayC1RUaQdjQU3mvyPHFRlLAj
8wdew+5Nmqfv+VV91Jf4KuaKqUzg8qil+Bd2mmpxBL2/ybcsrp5jdZh3tMgqv1Ki
BoljCbTTj5z0vAUeOouHyuYSNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+q7fKD
b8EBslRKlzIrT9acFESnMB8GA1UdIwQYMBaAFGHk+GFrYkJmGpH30BK2zR5Ak4kL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDVENy8zQjUwRjEzMkU1
N0YxMUVFQUYxRDI5MUJDNEY5QUUwMi9ZZVQ0WVd0aVFtWWFrZmZRRXJiTkhrQ1Rp
UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1llVDRZV3RpUW1ZYWtmZlFFcmJOSGtDVGlRcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDVENy8zQjUwRjEzMkU1N0YxMUVFQUYxRDI5MUJDNEY5QUUwMi9ZZVQ0WVd0aVFt
WWFrZmZRRXJiTkhrQ1RpUXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYJvkXvPnxNNxJ6mFsIZEF2nVJa00X/Gl6RBGTpkHm6TqGQ1SjhlYEoUIlMRu
eaiMa0wyrVFxFnp4VC5WAXPnd/2lVC9W3XEqbWS5eX3DAScM4LIBuvhAQ/tF/BBb
FpMLlblkQeFbnXiQI92gsQR3jAyY70zlekYSmfQj5XZ9lVALtMcfbk3eitu+RZJJ
IeysNHB2WIxdzphjMZPUJaf/4AakQaPLPzO7fSP0YxXZFP/ojWWzRNsk3qYvy/mt
2EWnSI5Cu4MkrAhIIReMABgDU4cDYGFn76D8IanGJsjqMmbVlX5JwciHO+/UKxxb
e/RMY7bgWy3YLI8b0uuT43yOZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:09 2026 by rpki-client