Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
File:                     yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json)
Hash identifier:          ZeBgVjoy++mVHnlTrzcMf9Gjb89qxoSfWCaiQv79XRU=
Subject key identifier:   9E:82:94:8B:7C:09:6B:50:96:5B:C3:70:70:D2:05:E8:4D:E2:7B:BF
Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91
Certificate issuer:       /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
Certificate serial:       0208
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
Manifest number:          01FE
Signing time:             Wed 25 Mar 2026 02:31:42 +0000
Manifest this update:     Wed 25 Mar 2026 02:31:42 +0000
Manifest next update:     Wed 01 Apr 2026 02:31:42 +0000
Files and hashes:         1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: jZo2NsoEqioOy5POHwHz8axvYJojotcsnptGW8jNSDM=)
                          2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: rQ+1OcyjHezWFqWYZ65A+pce2X8sBRkVZ+HRYo38KSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl
                          rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520 (0x208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162969, serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
        Validity
            Not Before: Mar 25 02:31:42 2026 GMT
            Not After : Apr  1 02:31:42 2026 GMT
        Subject: CN=69c3490e-e818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:eb:e0:28:0e:7a:fd:58:ef:ae:7b:74:55:
                    eb:3f:24:1b:50:41:33:53:ed:4a:e5:6a:8d:ac:2d:
                    81:4a:6b:a9:1f:a5:a6:66:2d:fa:50:ec:14:07:58:
                    aa:f1:91:b0:78:bb:f5:b9:2f:2e:ae:c5:a3:63:06:
                    a8:aa:86:c1:8d:d6:01:60:0b:0e:db:53:98:b8:9f:
                    00:a7:d6:d8:db:98:c7:6d:da:f6:b2:9a:b9:72:52:
                    ff:b6:f5:4c:91:af:02:3c:d4:6f:87:93:d0:78:d2:
                    14:d7:64:e9:63:94:17:9b:e6:ed:bf:90:9d:78:6c:
                    b0:c9:c0:a5:4e:b4:98:97:ff:26:a5:f7:5d:b4:88:
                    98:53:b1:51:c0:f2:f8:f0:02:61:e2:9b:ac:da:39:
                    66:19:50:90:df:52:4a:bb:b2:f7:60:57:93:bc:bc:
                    0b:0c:dc:c1:14:64:3d:57:cd:50:67:0b:49:4e:44:
                    07:bb:a8:4b:57:c1:1c:32:a8:19:74:26:92:5b:cb:
                    b9:2f:bb:83:ce:e6:21:6e:4b:93:6d:d5:bf:8b:6b:
                    37:a3:5e:08:63:11:8a:b5:a2:b1:58:31:a1:bb:db:
                    0a:46:06:2b:d0:9f:d2:16:fc:5c:78:27:06:78:bb:
                    1b:d3:c8:f3:8c:8e:6c:f2:fd:61:b5:d7:6c:c8:2e:
                    ed:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:82:94:8B:7C:09:6B:50:96:5B:C3:70:70:D2:05:E8:4D:E2:7B:BF
            X509v3 Authority Key Identifier:
                keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c2:6f:67:b7:0b:af:75:b8:1b:cf:f4:02:77:03:53:fe:4e:
         44:c2:bb:c2:3a:27:0c:47:86:54:21:13:de:70:f9:85:11:f1:
         29:9f:3e:25:64:1a:6f:89:91:e6:f7:ff:a6:ee:52:7c:91:ca:
         16:e4:d3:b0:23:2c:88:ba:63:8c:0a:d0:ef:3a:2b:04:a8:3b:
         7b:5b:58:26:71:85:d4:3a:2d:37:02:f1:68:f2:19:38:22:c2:
         64:7c:2d:e6:91:17:f3:cb:f2:e8:6a:29:a4:cb:ca:1b:78:bf:
         41:b6:32:80:5c:1f:ff:16:d5:a8:e6:b7:0e:64:ba:a6:a2:ef:
         f7:9b:d0:b6:be:4a:ae:17:5d:87:a9:e5:36:24:24:e4:52:f7:
         93:4a:9c:0b:2d:c6:6a:98:69:e9:6f:d9:25:40:f8:82:18:6d:
         c5:72:8e:c2:f1:8c:92:a4:e8:c5:ee:e1:2d:fb:22:8f:bc:6c:
         99:b2:ed:a6:27:05:96:13:4e:1a:32:09:ba:56:49:6b:09:14:
         0e:7e:5d:2f:e9:05:27:4f:e0:4a:93:33:67:f0:8c:d6:48:8a:
         a9:10:03:7d:d3:eb:e7:3f:9d:d3:16:7c:4e:0d:19:cb:58:1b:
         67:98:89:a4:76:6d:fe:38:f3:ef:2a:19:9d:79:af:a0:65:48:
         87:0b:d5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:59:25 2026 by rpki-client