Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
File:                     YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json)
Hash identifier:          nSZ8QHV8tbgqPyGKe3j3siZQqolc+q2I/sNqS64k1Ck=
Subject key identifier:   CB:05:06:87:42:B8:CE:0D:51:DD:06:F2:82:C4:AC:C4:01:CD:18:66
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Certificate issuer:       /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial:       04C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
Manifest number:          0493
Signing time:             Thu 26 Mar 2026 23:58:30 +0000
Manifest this update:     Thu 26 Mar 2026 23:58:30 +0000
Manifest next update:     Thu 02 Apr 2026 23:58:30 +0000
Files and hashes:         1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: 3Fbd5e07BrVhSQrAYQ2h9TvcNP3apbPDNF0vJDoonew=)
                          2: B283BDAACF7C11F084EB1044C4F9AE02.roa (hash: qM1jpngbGtLR2m4oUSpuCPTJ9nzvkY0kh4taVmX3HNk=)
                          3: 844EFBDA766C11EF8CE33A86C4F9AE02.roa (hash: rG8LFpWn8e5WNkUz41in8DUocZDaO5hxFfUN/rqb2XU=)
                          4: 260D3330758A11EFAE7A8A39C4F9AE02.roa (hash: 1u7MoOEqUAcZtaB8C3gY/ex2tSVz31yAb6iq9EUXHLo=)
                          5: ED1A0478799811EF8437F77EC4F9AE02.roa (hash: XqHC5rj+3s01yuYMUc/k58y/2zhhrKKsHAG9wb2CB0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
                          rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1220 (0x4c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
        Validity
            Not Before: Mar 26 23:58:30 2026 GMT
            Not After : Apr  2 23:58:30 2026 GMT
        Subject: CN=69c5c826-6d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:ac:b0:7c:48:2e:0f:34:32:dc:85:8d:64:
                    c7:e1:3b:e6:b2:55:22:e8:d6:9f:d8:1d:65:9e:47:
                    b5:5b:c4:94:ad:b6:26:d9:da:53:a2:6a:11:c6:29:
                    45:f5:a3:17:b7:db:cc:11:4d:80:a5:cc:5f:a0:f9:
                    34:c3:35:e9:65:f6:72:7b:e9:ed:1c:3a:d5:0f:4b:
                    76:b7:1a:48:7d:c9:a7:0f:58:c2:80:14:07:84:5e:
                    ba:8b:f7:80:1b:aa:3c:ff:3d:07:06:a1:7b:71:a5:
                    0f:1d:bc:d2:50:43:b2:5b:34:9e:01:79:61:d8:86:
                    cd:ce:cf:1a:6f:94:0c:47:31:fa:43:66:63:bf:51:
                    41:c1:fb:4b:30:b1:f5:21:9f:4b:79:9b:04:bf:91:
                    22:4f:c7:1a:e2:67:8b:66:9a:ba:56:bc:dc:67:30:
                    4c:04:31:f0:dc:6e:69:89:e9:c9:60:5f:88:4b:1f:
                    f1:06:e5:e6:fe:8f:f8:6e:95:8c:a5:c9:0c:26:f8:
                    3f:77:22:bd:ae:8d:34:94:ac:2e:35:f0:d9:08:3c:
                    76:dc:55:83:1a:8f:65:d7:81:c7:cd:34:79:73:22:
                    ef:6c:d5:ad:52:0f:90:96:cc:db:55:7d:35:74:fc:
                    ca:9f:7b:f7:b7:d1:3f:f3:13:da:89:ad:dd:8f:a5:
                    7e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:05:06:87:42:B8:CE:0D:51:DD:06:F2:82:C4:AC:C4:01:CD:18:66
            X509v3 Authority Key Identifier:
                keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:b2:26:9a:65:14:8b:9a:24:72:10:cb:d1:ce:1a:aa:08:78:
         ca:7e:f7:98:41:de:3d:2f:97:69:43:28:c8:32:29:15:74:ef:
         2f:6d:0a:0b:bd:0d:e9:12:bd:e7:a4:1d:f9:7f:62:a9:d5:ad:
         44:6d:71:21:d8:cd:f6:49:43:b9:c3:3b:ac:f3:bc:b1:03:27:
         1f:d2:04:76:e1:a7:3f:94:a4:b4:c6:4f:94:eb:4b:f1:a0:09:
         10:32:ae:df:23:61:56:aa:3d:e9:71:ce:90:43:5b:b4:36:9b:
         f7:23:d0:83:10:0e:25:6d:1d:3d:1f:b1:f7:26:4c:b1:05:8e:
         da:de:8b:1e:ee:5b:23:1c:d2:78:50:75:3a:65:38:06:40:1c:
         ee:6f:f6:6b:75:86:93:7f:b2:70:39:f3:79:32:39:02:41:d8:
         9c:b3:b3:3b:e5:38:df:f0:e5:53:5d:8c:a4:10:d1:99:16:db:
         b1:94:5a:c6:b7:bf:8b:d8:74:a1:ea:b7:89:38:a1:15:69:b9:
         06:34:eb:a9:e3:de:91:cf:82:c1:fe:4a:a7:0d:f7:67:de:e3:
         26:de:e6:81:e5:0c:af:12:82:5f:2e:8c:88:c8:07:2d:96:83:
         a0:80:81:d5:95:15:21:d6:4f:4f:0b:04:9a:e2:17:f1:bb:39:
         2b:50:b5:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjJFRTExMTAvBgNVBAUTKDYwNzZCRDBCQTREQjc5N0E3MkE2OEZFRkY5QkZCNTU4
QzQ0Mzk4QjIwHhcNMjYwMzI2MjM1ODMwWhcNMjYwNDAyMjM1ODMwWjAYMRYwFAYD
VQQDEw02OWM1YzgyNi02ZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs16ssHxILg80MtyFjWTH4TvmslUi6Naf2B1lnke1W8SUrbYm2dpTomoRxilF
9aMXt9vMEU2ApcxfoPk0wzXpZfZye+ntHDrVD0t2txpIfcmnD1jCgBQHhF66i/eA
G6o8/z0HBqF7caUPHbzSUEOyWzSeAXlh2IbNzs8ab5QMRzH6Q2Zjv1FBwftLMLH1
IZ9LeZsEv5EiT8ca4meLZpq6VrzcZzBMBDHw3G5pienJYF+ISx/xBuXm/o/4bpWM
pckMJvg/dyK9ro00lKwuNfDZCDx23FWDGo9l14HHzTR5cyLvbNWtUg+QlszbVX01
dPzKn3v3t9E/8xPaia3dj6V+nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMsFBodC
uM4NUd0G8oLErMQBzRhmMB8GA1UdIwQYMBaAFGB2vQuk23l6cqaP7/m/tVjEQ5iy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkVFMS83NTJENDJFODhG
RDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVYcHlwb192LWItMVdNUkRt
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lIYTlDNlRiZVhweXBvX3YtYi0xV01SRG1MSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MkVFMS83NTJENDJFODhGRDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVY
cHlwb192LWItMVdNUkRtTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxLImmmUUi5okchDL0c4aqgh4yn73mEHePS+XaUMoyDIpFXTvL20KC70N6RK9
56Qd+X9iqdWtRG1xIdjN9klDucM7rPO8sQMnH9IEduGnP5SktMZPlOtL8aAJEDKu
3yNhVqo96XHOkENbtDab9yPQgxAOJW0dPR+x9yZMsQWO2t6LHu5bIxzSeFB1OmU4
BkAc7m/2a3WGk3+ycDnzeTI5AkHYnLOzO+U43/DlU12MpBDRmRbbsZRaxre/i9h0
oeq3iTihFWm5BjTrqePekc+Cwf5Kpw33Z97jJt7mgeUMrxKCXy6MiMgHLZaDoICB
1ZUVIdZPTwsEmuIX8bs5K1C1QA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:59 2026 by rpki-client