Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
File:                     y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json)
Hash identifier:          hGhKBYRk1PYh8JE+z63SXL+1/23OYBPHmB/TbILcWso=
Subject key identifier:   8E:D0:C7:60:53:E6:E1:BC:7C:88:70:ED:34:BA:6A:CF:B7:96:7F:B9
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Certificate issuer:       /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial:       017E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
Manifest number:          0166
Signing time:             Wed 25 Mar 2026 04:14:52 +0000
Manifest this update:     Wed 25 Mar 2026 04:14:51 +0000
Manifest next update:     Wed 01 Apr 2026 04:14:51 +0000
Files and hashes:         1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: Cc3R8oKIIPbVtn84rc+lpr+Lw9W3O2BvBZ+RAKU8ZXg=)
                          2: AF27640226FA11F0B0383240C4F9AE02.roa (hash: vpOc+3kPV6Pm6+6TDvDUsWTnZWPzQSBq8LombYK9VIY=)
                          3: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: W/2vjJp/ag3H7mSzG2Tr/h0kvrzsLkkzvWHa8WaLTtU=)
                          4: 24D519F226FA11F0B737393FC4F9AE02.roa (hash: YOuhg57dpyAHyHYCyC+N5mtXIsEkAz+fzXjtzYd+ceI=)
                          5: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: 4hSO5GJztFmc2Bjlelb4M86yndIsa9VSTZjFpa5DDCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
                          rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
        Validity
            Not Before: Mar 25 04:14:51 2026 GMT
            Not After : Apr  1 04:14:51 2026 GMT
        Subject: CN=69c3613c-f378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:55:b8:30:c0:e6:19:87:60:97:ee:e3:44:
                    cf:06:75:63:0a:63:91:7f:7d:55:18:4a:eb:35:41:
                    af:5c:90:13:96:2c:c7:23:cd:30:cd:44:50:6b:23:
                    1f:f0:ea:b3:52:b5:23:b9:b5:2f:56:c7:34:f7:60:
                    83:27:97:9e:93:55:65:6e:89:f4:87:18:93:ef:93:
                    17:e9:a6:7a:d0:5b:10:7f:ec:2f:d8:65:25:0b:75:
                    7f:5c:26:5b:0f:85:fb:6a:33:3c:b1:92:10:ea:9a:
                    f6:44:e3:f2:4a:df:2e:08:78:5f:a6:65:65:26:42:
                    16:11:b2:01:3f:2f:4e:15:bb:1d:78:6a:3d:5e:82:
                    1e:cf:df:eb:01:79:67:15:a4:0c:8c:b0:6a:17:94:
                    4f:32:58:ce:4d:89:f4:f5:3b:e7:75:a0:05:5c:52:
                    30:c8:9e:32:c3:22:bd:b3:9f:4c:c0:5b:74:a0:ac:
                    3c:ca:59:47:1f:a7:51:3d:c4:2c:67:4f:26:7a:ed:
                    77:a7:96:b5:7e:f6:96:e7:a1:a2:0f:9e:ec:67:ce:
                    83:86:e7:97:0c:82:a9:7f:03:ee:2e:1f:98:9f:58:
                    c9:f5:a2:1f:75:75:8c:25:35:32:2a:9b:3d:44:63:
                    a5:cd:a5:20:b8:fd:11:ac:cd:db:5e:60:7e:3f:61:
                    b2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D0:C7:60:53:E6:E1:BC:7C:88:70:ED:34:BA:6A:CF:B7:96:7F:B9
            X509v3 Authority Key Identifier:
                keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d2:7b:f8:da:62:1a:3b:29:18:1b:17:c3:7d:76:1e:1e:44:
         8f:3b:1b:16:64:0d:4e:cb:45:5c:16:14:2d:9a:70:db:01:df:
         2a:73:94:11:b3:06:1b:c6:70:bf:2e:32:14:95:33:ce:f2:1f:
         80:49:8b:5a:80:e6:e1:02:3b:91:75:b8:0c:f3:80:2c:a4:f6:
         69:5f:7a:da:a1:bc:c2:84:bc:df:f9:41:8b:6b:d2:23:42:92:
         38:d3:b5:fc:be:29:f8:e2:43:8d:42:8d:5a:fb:a8:ad:51:c9:
         a8:4d:37:3d:ef:4c:57:5e:aa:da:71:b9:49:c7:db:33:38:d1:
         02:0f:43:df:57:8a:36:83:19:a9:ea:7b:ac:6d:4a:b1:54:3f:
         ce:ce:b0:8a:c4:82:ef:e6:48:cd:bf:16:cf:b8:9c:11:4a:b8:
         cb:86:b7:a2:4d:60:78:70:7b:f7:30:bf:de:aa:86:5e:d2:3a:
         7b:fb:98:c0:3c:95:47:65:cb:b7:84:e8:a2:b5:62:39:8c:ce:
         c9:0e:00:7e:de:9f:74:1f:bd:55:37:7f:ce:87:40:28:da:c3:
         8c:12:6e:09:99:88:ed:49:f3:be:4a:ae:13:21:07:e1:1e:45:
         28:a8:fc:56:a9:ee:17:6f:e8:4d:4a:48:58:ce:44:52:d7:81:
         ff:87:8a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:15 2026 by rpki-client