Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft
File:                     yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft (raw, json)
Hash identifier:          OqQ2hWVb1cwaAicdVtn5xwW/Fo6XSD0BC9FL6wP0XAo=
Subject key identifier:   E4:E2:B9:EA:5F:87:86:79:75:F6:6E:E8:A8:F7:06:54:93:20:99:23
Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97
Certificate issuer:       /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597
Certificate serial:       021F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft
Manifest number:          0212
Signing time:             Fri 27 Mar 2026 02:31:44 +0000
Manifest this update:     Fri 27 Mar 2026 02:31:43 +0000
Manifest next update:     Fri 03 Apr 2026 02:31:43 +0000
Files and hashes:         1: yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl (hash: YOTHG+InWkWYcE38d9Z0KQHLPoedYV8/GsnHxd5ZUM4=)
                          2: CBECEF26736C11F0AB1C0331C4F9AE02.roa (hash: NSXDDAq8nX85x5kt9In+oT+8R1Iyp1p7SGrj1C1gVOY=)
                          3: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (hash: o7EjUV2YZchqIdy9iUxIZM/t/ml5aY2rZmcv+MlQwaA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl
                          rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597
        Validity
            Not Before: Mar 27 02:31:43 2026 GMT
            Not After : Apr  3 02:31:43 2026 GMT
        Subject: CN=69c5ec10-1bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:38:43:9f:a2:89:0a:a5:94:ce:1e:a5:fd:
                    1b:3d:35:c6:ca:60:32:3b:f8:06:2a:6a:58:b1:8e:
                    85:cb:62:45:8d:02:40:f6:39:31:5d:5e:af:ff:e9:
                    34:9b:71:27:1c:a8:ab:e7:54:a9:7c:42:2f:56:ac:
                    e0:77:03:ef:c9:92:52:c4:18:23:d8:c6:98:06:3e:
                    c6:e3:89:e3:3b:e3:c6:a4:75:de:fc:11:6e:a8:e9:
                    af:86:e7:fb:3c:1b:ef:b9:1e:07:48:48:7c:81:82:
                    3b:07:3e:6e:11:b8:00:fa:fb:96:2e:a8:44:1d:3b:
                    5e:26:f3:f9:47:d8:d7:fb:98:d8:91:69:5a:41:ae:
                    47:f8:29:cc:99:a7:e4:45:bc:04:09:5a:71:3c:e1:
                    f9:f5:48:da:d5:10:32:9d:68:6a:77:06:92:50:2c:
                    91:ec:8b:61:d9:48:fc:a2:a3:6a:92:28:f7:7d:af:
                    31:59:55:cd:03:96:ff:17:46:47:66:71:1b:1f:7c:
                    f4:08:42:28:b2:6b:44:85:a2:ad:8d:bf:82:04:65:
                    02:31:57:5f:98:6c:6c:82:ed:6e:1b:1a:18:26:f3:
                    e1:df:d5:0c:50:c3:64:03:f8:27:d6:b7:5e:06:14:
                    ce:2b:d5:78:b6:36:a8:0c:18:71:bc:3e:95:6d:c3:
                    53:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E2:B9:EA:5F:87:86:79:75:F6:6E:E8:A8:F7:06:54:93:20:99:23
            X509v3 Authority Key Identifier:
                keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e2:0a:41:a5:45:16:d7:5e:80:dd:a4:7e:df:89:51:91:37:
         f8:f5:3d:ab:59:b3:54:7b:72:04:d2:9b:fb:47:08:23:97:c8:
         44:a0:d8:ee:1f:49:f3:75:e4:38:8a:bb:22:6a:48:33:d3:bb:
         5e:8f:3a:eb:8d:c7:3e:70:1b:d9:a0:57:65:9b:c3:af:1b:43:
         b8:4f:32:52:15:db:cb:01:19:2c:9c:83:99:6f:a0:09:83:be:
         d3:89:33:2f:13:f8:1f:db:d3:89:5a:16:22:a3:78:e8:12:cf:
         c2:11:23:cb:bf:76:ad:7d:76:35:c9:17:af:7f:89:6b:f3:6d:
         1c:b3:24:2e:f8:73:e6:e2:cf:fe:69:06:43:7a:a7:1e:88:76:
         fe:db:34:a8:00:f4:57:37:0b:04:f9:1c:6b:88:38:98:b6:e8:
         02:45:42:68:61:0a:b2:9e:b3:0a:f4:f3:e9:86:33:44:74:3b:
         75:1d:1b:4e:31:59:25:f8:1c:45:cc:b1:fa:4d:de:f7:7f:12:
         c3:41:85:c1:97:93:fc:1b:2f:44:0d:01:8e:59:cc:1f:ec:9e:
         19:38:58:3e:19:a7:59:ec:6a:2b:50:be:28:77:4b:95:fa:d9:
         ee:3f:44:7b:7e:63:00:a6:5d:0d:fc:33:e3:ab:40:a2:7b:63:
         ce:0a:3b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:12:45 2026 by rpki-client