Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
File:                     YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json)
Hash identifier:          bTviamNB/2xvPqn9cp/LPgviPfvMjRLDwwZyrVpDNtE=
Subject key identifier:   32:3D:52:01:C5:DF:2F:5B:03:F9:43:68:7E:11:25:11:C1:55:AF:E9
Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
Certificate issuer:       /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Certificate serial:       051E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
Manifest number:          0512
Signing time:             Thu 26 Mar 2026 23:25:26 +0000
Manifest this update:     Thu 26 Mar 2026 23:25:25 +0000
Manifest next update:     Thu 02 Apr 2026 23:25:25 +0000
Files and hashes:         1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: q29QEUrpKaJOCcSVP6CH+m4o0JwrW0+8+k/ElAcAVxM=)
                          2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: voztcrzhiVsnEEDAL+kh/aaIgcYKoM5wE79GPvMJ4lw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
                          rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1310 (0x51e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
        Validity
            Not Before: Mar 26 23:25:25 2026 GMT
            Not After : Apr  2 23:25:25 2026 GMT
        Subject: CN=69c5c066-6791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a5:97:be:18:3a:8e:f5:15:3d:bb:a2:d7:07:
                    d3:e3:85:87:62:e4:f4:e1:81:d2:53:5a:fa:64:ad:
                    26:37:1d:42:6b:f8:8e:bd:88:b8:a7:3b:53:58:ac:
                    46:d8:19:de:77:a4:a6:ee:b3:d9:d5:6d:d6:97:63:
                    85:40:6f:74:c0:d6:25:dd:fa:36:9f:4b:ae:83:dd:
                    7d:e0:1a:62:01:c6:e4:cb:6d:5a:2c:86:16:f7:97:
                    b7:06:40:b3:af:10:78:89:e7:4d:28:f1:ff:7e:d9:
                    ae:59:86:c4:88:ee:56:43:6b:f9:9a:e3:d4:7c:b7:
                    bc:81:0b:ba:bb:ca:23:e0:cd:6f:a1:d7:81:46:40:
                    a5:d9:75:c6:62:25:56:24:8a:be:eb:58:60:06:78:
                    5e:3a:4b:8a:ff:f5:15:a8:0d:cb:6d:4e:a5:1b:fa:
                    f4:da:c6:6c:98:bb:3b:fe:e3:65:38:a6:e3:0a:76:
                    5e:85:2c:47:1b:46:00:4a:36:ec:a9:8f:00:17:a9:
                    83:96:12:2b:39:43:35:26:dc:fb:55:98:7b:39:43:
                    ff:b0:5c:09:77:00:a6:66:46:ec:63:78:13:9f:bc:
                    b2:b5:cb:c6:c6:88:65:6f:00:5c:04:e7:0b:84:7c:
                    ab:1f:ee:df:e7:36:7b:06:49:29:99:03:a4:67:3a:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3D:52:01:C5:DF:2F:5B:03:F9:43:68:7E:11:25:11:C1:55:AF:E9
            X509v3 Authority Key Identifier:
                keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5a:0b:75:4b:67:c9:0c:a5:8a:61:18:7d:fb:6c:a5:b5:f2:
         81:3a:ee:ad:16:ab:8a:73:2c:32:64:7e:6c:24:4b:96:81:fb:
         01:3d:34:7e:45:8a:84:3f:9c:7c:81:f5:f6:03:db:a2:cc:db:
         e4:e7:0c:2b:80:1f:fa:f5:6e:4c:a7:59:0e:8f:79:00:42:bd:
         a6:59:19:e9:8c:9f:00:39:e7:8a:e0:47:8b:c2:8e:0f:f1:22:
         96:10:94:01:78:42:5a:ab:7d:63:45:52:44:c8:d5:22:ae:ea:
         1f:1a:8f:19:c5:4c:6f:91:61:af:26:e9:3f:27:14:34:f2:9a:
         67:d0:3d:3d:43:39:e8:99:2d:1d:83:92:33:96:fa:fc:79:02:
         63:41:c9:e7:7c:3e:69:6d:37:bc:41:46:d9:04:0e:2d:8e:04:
         36:e2:50:77:10:f4:a1:eb:f9:72:da:2b:21:1d:b8:68:92:57:
         9e:16:40:c3:47:54:53:bc:aa:00:d5:87:a2:0c:df:47:85:c4:
         bf:f4:84:96:50:56:9d:0d:f7:22:d0:87:f5:28:0a:48:08:49:
         90:0b:78:8b:7f:ce:c3:a9:71:24:04:f9:95:30:49:9c:3c:d0:
         ac:89:77:ed:3f:0a:00:36:82:40:c0:d2:d7:94:07:87:6b:ef:
         b4:02:60:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:22:11 2026 by rpki-client