Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft
File:                     Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft (raw, json)
Hash identifier:          HypfDOXHlBqdLWW49ce+1xLMzyXcKsgtmurfN5eRyuU=
Subject key identifier:   4F:FF:5F:7A:95:4B:09:A9:9F:FC:59:41:F6:33:36:B2:76:B0:68:B0
Authority key identifier: 63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1
Certificate issuer:       /CN=A9178F62/serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft
Manifest number:          8A
Signing time:             Wed 25 Mar 2026 06:50:29 +0000
Manifest this update:     Wed 25 Mar 2026 06:50:28 +0000
Manifest next update:     Wed 01 Apr 2026 06:50:28 +0000
Files and hashes:         1: Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl (hash: rFTL7GeSqT3bSqpZm3JXxD/0BRGSyoRoiiENFaIp4jk=)
                          2: 8EA5A6E28C7D11F0B0706F1EC4F9AE02.roa (hash: om/23C7uo81niloUrXFCWHHlzaoIHI7r8hOyNxlvmHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl
                          rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178F62, serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1
        Validity
            Not Before: Mar 25 06:50:28 2026 GMT
            Not After : Apr  1 06:50:28 2026 GMT
        Subject: CN=69c385b4-80ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:a2:9b:88:ce:49:70:c0:56:1c:45:44:29:
                    75:d4:61:96:2f:8d:88:5c:fd:29:08:71:c3:53:74:
                    9d:8c:3d:81:6c:3f:7b:8c:ad:a7:34:e1:a8:ca:9e:
                    7b:8d:72:c3:85:58:56:44:2e:bd:2f:77:5c:7e:31:
                    1f:59:44:45:1d:a5:e5:24:6a:91:1e:1a:8b:37:bb:
                    47:9d:39:a0:a0:39:ed:6c:26:d4:8c:00:17:5b:47:
                    57:03:d5:07:78:d7:9a:2c:90:31:28:de:d0:be:9c:
                    6b:00:11:06:b7:fe:53:76:03:a4:b3:ff:04:d7:aa:
                    63:8d:ba:81:2c:be:b3:31:a7:bd:2c:24:2f:9d:56:
                    94:f9:63:e0:b3:be:ec:ff:d7:34:92:ba:a4:19:1f:
                    1c:e9:0f:81:fc:d4:48:67:11:1b:f2:bf:79:e0:03:
                    41:97:1e:69:3c:5f:b0:fd:6f:86:a0:19:80:73:f9:
                    c9:5a:6d:15:ae:ba:fc:70:77:42:f0:95:fe:af:f2:
                    c1:9d:dd:de:f8:4d:2d:b7:db:05:66:64:bc:83:18:
                    78:07:07:c9:4b:d9:16:12:af:5d:60:e6:ec:0a:81:
                    b8:11:4c:4e:90:a9:65:01:34:60:67:ed:eb:45:85:
                    b8:aa:b5:fe:2f:bd:41:29:51:1d:6c:31:2d:f0:38:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FF:5F:7A:95:4B:09:A9:9F:FC:59:41:F6:33:36:B2:76:B0:68:B0
            X509v3 Authority Key Identifier:
                keyid:63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:91:e5:f1:93:2e:e5:e2:b9:62:4b:52:da:7f:97:39:2b:
         a5:e7:61:d5:29:0c:33:1c:f3:01:ef:d5:d2:9b:64:b2:15:2a:
         22:96:05:86:10:51:63:98:a2:34:d4:0b:3f:f4:13:d6:52:68:
         44:52:53:48:1f:c3:3d:1c:9d:62:47:1d:d1:73:83:7f:7e:fd:
         50:1a:8d:61:cf:c3:09:a4:94:3e:87:fc:62:be:8e:54:91:59:
         37:ac:7c:4e:e6:5b:a0:38:7d:e4:6e:c7:d4:3b:57:6c:84:2a:
         9a:5a:b7:1d:0b:55:3d:12:52:63:06:c7:4b:83:57:7f:52:6f:
         5e:bb:e0:4c:58:89:db:21:86:88:77:1b:7b:82:af:66:a6:4b:
         b1:bc:1e:52:04:99:54:c5:da:50:ac:9f:f1:cc:cb:c1:67:15:
         8b:e4:74:56:3b:b7:93:c4:fe:b9:e0:c5:7a:7a:6d:2c:8f:94:
         da:5d:0d:10:84:39:37:4d:e0:e3:60:8e:ba:cd:75:24:fa:4a:
         3b:1c:0c:ff:d9:ce:69:0a:e1:e2:3c:ac:7a:12:66:9c:e4:28:
         e6:aa:22:1f:20:90:3e:2a:54:e2:f1:da:3b:c0:cd:82:00:1c:
         63:91:61:28:70:e8:eb:78:72:be:78:4c:f1:4f:56:82:d9:9c:
         f3:ec:50:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:24:29 2026 by rpki-client