Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
File:                     yCt7N51v7So8MMRTfg-HzLYIIus.mft (raw, json)
Hash identifier:          LNKqUtAl9yXCslW5unYs73G4A46w7m5XyMaNOTd4rf0=
Subject key identifier:   66:F2:78:ED:B6:D7:8A:70:07:B3:AD:F8:D9:1C:FE:15:00:81:DE:3B
Authority key identifier: C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB
Certificate issuer:       /CN=A917EB96/serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
Certificate serial:       020A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
Manifest number:          0200
Signing time:             Wed 25 Mar 2026 02:27:56 +0000
Manifest this update:     Wed 25 Mar 2026 02:27:55 +0000
Manifest next update:     Wed 01 Apr 2026 02:27:55 +0000
Files and hashes:         1: yCt7N51v7So8MMRTfg-HzLYIIus.crl (hash: +fXY8IK0tyE0TQiFD/4coxuvrs02QSSDaH/1tFepplg=)
                          2: B50ECD32A57E11EEB4533738C4F9AE02.roa (hash: Z9dMHKPPJ4AwtBBzPO0B7QfeY06QQPe693ePWyaMLDg=)
                          3: 348BAEE41C2D11EEB362491FC4F9AE02.roa (hash: yocmNFy5AmrqEw3U7DjRD1ZXBRbgklEi4nFkGSGg5fE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl
                          rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EB96, serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
        Validity
            Not Before: Mar 25 02:27:55 2026 GMT
            Not After : Apr  1 02:27:55 2026 GMT
        Subject: CN=69c3482c-1db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a5:09:89:73:37:eb:ce:58:ad:9a:ad:0b:b0:
                    8d:fe:0d:c9:3d:ed:2a:37:2f:49:de:fe:e9:8a:b3:
                    ac:02:53:06:2d:ba:9e:4e:61:1e:01:8e:82:84:d3:
                    2c:72:67:f0:2f:36:57:e8:ca:12:2a:2b:4f:41:57:
                    5b:7a:18:c1:1a:d8:1f:c6:94:1e:37:f5:34:3e:f7:
                    ad:e2:92:ec:1b:ac:ee:c8:86:e7:68:f7:ec:ae:61:
                    ae:6d:ff:8f:37:dd:b2:bf:ff:fb:13:da:be:c4:7e:
                    3d:08:dc:66:b4:df:f6:9b:68:48:6d:c4:54:7c:fc:
                    c4:7a:f7:6e:0d:31:1f:0e:22:08:43:57:a8:b8:c3:
                    c5:9a:35:6b:56:33:5b:c7:a7:80:47:e8:97:e6:81:
                    03:2f:8b:46:c9:e9:61:74:60:5d:8d:ee:94:9b:1b:
                    c0:06:93:1f:a2:ed:f4:85:94:53:49:d6:60:37:61:
                    23:3c:e9:b2:71:90:a6:02:fa:44:88:c1:99:0e:05:
                    23:e0:41:f2:2a:e0:00:47:15:ff:8f:0e:76:72:24:
                    f6:35:35:54:13:12:24:28:48:df:7b:6c:71:79:54:
                    28:34:5e:84:00:46:48:f1:71:c9:4f:24:4b:a8:80:
                    d9:4f:85:47:3b:64:ec:29:41:6b:de:e7:34:16:5f:
                    98:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F2:78:ED:B6:D7:8A:70:07:B3:AD:F8:D9:1C:FE:15:00:81:DE:3B
            X509v3 Authority Key Identifier:
                keyid:C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e5:d2:9d:57:41:50:6f:03:33:3c:76:4a:98:d9:b0:9a:ad:
         5a:4c:67:f6:89:89:2f:ee:23:e9:e7:8f:3b:33:19:09:fe:9a:
         db:f6:90:84:31:6a:c4:15:ef:b4:39:77:e7:56:14:e1:04:ed:
         d4:62:5a:9f:07:53:b1:cc:69:bc:64:77:57:24:e2:5f:c3:90:
         30:35:a3:56:05:f2:f3:40:3d:aa:df:43:3f:19:a5:59:4f:71:
         3a:6c:4b:17:69:ad:42:b0:c2:8d:53:88:5f:3b:54:e5:64:e7:
         92:26:cb:78:24:5b:5e:36:22:ce:dc:b3:63:30:90:b7:d9:66:
         2f:ec:3e:35:bc:07:c0:92:c3:96:0a:f0:1d:fa:41:66:f9:a7:
         f3:fb:6b:cf:3b:7e:04:43:4b:3c:e4:b0:3e:a9:6f:a0:58:20:
         4e:d4:aa:41:8d:b0:14:77:cb:ae:b6:1a:95:8d:2a:ec:5c:08:
         9f:d2:e2:79:a6:a2:7f:56:8f:c9:e9:4f:eb:75:4e:f8:c2:8e:
         4d:9f:32:7b:5f:c0:0e:2a:fc:09:89:36:57:ea:36:9a:a9:61:
         fc:94:d9:76:da:f1:e8:3a:e3:c4:b5:1e:8e:37:52:4b:9b:5a:
         22:f2:b8:3f:89:ce:60:18:c3:4a:55:a6:57:38:15:be:fa:6c:
         8d:dd:82:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:35 2026 by rpki-client