Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
File:                     _YASv-mRKe-ci7ekYDIUQvbSZWI.mft (raw, json)
Hash identifier:          3AKm1DSCkomH5sb65d9ngvc9BZxktvMr6uN3ljbR86E=
Subject key identifier:   A9:AB:F6:41:6B:55:6F:56:52:8E:74:7B:C8:76:56:EA:82:C9:B7:6C
Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62
Certificate issuer:       /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
Certificate serial:       0118
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
Manifest number:          0118
Signing time:             Wed 25 Mar 2026 05:02:13 +0000
Manifest this update:     Wed 25 Mar 2026 05:02:12 +0000
Manifest next update:     Wed 01 Apr 2026 05:02:12 +0000
Files and hashes:         1: _YASv-mRKe-ci7ekYDIUQvbSZWI.crl (hash: 30AepgIyFNSUyRX/ihhMLf3MCOYwJ2poF2O1ozG95Zo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl
                          rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
        Validity
            Not Before: Mar 25 05:02:12 2026 GMT
            Not After : Apr  1 05:02:12 2026 GMT
        Subject: CN=69c36c55-4e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:7f:c0:23:45:2c:22:c9:9d:30:5c:30:1f:
                    b6:f1:4b:2f:32:b1:1a:ab:5f:5f:89:22:23:d0:e9:
                    b5:45:6a:e9:1d:bd:bb:50:03:0b:d0:dc:44:ee:0e:
                    20:85:a9:7b:aa:70:b8:a6:96:b9:91:da:a7:fb:29:
                    68:01:a7:18:a7:1d:f9:35:26:bc:69:bb:90:c4:20:
                    d7:1a:c9:d6:4f:e6:4e:bd:1e:e6:27:d2:ec:b5:34:
                    51:6d:f6:d6:4c:b9:e3:b8:e1:91:e7:d9:49:c6:14:
                    cb:45:58:9f:66:71:cf:67:25:1d:f0:a7:20:21:22:
                    ff:ed:79:c8:3a:2c:d4:d9:5e:e2:3e:10:c3:fa:1d:
                    0b:b9:f5:50:ad:cd:c4:9b:30:d8:08:5d:95:c2:85:
                    da:26:da:2b:fa:43:6a:b4:e0:cb:1d:75:7b:4d:3f:
                    c4:28:70:ec:b8:c5:64:d6:05:72:fe:23:83:ef:87:
                    58:8b:d9:5d:58:7d:45:a7:83:5c:d7:31:c2:c3:b7:
                    1e:61:6f:c5:16:ff:4a:a6:84:1e:06:95:29:c4:3e:
                    2c:ea:ba:b1:bf:0a:02:db:3c:a8:89:c8:47:46:d8:
                    ab:fe:ce:32:0c:a2:73:26:9e:80:3c:f0:9d:cd:54:
                    fd:49:3e:70:6c:01:2d:e7:a7:95:4b:58:2b:e3:bb:
                    9e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AB:F6:41:6B:55:6F:56:52:8E:74:7B:C8:76:56:EA:82:C9:B7:6C
            X509v3 Authority Key Identifier:
                keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:46:30:89:91:73:e9:ca:38:ec:ce:e3:9d:01:e7:33:d9:79:
         3e:b4:d0:cb:1f:60:2d:c1:8a:68:c8:56:6a:55:0e:e4:b5:0b:
         27:f2:43:26:82:41:1c:58:2d:01:a6:58:9c:28:13:8a:c0:6f:
         d3:d8:95:df:63:b1:55:ab:93:19:37:14:65:21:e3:a6:3c:74:
         3d:af:45:ed:5e:cc:73:bb:00:c3:ff:9d:71:08:0f:55:28:5d:
         05:15:6d:67:62:19:e4:a4:e2:23:14:3e:94:ee:8a:54:01:fa:
         9b:bf:60:35:62:5a:52:be:48:2f:87:63:25:d6:15:ee:d9:72:
         c3:9e:d7:8e:0e:85:a4:d2:c4:50:80:4f:18:17:96:dc:7d:bd:
         44:48:1a:06:7c:d3:c4:95:be:4a:67:cd:71:5e:01:41:37:ae:
         2c:0c:1c:6f:5c:13:a8:ea:38:d9:a0:ad:da:ca:2b:d6:78:92:
         31:4b:2c:1c:3c:91:8e:bf:e4:fe:5b:55:38:87:fd:97:88:3c:
         31:bf:ad:c2:3a:1c:6a:15:94:ac:96:92:82:22:67:d3:3c:04:
         47:b7:c0:56:7b:91:40:ee:5c:4e:96:28:b3:2e:f8:d8:2a:68:
         11:94:35:3a:ac:57:39:a5:d4:21:c1:59:84:2d:96:84:8a:b1:
         6a:e2:29:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA3QkIxMTAvBgNVBAUTKEZEODAxMkJGRTk5MTI5RUY5QzhCQjdBNDYwMzIxNDQy
RjZEMjY1NjIwHhcNMjYwMzI1MDUwMjEyWhcNMjYwNDAxMDUwMjEyWjAYMRYwFAYD
VQQDEw02OWMzNmM1NS00ZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApwl/wCNFLCLJnTBcMB+28UsvMrEaq19fiSIj0Om1RWrpHb27UAML0NxE7g4g
hal7qnC4ppa5kdqn+yloAacYpx35NSa8abuQxCDXGsnWT+ZOvR7mJ9LstTRRbfbW
TLnjuOGR59lJxhTLRVifZnHPZyUd8KcgISL/7XnIOizU2V7iPhDD+h0LufVQrc3E
mzDYCF2VwoXaJtor+kNqtODLHXV7TT/EKHDsuMVk1gVy/iOD74dYi9ldWH1Fp4Nc
1zHCw7ceYW/FFv9KpoQeBpUpxD4s6rqxvwoC2zyoichHRtir/s4yDKJzJp6APPCd
zVT9ST5wbAEt56eVS1gr47ueCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKmr9kFr
VW9WUo50e8h2VuqCybdsMB8GA1UdIwQYMBaAFP2AEr/pkSnvnIu3pGAyFEL20mVi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDdCQi8wMUQyMzlBNDdD
QjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktlLWNpN2VrWURJVVF2YlNa
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19ZQVN2LW1SS2UtY2k3ZWtZRElVUXZiU1pXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDdCQi8wMUQyMzlBNDdDQjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktl
LWNpN2VrWURJVVF2YlNaV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdkYwiZFz6co47M7jnQHnM9l5PrTQyx9gLcGKaMhWalUO5LULJ/JDJoJBHFgt
AaZYnCgTisBv09iV32OxVauTGTcUZSHjpjx0Pa9F7V7Mc7sAw/+dcQgPVShdBRVt
Z2IZ5KTiIxQ+lO6KVAH6m79gNWJaUr5IL4djJdYV7tlyw57Xjg6FpNLEUIBPGBeW
3H29REgaBnzTxJW+SmfNcV4BQTeuLAwcb1wTqOo42aCt2sor1niSMUssHDyRjr/k
/ltVOIf9l4g8Mb+twjocahWUrJaSgiJn0zwER7fAVnuRQO5cTpYosy742CpoEZQ1
OqxXOaXUIcFZhC2WhIqxauIp0A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:49 2026 by rpki-client