Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
File:                     yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json)
Hash identifier:          cT/jT6XtxdsjZOtPKlYqMx7NaF+NdtDGY7ZIEQJu9cA=
Subject key identifier:   27:31:40:7F:13:DA:F8:C0:28:73:E1:1E:3D:0B:94:85:11:81:E1:8D
Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9
Certificate issuer:       /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
Manifest number:          011C
Signing time:             Wed 25 Mar 2026 04:57:29 +0000
Manifest this update:     Wed 25 Mar 2026 04:57:29 +0000
Manifest next update:     Wed 01 Apr 2026 04:57:29 +0000
Files and hashes:         1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: XwomPPpJYt9mq0UQY2LyXFy2NsX7C51PzEffluTEogU=)
                          2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: 9n+XwMxzkkMMvREjsse3a1ZuBorrEMJnsZ5Bb57THws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl
                          rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DA5, serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9
        Validity
            Not Before: Mar 25 04:57:29 2026 GMT
            Not After : Apr  1 04:57:29 2026 GMT
        Subject: CN=69c36b39-e763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8b:73:70:71:a1:fe:a3:be:e1:60:b3:cf:6f:
                    9a:8e:09:31:3b:9a:ac:b3:10:2c:b5:b6:32:f5:25:
                    d3:25:70:70:0f:67:27:22:a4:9d:02:3b:7a:bf:ec:
                    b0:69:91:46:fa:11:8f:05:a0:97:6e:75:d1:9c:a5:
                    2c:ce:19:53:7e:47:c6:72:b9:91:82:5b:c5:30:0d:
                    39:c8:91:f1:45:9c:68:1c:af:01:3c:ab:69:25:3c:
                    00:26:ee:d4:48:2e:6e:1f:d2:50:ae:74:75:92:4c:
                    00:96:78:f8:66:ce:cd:9c:dd:10:f9:5b:a2:14:15:
                    4b:71:5b:e7:af:1b:8b:72:16:c4:85:4f:26:2e:ac:
                    1e:c9:64:83:8b:26:38:1c:86:88:11:66:2c:0d:28:
                    6b:36:db:42:92:f8:92:38:5d:5b:d4:f2:f9:43:7b:
                    1f:ec:11:5f:71:0c:10:8a:fc:31:5a:c6:47:49:42:
                    f8:7e:65:a6:0a:7a:de:2d:bc:01:d3:73:0b:88:ae:
                    3e:6d:75:a1:11:7b:1b:d2:2d:9f:2c:f5:bc:94:93:
                    04:4b:17:bf:e2:c1:96:cf:a1:71:19:a8:b9:b9:c7:
                    0f:58:80:d8:4f:37:d5:70:7c:82:d5:04:2d:86:60:
                    f4:78:bf:f4:a2:5b:72:d1:63:f9:da:cb:c2:81:19:
                    40:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:31:40:7F:13:DA:F8:C0:28:73:E1:1E:3D:0B:94:85:11:81:E1:8D
            X509v3 Authority Key Identifier:
                keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:5c:a0:97:da:03:1e:dc:43:b0:fb:26:78:79:8e:2c:a4:80:
         37:ca:37:ff:c1:13:54:43:42:a7:39:d5:71:08:d0:83:81:e8:
         08:03:38:84:32:6b:36:1d:ec:5a:06:c6:53:77:5b:66:ce:7a:
         07:6b:59:81:ae:69:22:03:80:8a:90:d5:8b:5a:b3:7a:55:47:
         93:56:30:54:68:43:60:11:9d:6b:58:ef:22:55:77:4f:e5:ee:
         65:2d:07:ea:71:24:ec:95:1c:21:03:54:d9:70:41:12:1d:6b:
         3b:9d:4f:54:ee:4c:50:64:29:b3:42:94:b5:5b:b2:2c:f2:7a:
         e3:7c:b7:a7:9f:6d:d2:a3:4c:86:cd:25:68:41:61:46:78:6d:
         86:71:9d:4b:85:18:ee:90:25:c2:75:29:1f:b4:73:e7:79:3a:
         04:c6:d2:43:6d:d8:5c:9e:58:2b:5a:a5:bb:5b:2c:5a:c8:a6:
         1d:ea:2e:0b:c9:51:3b:74:e2:4a:b4:e4:18:a8:75:70:ad:31:
         cf:70:24:1a:0f:da:78:d6:18:93:c1:65:21:f7:e1:3e:49:08:
         32:65:1f:54:dd:32:1d:a6:72:af:1f:53:ce:11:36:bf:4b:ac:
         f8:69:8b:1d:ee:54:cf:27:68:0c:cd:61:47:3a:3e:e8:8c:f6:
         75:1b:c1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:42 2026 by rpki-client