Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
File:                     YHYovkVe83m-Zq-dbKm6js3tPwQ.mft (raw, json)
Hash identifier:          3EjXUHCTVWoE0OFLVx2foBk2x9Hlx3SGacM1mvY0/Ug=
Subject key identifier:   19:FB:0A:03:C7:E5:20:84:CB:93:C0:E8:2E:D5:A8:C9:B4:2A:CA:62
Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04
Certificate issuer:       /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
Certificate serial:       01B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
Manifest number:          0C12
Signing time:             Tue 24 Mar 2026 19:53:23 +0000
Manifest this update:     Tue 24 Mar 2026 19:53:22 +0000
Manifest next update:     Tue 31 Mar 2026 19:53:22 +0000
Files and hashes:         1: YHYovkVe83m-Zq-dbKm6js3tPwQ.crl (hash: 246pDO2ei0ko+TXTayPjIWZ0yddUan9YQVJ+D3jyKIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
        Validity
            Not Before: Mar 24 19:53:22 2026 GMT
            Not After : Mar 31 19:53:22 2026 GMT
        Subject: CN=69c2ebb3-2b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d6:2c:a3:b7:2f:a2:57:49:73:f2:d2:81:06:
                    70:1a:84:5b:dc:97:a1:0a:e6:25:57:f8:af:aa:09:
                    5e:77:d3:16:5f:4b:e8:ec:45:bc:76:8a:26:19:88:
                    46:8a:e0:05:e9:ab:de:f0:12:4b:33:68:af:24:72:
                    b0:96:71:30:a9:fd:28:97:f3:91:cb:62:57:7f:bf:
                    b3:43:55:33:e0:5b:54:68:a8:59:b6:c3:b5:85:1f:
                    98:38:68:67:f4:5c:41:8c:da:62:6e:e8:c8:34:19:
                    37:f2:7b:65:b8:82:e4:44:d1:49:f4:0f:7b:e3:24:
                    8f:65:56:39:c6:3e:5c:31:77:f0:2f:f9:ec:c8:e6:
                    97:63:2b:18:e2:91:10:92:31:cd:bd:9e:57:6c:6d:
                    4b:85:b4:11:5a:37:be:52:43:21:6b:e7:f4:ac:32:
                    2f:9f:c5:5d:20:27:f8:c6:5a:ad:5f:59:72:96:8e:
                    65:5a:0f:ee:eb:20:3d:f6:77:36:d0:f9:be:0c:18:
                    b4:2b:4e:36:62:9a:21:96:32:8b:7d:ae:07:09:46:
                    a7:70:04:07:67:97:cf:bc:e8:e4:0e:dc:5d:7c:6a:
                    b7:35:ee:a8:e2:25:f8:f3:dd:7f:02:7f:dd:39:d6:
                    b2:b9:ab:1f:11:0b:d9:6b:b0:41:36:e4:96:9a:55:
                    31:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FB:0A:03:C7:E5:20:84:CB:93:C0:E8:2E:D5:A8:C9:B4:2A:CA:62
            X509v3 Authority Key Identifier:
                keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:da:e9:76:05:74:53:4c:2e:ef:05:32:8b:41:49:80:b5:77:
         cc:62:20:87:7e:1c:5e:4b:b1:e6:bb:ea:1c:4b:1a:9a:c1:32:
         67:b5:8e:40:70:2e:7f:e8:a1:f2:8b:cb:6d:63:ad:15:e2:1e:
         c2:f6:3c:c0:66:7e:fa:87:06:69:12:79:de:43:d4:db:e6:18:
         3f:9e:ab:74:da:80:02:33:66:ec:09:8a:56:09:40:a5:87:17:
         b0:65:d3:a6:6f:b5:33:e5:a7:cf:4a:96:f3:13:12:fe:e4:6c:
         29:5f:25:69:9f:79:ba:7a:cc:59:19:31:fa:dd:05:75:59:7f:
         8e:fe:23:51:96:80:ac:0c:f9:a3:49:48:42:3c:f5:03:ca:f3:
         70:88:5b:98:28:0c:2e:62:c4:f0:4d:87:9d:17:f7:59:ad:50:
         c4:54:e9:b5:9a:71:3b:50:6e:7a:63:2e:b8:aa:77:b4:70:43:
         77:2b:4f:e9:50:58:f0:8d:2a:4e:5b:35:8a:5c:8b:91:da:ec:
         6b:03:4d:8c:c4:73:6c:af:85:2d:18:b4:6a:fa:b8:2d:bd:c6:
         b6:ef:2b:9f:84:33:83:0d:55:d4:0a:da:ac:2d:ce:ab:c5:1f:
         b5:53:9d:91:ae:2d:ff:08:ae:60:e3:af:7b:97:5a:5c:8f:c0:
         92:b5:13:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE3RTYxMTAvBgNVBAUTKDYwNzYyOEJFNDU1RUYzNzlCRTY2QUY5RDZDQTlCQThF
Q0RFRDNGMDQwHhcNMjYwMzI0MTk1MzIyWhcNMjYwMzMxMTk1MzIyWjAYMRYwFAYD
VQQDEw02OWMyZWJiMy0yYjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA39Yso7cvoldJc/LSgQZwGoRb3JehCuYlV/ivqgled9MWX0vo7EW8doomGYhG
iuAF6ave8BJLM2ivJHKwlnEwqf0ol/ORy2JXf7+zQ1Uz4FtUaKhZtsO1hR+YOGhn
9FxBjNpibujINBk38ntluILkRNFJ9A974ySPZVY5xj5cMXfwL/nsyOaXYysY4pEQ
kjHNvZ5XbG1LhbQRWje+UkMha+f0rDIvn8VdICf4xlqtX1lylo5lWg/u6yA99nc2
0Pm+DBi0K042YpohljKLfa4HCUancAQHZ5fPvOjkDtxdfGq3Ne6o4iX4891/An/d
OdayuasfEQvZa7BBNuSWmlUx/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBn7CgPH
5SCEy5PA6C7VqMm0KspiMB8GA1UdIwQYMBaAFGB2KL5FXvN5vmavnWypuo7N7T8E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTdFNi81NTc0MEU3MEIz
QjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgzbS1acS1kYkttNmpzM3RQ
d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lIWW92a1ZlODNtLVpxLWRiS202anMzdFB3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTdFNi81NTc0MEU3MEIzQjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgz
bS1acS1kYkttNmpzM3RQd1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgdrpdgV0U0wu7wUyi0FJgLV3zGIgh34cXkux5rvqHEsamsEyZ7WOQHAuf+ih
8ovLbWOtFeIewvY8wGZ++ocGaRJ53kPU2+YYP56rdNqAAjNm7AmKVglApYcXsGXT
pm+1M+Wnz0qW8xMS/uRsKV8laZ95unrMWRkx+t0FdVl/jv4jUZaArAz5o0lIQjz1
A8rzcIhbmCgMLmLE8E2HnRf3Wa1QxFTptZpxO1BuemMuuKp3tHBDdytP6VBY8I0q
Tls1ilyLkdrsawNNjMRzbK+FLRi0avq4Lb3Gtu8rn4Qzgw1V1ArarC3Oq8UftVOd
ka4t/wiuYOOve5daXI/AkrUTlQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:06 2026 by rpki-client