Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File:                     YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier:          8id/d3eFgqAYnm3Ev7VPCIQHepabPrJ9cnAV/78jjqQ=
Subject key identifier:   A4:77:D6:FD:B1:62:DB:A2:E6:84:A9:48:93:11:16:B0:FB:4B:D4:5C
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer:       /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial:       0276
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number:          026F
Signing time:             Wed 25 Mar 2026 01:26:56 +0000
Manifest this update:     Wed 25 Mar 2026 01:26:55 +0000
Manifest next update:     Wed 01 Apr 2026 01:26:55 +0000
Files and hashes:         1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: b6GnZm7mgR2wklUWxngoF7DbWkSvhzl8TIvH3FgaH7o=)
                          2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: /uGLQIrlBTxMwkdtG3jyxMXG6mL7PGCkVKPH/j33iG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
                          rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
        Validity
            Not Before: Mar 25 01:26:55 2026 GMT
            Not After : Apr  1 01:26:55 2026 GMT
        Subject: CN=69c339df-3c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:77:ed:57:50:a0:77:de:b5:79:c0:f2:0f:92:
                    96:38:29:20:30:9c:9c:8e:21:28:6a:3f:dc:16:08:
                    88:9b:41:81:a8:38:64:cb:e9:30:02:e8:80:a5:8f:
                    22:70:b0:9f:5c:90:79:69:ff:69:e3:b7:d6:5a:4d:
                    6e:ee:25:ac:8f:41:d2:48:91:10:86:ff:d4:1f:45:
                    88:44:91:21:74:48:de:db:ff:51:9a:c1:85:3d:ac:
                    29:b6:5f:3a:30:ea:3e:18:96:ba:ea:3f:ca:57:5e:
                    48:30:72:a1:95:5f:43:8d:bd:65:69:b2:c6:1b:73:
                    55:1b:97:13:e3:75:ed:9b:eb:8e:6a:dc:e8:cc:e5:
                    ce:c0:2c:37:fc:c9:b2:4f:15:a9:d5:f0:c9:72:f5:
                    20:49:b2:d7:1b:05:e7:c8:0d:15:70:9b:4d:16:07:
                    27:e6:92:59:75:5f:d2:1f:fc:c3:e7:e2:d6:ec:34:
                    97:cf:06:25:28:f0:ba:1c:a0:d3:22:48:b4:19:98:
                    66:6b:4d:ce:24:34:fa:a9:df:c3:1f:c5:34:44:ce:
                    6b:7e:0b:c2:03:62:5c:01:72:d0:15:af:e2:58:66:
                    ea:d5:2e:a5:50:58:d7:b2:ea:49:61:cd:6c:44:db:
                    54:43:f3:45:f5:1c:40:1e:8a:31:61:c2:4e:08:a8:
                    4c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:77:D6:FD:B1:62:DB:A2:E6:84:A9:48:93:11:16:B0:FB:4B:D4:5C
            X509v3 Authority Key Identifier:
                keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:69:46:df:52:e9:9e:59:04:33:21:59:9a:5d:c7:14:c2:e7:
         04:7b:86:ef:2a:f8:0e:3d:3e:6d:0f:e8:b8:f4:02:2f:07:68:
         4f:16:b9:06:98:3f:ef:b9:84:95:48:1f:78:a6:67:74:61:4e:
         5d:b1:3a:6c:4c:6d:4e:44:69:f0:a4:f5:a0:f5:67:37:4c:65:
         e5:0e:72:bd:7e:d2:db:be:c1:a7:2f:dd:9f:20:54:75:b8:0a:
         f7:51:9b:84:09:7c:08:19:dd:14:d3:77:56:0a:f6:c7:90:1e:
         33:4f:2c:34:cf:c4:1f:6c:84:ae:70:3e:b3:ba:d8:e2:e9:7b:
         00:eb:4c:49:ff:f6:d7:d3:53:ea:74:1e:5b:4c:7f:29:3d:c6:
         60:71:68:2c:30:e5:7f:69:fd:42:67:36:55:a9:97:cb:3d:da:
         ad:77:26:5f:a9:4d:ba:33:0c:65:b4:fc:c0:a7:a9:11:d1:48:
         b6:06:f9:d3:91:79:5f:18:bf:34:72:74:4d:19:ce:2d:09:2c:
         1d:ea:ce:49:9a:0b:0e:59:30:5e:05:e3:0d:3a:2b:f0:51:a0:
         14:80:26:5f:7d:65:31:af:f1:6b:60:55:67:62:d5:1f:b4:90:
         0e:1a:f7:d7:6c:40:76:51:77:cb:22:45:9a:d7:30:e9:a7:e1:
         b8:b9:5d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:15 2026 by rpki-client