Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
File:                     YQPK5q-yXkC6nl2kxULP4JtndCo.mft (raw, json)
Hash identifier:          suejRtLLpeQVr7KlxAttZTAmjO0tfKC6Yh3Gv8DF0ek=
Subject key identifier:   87:13:88:7F:05:56:2C:F3:38:A1:47:A2:61:77:AC:CF:7B:36:D6:DF
Authority key identifier: 61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A
Certificate issuer:       /CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
Certificate serial:       0A25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
Manifest number:          0A1A
Signing time:             Tue 24 Mar 2026 19:35:09 +0000
Manifest this update:     Tue 24 Mar 2026 19:35:08 +0000
Manifest next update:     Tue 31 Mar 2026 19:35:08 +0000
Files and hashes:         1: YQPK5q-yXkC6nl2kxULP4JtndCo.crl (hash: zWi+kzsva+xnQLMtOqY5TvJ0O1EFR/upn74JC+SVtnA=)
                          2: B781FD5C8FB411EAA396FB5CC4F9AE02.roa (hash: h1FScDmATHfunMcIYToAdhRcFfBgHG5Y3p1Jl4Wlwi0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl
                          rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2597 (0xa25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186193, serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
        Validity
            Not Before: Mar 24 19:35:08 2026 GMT
            Not After : Mar 31 19:35:08 2026 GMT
        Subject: CN=69c2e76d-e8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f1:2a:41:bb:bc:62:96:3a:61:2b:bc:8d:e4:
                    f8:ab:96:46:4d:15:20:a8:35:4c:0d:e7:e9:df:c8:
                    68:6b:04:7e:dd:a5:7e:29:7c:2a:8d:42:0a:fa:19:
                    33:d3:0f:83:8e:d3:70:6b:39:15:24:5d:7d:43:a4:
                    bc:64:16:5e:d0:d0:60:81:83:14:61:cd:f1:7f:07:
                    75:75:22:05:5f:ed:6b:cc:05:46:31:e4:45:4c:43:
                    55:f2:2e:a0:e7:73:e4:df:ee:a4:0f:83:67:34:ef:
                    54:8f:61:42:54:49:3c:4b:67:6d:e3:f4:b5:e3:57:
                    a8:fa:d7:e9:33:fe:6f:d7:e0:32:c8:57:61:10:2d:
                    66:c8:f2:9d:12:da:bd:4b:5c:68:d6:70:69:11:f6:
                    f5:21:57:a2:d6:f3:d4:39:39:2c:df:5f:fc:61:e6:
                    51:d1:15:77:48:4e:32:a6:a2:a1:0f:36:2f:8d:77:
                    86:a4:97:5a:7d:ba:22:03:bb:3d:d2:4e:f6:20:9b:
                    9e:10:ac:12:a2:9d:1d:fe:fe:77:59:cf:b4:df:1c:
                    d6:b9:ad:77:b3:00:e4:4c:14:8a:04:d2:ae:1e:98:
                    9e:83:d2:73:d4:93:60:4b:5c:f7:2e:e3:1b:d5:7b:
                    62:0e:48:b3:09:65:d8:42:85:29:7d:c4:16:25:aa:
                    19:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:13:88:7F:05:56:2C:F3:38:A1:47:A2:61:77:AC:CF:7B:36:D6:DF
            X509v3 Authority Key Identifier:
                keyid:61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:be:45:c9:80:4e:22:96:8a:59:fa:16:2d:58:13:de:91:59:
         f9:3b:b6:26:b9:4c:3b:7e:94:d7:b6:0e:a1:78:16:5b:f4:d8:
         99:ec:56:2c:c9:e8:44:4e:a4:20:90:de:fc:f0:93:8a:5f:17:
         e1:47:30:9c:6e:cd:15:9f:42:a4:57:37:96:56:cb:d0:0f:d3:
         d1:ec:e5:f6:aa:70:c3:bb:5d:3c:7c:e7:eb:ce:12:4d:5f:ae:
         e1:52:f3:45:c7:2b:f1:cb:fb:f5:06:26:90:8a:75:ac:2c:b0:
         3b:0c:06:2d:96:ad:02:6f:f4:c4:b1:fe:01:de:f7:17:8f:cd:
         f1:4e:2f:6e:62:3a:c0:99:fb:03:56:d7:45:9c:81:68:41:c0:
         de:bf:f7:05:0c:e3:b0:fc:59:27:f6:c7:6b:bf:37:ab:7f:ed:
         00:61:71:45:5f:a9:3d:67:5e:aa:5d:cf:ae:cd:e8:13:16:e7:
         d4:9b:1d:db:84:b8:42:61:e2:cb:90:50:e9:03:ae:5a:c8:fc:
         e2:fd:c7:9f:af:35:d7:17:1c:40:cb:a4:ee:de:b4:70:f7:46:
         a0:61:30:9d:b3:3c:c7:c1:f1:cd:27:b3:14:ee:34:eb:e9:66:
         2c:8f:c0:bf:8b:07:7f:07:6e:e5:5d:06:77:c4:5a:8e:bb:77:
         20:62:1e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:45:56 2026 by rpki-client