Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
File:                     ByXySRgBUFGFyQaaQBNjXDi1a3I.mft (raw, json)
Hash identifier:          jMwanWgLbzcAj6RsceiNY2VSAuYeqEPpSX6gOIMb56Y=
Subject key identifier:   F1:7A:CB:18:E6:8B:21:14:DF:B4:7C:06:5C:C1:D8:98:43:7E:3A:A9
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Certificate issuer:       /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial:       07FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
Manifest number:          170D
Signing time:             Tue 24 Mar 2026 17:53:42 +0000
Manifest this update:     Tue 24 Mar 2026 17:53:41 +0000
Manifest next update:     Tue 31 Mar 2026 17:53:41 +0000
Files and hashes:         1: ByXySRgBUFGFyQaaQBNjXDi1a3I.crl (hash: 5XNC/jlttmtQTg3zhZyrjA1EQTqx9fAvWEjXfxVS+UM=)
                          2: CCA402F8BE3811F0B9AAC956C4F9AE02.roa (hash: poKacpxWLem7MXU2cZ8LXl1fQdysy14/f02fKfzvHFI=)
                          3: 970E5576BE3811F0962A6356C4F9AE02.roa (hash: nisM7JGbV5MRmDC8uhu0E+MPwT1IFHJ1Q6JtOmv7Vk8=)
                          4: 05144A26BE3911F09CB32457C4F9AE02.roa (hash: BJG7KKwhl8HJLFMiXdJ/ug8z26cqh8GFLSWPDyLzMV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
                          rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2043 (0x7fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D808, serialNumber=0725F2491801505185C9069A4013635C38B56B72
        Validity
            Not Before: Mar 24 17:53:41 2026 GMT
            Not After : Mar 31 17:53:41 2026 GMT
        Subject: CN=69c2cfa5-eac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:4d:03:fd:66:d8:4c:28:d4:6f:58:29:6c:
                    77:11:3b:56:eb:90:92:4b:6c:b2:40:eb:aa:1d:1e:
                    5e:34:35:40:85:67:49:79:cd:8c:cf:63:c4:e4:d7:
                    6d:ea:6a:4b:91:10:a6:0a:03:cc:9a:28:98:2b:5c:
                    df:f9:47:26:cd:2d:fa:6f:19:78:ed:55:20:59:2f:
                    dd:41:70:a4:bd:8f:a0:c6:9f:4f:19:a3:9c:7d:3d:
                    50:00:1b:16:e5:1a:da:14:5c:ee:4e:a7:8d:d6:ef:
                    9a:8b:5d:70:89:b4:d1:79:8d:67:d9:65:31:07:b8:
                    19:91:2f:be:c2:8d:a6:17:cd:bd:3f:80:ad:4e:ca:
                    32:10:70:1b:46:86:d3:a9:c4:6b:74:21:2c:8f:05:
                    8a:a5:2b:68:6b:6c:ce:c8:52:25:8e:ad:bc:ff:eb:
                    7b:48:24:1a:d8:1b:47:f7:09:c4:df:a6:d6:6b:4d:
                    8f:eb:56:09:09:60:85:05:17:d4:17:c1:30:dc:2c:
                    51:60:84:64:23:cb:fb:c2:c4:34:56:27:e7:c0:d7:
                    71:a2:04:89:af:d7:f8:30:2d:11:e4:b3:a3:97:92:
                    54:af:5c:2a:98:e4:66:8f:e0:31:f4:a0:18:c3:99:
                    b2:23:b1:f8:67:a0:5d:78:d6:d3:7f:b2:8b:68:59:
                    6e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7A:CB:18:E6:8B:21:14:DF:B4:7C:06:5C:C1:D8:98:43:7E:3A:A9
            X509v3 Authority Key Identifier:
                keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:4d:22:1c:3a:9a:6f:a4:74:37:ee:3d:df:27:6b:98:91:cb:
         1e:9a:20:6e:ee:ea:22:bf:8a:af:11:db:24:39:bb:67:71:4a:
         c6:b1:2b:1b:24:9f:70:37:17:1d:65:ea:66:48:71:90:cf:65:
         ae:ca:b2:55:11:ed:ce:58:9c:b4:ed:e8:9e:04:d3:04:28:d6:
         f8:e4:05:6c:cd:cc:c5:0d:26:9a:0f:3d:32:df:c9:f8:aa:c1:
         49:ba:34:1e:f5:fb:53:10:f8:ae:86:ff:31:92:88:be:89:ff:
         1d:90:8e:c7:9a:34:e9:58:12:e3:c9:8f:c2:be:eb:5b:c1:43:
         87:ae:32:5a:76:ea:9e:a5:b5:f3:f4:7e:d7:f5:29:37:9b:fb:
         48:6d:a3:99:f2:22:04:a7:61:e2:f1:e9:67:8f:d8:10:ef:9d:
         15:04:c8:46:9e:75:86:ff:80:4d:16:12:2a:03:26:42:d5:ef:
         30:c4:f5:41:ae:88:8e:02:34:69:79:99:c7:9a:5a:cd:18:4a:
         29:f6:92:9d:22:41:d4:68:9c:b2:06:81:81:f2:d0:72:8f:4c:
         ca:88:80:63:f8:51:c6:64:5e:43:e4:9e:4c:01:b5:dc:84:c4:
         96:c2:d6:91:1f:63:9e:8b:1e:bc:8f:bf:90:fa:97:d9:41:2f:
         fb:c7:fc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:41:43 2026 by rpki-client