Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft
File:                     YRQatT_Urx2yqGr-fsj-yX1eodU.mft (raw, json)
Hash identifier:          qIwxyJqc58LEiNwVllvnj8uRanl1RRbEHIqYwLLl1cs=
Subject key identifier:   C4:19:3A:7F:4B:17:D7:E5:13:A7:A2:FB:1D:2C:E0:B2:74:C3:09:A5
Authority key identifier: 61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5
Certificate issuer:       /CN=A918DEF0/serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft
Manifest number:          020C
Signing time:             Wed 25 Mar 2026 02:21:48 +0000
Manifest this update:     Wed 25 Mar 2026 02:21:48 +0000
Manifest next update:     Wed 01 Apr 2026 02:21:48 +0000
Files and hashes:         1: YRQatT_Urx2yqGr-fsj-yX1eodU.crl (hash: JDniENOlUDiG7RH5EgWN16Imj6iRbjYywle5PKyOyaI=)
                          2: 7F4ED0A0B83011EFA5108619C4F9AE02.roa (hash: zEKHnn7kjmEyBZ3InlOca451cVgvomjhZzdZmC7qrNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl
                          rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DEF0, serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5
        Validity
            Not Before: Mar 25 02:21:48 2026 GMT
            Not After : Apr  1 02:21:48 2026 GMT
        Subject: CN=69c346bc-66fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:48:49:4e:c1:17:4c:7f:f6:6e:b7:2e:6b:02:
                    20:3b:ce:2c:28:2a:fa:a4:ea:ad:f2:55:79:fb:f4:
                    d6:ad:8f:0f:cb:70:57:8c:72:c7:cc:d9:36:1c:ac:
                    a4:7f:8d:8e:6d:e4:b4:d9:6d:7e:b0:ab:8d:1d:58:
                    2d:98:33:3a:f0:5b:ee:30:ae:43:a9:4c:cf:1f:bc:
                    05:52:a0:63:65:f0:2e:de:32:e0:38:13:71:85:19:
                    c5:aa:83:e9:99:51:ee:91:27:95:5e:b4:be:fe:9a:
                    34:f4:cb:be:a8:30:8f:ee:04:ff:bd:bf:00:37:87:
                    2e:05:cc:51:f6:fc:83:5e:0a:8a:b2:e1:2a:41:f1:
                    b3:35:11:a6:32:52:27:ff:97:7e:06:85:04:2d:c0:
                    c2:6c:44:f4:34:2e:2a:48:d5:d4:e4:cb:81:54:7a:
                    4e:4f:50:e2:9e:30:54:f3:ac:8c:8d:90:58:d4:ac:
                    29:17:49:bc:8f:90:d4:1b:fd:cc:64:4c:25:e1:16:
                    ff:f3:38:cd:d2:2a:a9:00:3a:f3:d2:11:71:3d:5e:
                    e0:c6:c9:e2:cb:42:e3:72:4d:df:6d:3f:d6:be:3e:
                    54:fe:6d:2d:f1:7d:9a:19:89:08:0c:d5:10:36:be:
                    f6:32:50:b0:59:9d:35:ea:df:07:35:3c:aa:b3:a5:
                    77:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:19:3A:7F:4B:17:D7:E5:13:A7:A2:FB:1D:2C:E0:B2:74:C3:09:A5
            X509v3 Authority Key Identifier:
                keyid:61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d7:d8:71:5a:9d:7a:75:69:ca:e5:4d:c9:45:75:a7:d3:b4:
         48:e9:46:c5:99:df:d4:48:31:ee:09:79:94:29:02:e1:4b:2b:
         56:fa:08:aa:31:23:8d:00:b4:a1:9a:fe:b3:7e:66:51:39:cd:
         99:9c:36:26:25:5f:14:69:73:67:de:f2:ab:d2:63:a8:a2:fe:
         74:d9:a8:99:1a:d7:c8:05:c4:dd:c4:e5:0e:46:36:20:7b:4d:
         af:a9:91:b9:6a:ba:ca:5e:f0:07:f7:d2:d8:32:c1:1f:4d:f8:
         8d:b4:ac:01:17:3b:b6:25:33:ab:ca:fd:97:59:44:6e:21:a1:
         35:27:a0:ff:c0:bd:31:64:9c:1d:56:cd:71:96:46:bb:a4:3a:
         ce:f6:ba:f0:2a:5c:b4:e3:84:5a:b4:de:b8:55:ae:bd:80:9d:
         72:07:16:e7:bb:94:67:07:27:a1:ae:a8:c9:d8:5e:fb:e5:18:
         18:38:d2:9e:b1:dd:71:68:04:0b:6e:79:f2:98:f2:88:c0:28:
         cd:df:c4:6a:55:26:47:d8:0b:68:fb:f9:24:87:a8:65:c8:6f:
         a9:47:58:99:64:a3:41:61:fc:11:6c:51:91:41:1d:77:04:df:
         49:d2:c8:a3:15:87:f4:2e:d0:4e:dd:9e:f2:a3:ae:dc:7c:45:
         69:a1:91:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:41 2026 by rpki-client