Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
File:                     yomQiVxPTQ5f49-BWICyA1kPsno.mft (raw, json)
Hash identifier:          t6nloBv4H0R8xWcIpYX0LGdAbUqGFHY9qghQd9JMe8Y=
Subject key identifier:   65:3C:39:C6:50:84:BE:58:96:53:A5:37:D4:88:1F:77:6B:9F:18:92
Authority key identifier: CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A
Certificate issuer:       /CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
Manifest number:          0747
Signing time:             Tue 24 Mar 2026 23:04:44 +0000
Manifest this update:     Tue 24 Mar 2026 23:04:44 +0000
Manifest next update:     Tue 31 Mar 2026 23:04:44 +0000
Files and hashes:         1: yomQiVxPTQ5f49-BWICyA1kPsno.crl (hash: JOkgD0Hu8vIWXFIiY97He1CC7tdqaWx2wPxaOkECoEs=)
                          2: C885D0C8374B11EEA2157233C4F9AE02.roa (hash: gEivaAocnPzbfGGrI76pBSo4q7wx40/Yh+2RzkOkzLo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl
                          rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194A8C, serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A
        Validity
            Not Before: Mar 24 23:04:44 2026 GMT
            Not After : Mar 31 23:04:44 2026 GMT
        Subject: CN=69c3188c-e39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:b9:02:e4:cf:56:f8:5d:80:bf:4e:a8:f0:
                    d1:87:aa:27:3c:36:c5:eb:f3:ce:3a:5b:cf:61:ed:
                    69:9a:22:8e:01:c1:30:57:fc:67:65:60:6b:79:bc:
                    80:65:bf:a6:5e:32:3e:79:73:d7:36:7a:f0:8d:48:
                    c6:26:78:37:69:82:b8:74:7c:c7:73:e4:ae:af:20:
                    59:6c:e5:e4:d6:6d:f4:ea:bc:f6:19:e3:75:b4:be:
                    68:0e:9b:52:aa:9a:9a:6b:f7:61:1d:b5:c6:2e:2b:
                    8d:92:7b:2c:c2:4e:05:fe:33:a3:aa:8f:e5:1e:f7:
                    06:35:76:86:e3:ed:d8:e3:5d:6d:f1:26:39:88:ef:
                    48:62:15:ba:d0:d3:a0:c8:19:ad:c0:7b:52:ce:2e:
                    70:27:79:aa:42:02:77:49:74:10:8d:6e:07:9b:a2:
                    a1:53:45:3f:40:d7:5a:19:29:49:f3:17:80:1a:91:
                    20:02:c6:9b:b7:7f:23:e5:19:bf:27:aa:cb:0a:fa:
                    cb:15:e8:b0:d7:81:d1:0e:1a:dc:28:bd:ad:ff:4a:
                    32:31:10:14:48:0c:7a:c9:44:f3:47:5a:68:7a:f2:
                    36:5d:ea:91:06:8f:9a:86:e9:76:7f:20:f2:79:5d:
                    56:bc:af:6a:09:45:72:02:0c:15:dc:ce:aa:77:53:
                    42:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3C:39:C6:50:84:BE:58:96:53:A5:37:D4:88:1F:77:6B:9F:18:92
            X509v3 Authority Key Identifier:
                keyid:CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:45:24:84:83:89:a8:db:83:86:7e:b7:6a:dc:1f:37:6b:03:
         cf:7c:98:98:1b:a0:57:17:20:55:5d:0d:55:15:e7:e9:ee:94:
         bc:0d:a7:78:c3:2d:41:df:22:1c:f1:b1:32:4e:97:fa:18:4a:
         24:b1:63:b7:dc:ea:15:d8:85:23:55:c5:9a:aa:be:46:c4:48:
         00:27:27:7f:07:67:84:bc:ad:ef:a8:2a:bd:77:4b:71:f2:57:
         8f:45:48:ee:fc:ab:37:d4:91:68:c5:bb:69:46:0d:9b:04:75:
         9b:0d:4a:2a:82:21:e7:ed:35:12:94:85:83:a9:28:91:75:f8:
         55:4a:33:ba:2f:3a:a9:11:16:dd:d1:90:cb:22:1c:1b:58:17:
         8a:42:af:ea:2d:ff:c9:95:a2:80:7c:23:3d:52:0b:a2:3b:05:
         17:84:6a:2d:79:c7:3e:2a:8e:a5:d3:79:17:b2:c5:ed:30:1b:
         ab:dc:f4:bf:76:44:6e:e9:fa:88:65:14:be:bd:b1:d7:83:66:
         8d:f1:b3:ca:2b:1c:23:a3:ad:31:8f:63:39:45:aa:7f:6a:19:
         93:ae:f2:05:4e:bf:35:8a:6f:dc:a9:73:08:30:95:d7:65:13:
         2a:d7:28:ea:e1:38:90:0b:b8:fa:16:1d:1e:24:fe:1e:1d:4c:
         d5:2d:39:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:30 2026 by rpki-client