Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
File:                     ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft (raw, json)
Hash identifier:          za1xQvPslCjERtlaizKQWFdUWUrni/2inHL6F5CpGQQ=
Subject key identifier:   EC:AC:D3:A7:6F:61:A2:8A:15:BF:91:10:8C:AF:45:B4:79:D5:74:DC
Authority key identifier: C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6
Certificate issuer:       /CN=A9199656/serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
Manifest number:          AC
Signing time:             Wed 25 Mar 2026 06:23:43 +0000
Manifest this update:     Wed 25 Mar 2026 06:23:43 +0000
Manifest next update:     Wed 01 Apr 2026 06:23:43 +0000
Files and hashes:         1: ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl (hash: 3rwWInW+akJxAQ4JXqm5DjjYVnXt79amtAv1eALuG94=)
                          2: 45D237A423E211F0A5DCED27C4F9AE02.roa (hash: 8GXEqrMUHkf0rJui+jswzfKlfWS1wjU9u2oV8cCwQ60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl
                          rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199656, serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
        Validity
            Not Before: Mar 25 06:23:43 2026 GMT
            Not After : Apr  1 06:23:43 2026 GMT
        Subject: CN=69c37f6f-e821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:27:13:41:de:ad:14:48:f6:3a:b1:24:7d:
                    9f:5f:73:3f:2e:65:f6:68:5f:0c:04:a5:f7:9e:94:
                    e7:51:2e:d2:45:0c:b6:26:ea:17:21:78:e4:1b:2e:
                    cf:6c:d8:f6:b3:0d:2e:d6:67:b3:03:52:cb:92:f6:
                    ce:26:30:3d:13:2c:ee:d5:ef:11:a5:44:c8:42:f3:
                    0e:6d:fa:4f:6f:65:52:4c:f5:33:46:a5:ed:3f:73:
                    51:d9:e9:0d:e4:67:9a:27:fa:2a:62:77:1d:82:04:
                    b4:37:0c:d3:48:b3:7c:7b:c7:66:48:e4:3b:5d:9d:
                    e9:24:6c:7b:47:f8:0e:9e:6b:41:60:6b:a8:8e:44:
                    12:bf:95:9a:59:60:2c:41:bd:67:f2:5a:a7:7f:3a:
                    91:32:29:b5:a1:f4:6c:d7:17:a5:01:b6:74:2a:8f:
                    6e:6f:db:ea:c6:47:57:9b:ea:1e:b4:09:c8:cc:7e:
                    96:8d:61:cf:a1:b3:c7:62:fc:c2:41:e0:41:22:8a:
                    3c:b2:81:45:51:39:37:1e:28:ff:7f:2f:7c:43:70:
                    eb:07:53:43:09:ac:52:ab:60:66:52:00:57:9b:f1:
                    ee:ef:19:63:56:66:77:bf:9c:c9:0c:65:b1:15:10:
                    18:16:64:cd:02:a7:a0:22:13:19:b3:21:38:8c:b1:
                    91:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AC:D3:A7:6F:61:A2:8A:15:BF:91:10:8C:AF:45:B4:79:D5:74:DC
            X509v3 Authority Key Identifier:
                keyid:C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:eb:fb:19:ca:73:2e:21:e9:65:ca:8a:81:47:84:e3:37:8b:
         ac:73:a9:a4:30:28:19:fe:5d:74:90:1a:8f:04:77:a2:ba:dc:
         ef:e2:00:f1:d5:4d:22:3f:82:79:94:8b:2b:c9:8c:6c:12:6c:
         df:07:ef:e8:78:67:a5:33:b7:2f:dd:5b:4a:ed:37:fd:10:47:
         df:99:85:06:70:cb:bb:90:f9:2b:18:81:80:41:01:c9:4b:86:
         fe:a2:48:c2:9f:98:95:46:14:d2:17:91:bd:75:95:04:7a:66:
         2a:ba:61:94:44:21:c3:bf:77:d3:97:a2:f9:ba:42:26:37:62:
         c2:e9:ba:90:82:3f:d2:0f:9d:87:c2:cc:64:1b:29:4d:31:9d:
         9d:05:9f:0e:ab:cf:93:5d:d7:15:5d:a1:f4:a4:21:5c:fc:2d:
         01:e4:cd:c7:f7:36:69:7b:ad:8f:46:be:5e:a3:13:5a:97:86:
         01:5d:41:d4:65:ca:07:45:01:95:a0:56:01:88:ac:79:59:7f:
         5a:44:31:b1:c6:b6:53:f1:c7:c6:44:c2:86:37:ff:0d:27:fd:
         9f:ed:99:f2:6b:bd:cf:90:54:d5:e0:f5:bb:e1:02:d2:37:9b:
         fd:35:08:72:e9:a9:61:b8:a0:bf:38:d2:24:f8:f9:b0:44:e6:
         cb:33:22:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:07 2026 by rpki-client