Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
File:                     yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json)
Hash identifier:          dsJXsmPyXG+1FxGCvzndcAyjaRWExqx+LxSanv3go44=
Subject key identifier:   6F:51:8C:24:C7:F0:15:2A:7E:A8:5A:2D:9E:51:27:A0:9F:53:7C:1C
Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
Certificate issuer:       /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Certificate serial:       0EDE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
Manifest number:          20B8
Signing time:             Tue 24 Mar 2026 17:02:24 +0000
Manifest this update:     Tue 24 Mar 2026 17:02:24 +0000
Manifest next update:     Tue 31 Mar 2026 17:02:24 +0000
Files and hashes:         1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: OkbU4FwxLysF6dW0I/P8BFSeJoUV/dRrupGktsPcxR8=)
                          2: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: FStnmuvAhEZrbfpobk2t5cZMbtbEpQcJCfPnl30kvn4=)
                          3: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: vwjjv+5sqcKmdcJ+2TblUGDFKJ/vFoOagGQtoy9fEng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl
                          rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3806 (0xede)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
        Validity
            Not Before: Mar 24 17:02:24 2026 GMT
            Not After : Mar 31 17:02:24 2026 GMT
        Subject: CN=69c2c3a0-fcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:02:ee:07:cf:62:58:1a:08:94:c9:5b:ba:a2:
                    a5:90:e7:48:f7:dd:22:d5:99:34:6e:d3:a8:f4:6f:
                    60:a7:da:f1:b6:2b:96:1c:a0:75:07:fc:09:51:f2:
                    81:5d:67:44:f0:de:b2:88:40:8c:85:d0:6a:46:77:
                    37:ac:a1:74:58:e7:06:87:ff:b2:99:a9:71:8a:8c:
                    01:29:e8:68:3d:ba:be:00:b9:84:00:d8:f2:18:30:
                    68:d0:74:61:a1:e2:5e:2d:c2:3a:27:17:0d:60:44:
                    38:d4:51:9d:21:36:7d:3a:bf:02:f0:fc:e2:da:f0:
                    bc:5c:80:1a:ea:e6:6e:03:d6:d3:5e:7c:c0:97:e7:
                    8e:1a:0f:61:51:7b:66:18:86:2e:e6:ac:5c:0e:ca:
                    92:2f:89:e7:0a:fd:59:b0:2d:02:d0:43:42:1f:e2:
                    2f:78:98:46:51:66:89:58:03:ae:52:f3:82:43:57:
                    3b:c2:7e:3a:39:c6:44:08:1f:ae:1c:a1:79:49:aa:
                    bb:e8:cc:4e:34:65:b5:53:8f:0c:ec:03:d3:e4:10:
                    80:36:a6:93:61:cd:aa:12:89:b6:7e:62:6f:b6:6a:
                    f2:46:9c:c0:82:3f:23:90:94:ce:fa:9f:3b:cc:0e:
                    c8:17:45:7b:7f:bc:7c:6a:3a:11:2e:4e:65:9f:27:
                    2c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:51:8C:24:C7:F0:15:2A:7E:A8:5A:2D:9E:51:27:A0:9F:53:7C:1C
            X509v3 Authority Key Identifier:
                keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e6:36:ad:f9:85:66:40:ad:6d:69:19:a4:e8:7a:71:9c:8c:
         94:68:af:36:6a:75:1e:dd:3d:e0:55:33:01:9f:bb:12:42:a9:
         31:fc:14:61:a6:5f:9c:a6:e7:bd:75:af:5c:52:63:a1:50:1c:
         90:f3:f0:d4:6e:85:43:3e:77:ac:74:9a:b5:fa:d1:57:a9:43:
         15:53:3e:7b:48:6a:ca:95:14:d6:b1:ef:ce:ea:f0:35:95:58:
         74:3e:aa:9f:83:04:f0:f2:ef:c8:36:92:88:91:c1:af:82:36:
         4c:d9:46:8b:5f:0f:e2:8d:5f:fd:6a:85:3d:53:5a:11:e0:0e:
         5d:73:a3:d9:d5:17:2c:00:ac:5d:5e:9d:d4:a9:51:f2:c0:7e:
         f0:7a:43:ac:e7:07:6c:a6:b6:33:8a:d0:08:26:03:10:2b:b7:
         5e:f4:b6:b9:d3:0f:eb:08:5b:88:65:54:a4:e5:dc:93:5a:f2:
         89:cc:e7:c9:9e:c9:99:93:92:17:a0:1f:9c:cf:1b:36:39:5a:
         5a:bc:ab:48:75:35:0c:6e:8f:67:f8:bc:3e:92:4c:ce:9f:dd:
         76:fe:44:c5:c7:aa:5d:13:c3:e3:6a:08:2d:a9:a1:a5:5c:9d:
         9a:c0:81:8d:4b:e6:52:48:a4:a1:92:ba:9b:98:38:5d:6e:de:
         db:2a:a9:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0
QTdERUU5ODYwHhcNMjYwMzI0MTcwMjI0WhcNMjYwMzMxMTcwMjI0WjAYMRYwFAYD
VQQDEw02OWMyYzNhMC1mY2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjQLuB89iWBoIlMlbuqKlkOdI990i1Zk0btOo9G9gp9rxtiuWHKB1B/wJUfKB
XWdE8N6yiECMhdBqRnc3rKF0WOcGh/+ymalxiowBKehoPbq+ALmEANjyGDBo0HRh
oeJeLcI6JxcNYEQ41FGdITZ9Or8C8Pzi2vC8XIAa6uZuA9bTXnzAl+eOGg9hUXtm
GIYu5qxcDsqSL4nnCv1ZsC0C0ENCH+IveJhGUWaJWAOuUvOCQ1c7wn46OcZECB+u
HKF5Saq76MxONGW1U48M7APT5BCANqaTYc2qEom2fmJvtmryRpzAgj8jkJTO+p87
zA7IF0V7f7x8ajoRLk5lnycs6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG9RjCTH
8BUqfqhaLZ5RJ6CfU3wcMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF
QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkx
alNnM2xHMWdZX0ZLZmU2WVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAduY2rfmFZkCtbWkZpOh6cZyMlGivNmp1Ht094FUzAZ+7EkKpMfwUYaZfnKbn
vXWvXFJjoVAckPPw1G6FQz53rHSatfrRV6lDFVM+e0hqypUU1rHvzurwNZVYdD6q
n4ME8PLvyDaSiJHBr4I2TNlGi18P4o1f/WqFPVNaEeAOXXOj2dUXLACsXV6d1KlR
8sB+8HpDrOcHbKa2M4rQCCYDECu3XvS2udMP6whbiGVUpOXck1ryicznyZ7JmZOS
F6AfnM8bNjlaWryrSHU1DG6PZ/i8PpJMzp/ddv5ExceqXRPD42oILamhpVydmsCB
jUvmUkikoZK6m5g4XW7e2yqpBQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:41 2026 by rpki-client