Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
File:                     YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft (raw, json)
Hash identifier:          vcq+Ww+brTfGxsTFcV2vXkCOb0i0qBMueloxYRpAPwc=
Subject key identifier:   38:DD:A6:76:DB:52:C3:6A:40:53:F0:15:6D:AF:65:B1:B6:66:4E:8C
Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1
Certificate issuer:       /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1
Certificate serial:       2569
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
Manifest number:          2556
Signing time:             Thu 26 Mar 2026 15:45:20 +0000
Manifest this update:     Thu 26 Mar 2026 15:45:19 +0000
Manifest next update:     Thu 02 Apr 2026 15:45:19 +0000
Files and hashes:         1: YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl (hash: J0aJTPlSFYv9vLvxoXFGafxRdZlM1RJdwQdUe6LsYTk=)
                          2: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (hash: BM6Lva7IoWSTK1Hv52iTWPVD8QgDEeI0+e75+nUb4F4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl
                          rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9577 (0x2569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE9CC, serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1
        Validity
            Not Before: Mar 26 15:45:19 2026 GMT
            Not After : Apr  2 15:45:19 2026 GMT
        Subject: CN=69c5548f-ad81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:e6:d4:7e:01:fd:bb:02:c0:dc:06:78:bc:
                    f1:16:cc:0d:02:85:0e:9a:e3:48:80:25:11:7b:2f:
                    54:b4:52:2d:5f:6d:9a:83:68:f5:77:84:88:b3:fa:
                    f8:1a:7a:64:9a:dd:ff:8b:12:60:1d:10:3b:4a:0f:
                    1f:2a:59:e5:e3:0d:af:28:50:ba:b5:bd:c1:7e:df:
                    23:ff:d0:19:b5:ec:7d:c5:52:74:fd:2f:68:e5:36:
                    5d:cb:36:e5:2c:6f:80:05:9c:1c:fc:55:6a:08:ee:
                    07:71:4c:d4:49:db:6e:91:eb:7b:34:10:48:e8:ba:
                    e8:c5:d6:2b:91:4a:63:5f:0c:3d:c4:07:f3:20:34:
                    ed:26:e2:19:d8:a4:e1:ab:46:0f:44:d1:c3:ba:69:
                    cf:a8:30:2c:87:67:c6:fd:01:ed:0d:e1:a8:d5:1d:
                    f5:f7:ad:31:ac:ac:2f:4e:68:67:04:ef:bb:e5:f5:
                    c9:c8:bd:e8:29:8d:c8:58:49:6a:76:8c:de:f6:51:
                    64:12:8d:24:f4:7b:a7:4f:1c:70:ac:30:04:83:18:
                    5d:74:7e:84:f9:32:2b:a5:02:a6:d9:61:1a:49:25:
                    06:02:06:77:f8:d5:4f:05:2c:b3:ca:83:62:ac:11:
                    41:63:75:f4:87:46:52:5d:13:8d:9f:6a:74:b6:1f:
                    8e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DD:A6:76:DB:52:C3:6A:40:53:F0:15:6D:AF:65:B1:B6:66:4E:8C
            X509v3 Authority Key Identifier:
                keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6e:f2:7b:5c:ad:8a:60:c4:47:3a:66:55:39:a6:f5:3c:e6:
         34:3b:41:5d:df:17:dd:26:18:79:9a:9d:b8:fb:e1:a5:4a:35:
         e0:0f:6c:eb:8e:e1:2a:d4:f8:9f:aa:33:38:a7:44:ec:ff:ab:
         36:be:7b:22:3b:f0:6a:32:d9:03:6a:d4:d9:a6:75:0a:2b:8a:
         74:0f:c2:7d:3d:dc:0d:b7:f1:01:9b:b8:ee:f1:c9:e3:39:d8:
         bb:9a:9a:28:76:58:31:9a:9e:67:f3:f5:13:1f:a3:76:da:22:
         99:23:50:28:10:a1:63:2d:5b:19:b2:3a:6e:dc:cb:42:31:5b:
         55:d7:cc:da:1b:a1:5a:26:8b:18:13:40:d5:5c:11:6e:c9:0a:
         8b:c4:a1:f9:6e:af:fa:25:89:69:9d:1c:ad:f1:00:be:9e:fd:
         77:a5:8f:b1:ca:45:a9:31:14:0e:52:55:2c:51:d1:94:53:3a:
         0f:79:a3:9f:33:43:87:f0:c0:f2:dc:01:26:d7:0b:ba:3b:e5:
         75:7e:6b:a8:72:aa:63:d2:ab:7d:76:5e:cf:36:bd:cf:6d:b8:
         fd:27:dc:26:27:12:44:73:dd:66:11:59:59:2a:e3:de:10:03:
         d1:ca:3e:ff:be:8a:5d:0a:de:9b:e8:1b:c5:5c:36:7d:a2:53:
         fb:f3:fe:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:51:13 2026 by rpki-client