Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
File:                     ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json)
Hash identifier:          kFgZQ/pLzK1kyxqbHDKTOHJYlVnVe486rorqMhnQFcM=
Subject key identifier:   30:DE:9C:A4:FC:5F:E0:76:7D:31:C6:EA:06:4F:97:E5:32:EE:A8:38
Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3
Certificate issuer:       /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
Certificate serial:       0C0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
Manifest number:          0BED
Signing time:             Tue 24 Mar 2026 18:44:21 +0000
Manifest this update:     Tue 24 Mar 2026 18:44:20 +0000
Manifest next update:     Tue 31 Mar 2026 18:44:20 +0000
Files and hashes:         1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: ky8BVTIrM/WSXgIrMHxiHTOaMWSYZiUWxQZagQHgP+E=)
                          2: 6AC5AB5CEAB811F088FEC0005D6F56BC.roa (hash: GCpn4gmc0QpPSz7cXybRJq63rDVbixPSMbZl0hH07Xg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl
                          rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3084 (0xc0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2C43, serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
        Validity
            Not Before: Mar 24 18:44:20 2026 GMT
            Not After : Mar 31 18:44:20 2026 GMT
        Subject: CN=69c2db85-ca57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:42:fd:89:af:4b:91:d9:d8:85:3d:20:b2:ca:
                    6a:ed:64:a2:a3:5d:32:c8:f0:54:7f:33:f5:85:45:
                    e9:69:19:ad:28:b6:fc:83:19:df:4c:ed:f2:59:03:
                    3b:81:ae:f1:7f:d3:e4:79:47:e4:ed:41:46:a8:f2:
                    87:ed:05:96:a6:7b:19:7d:b4:79:a6:e1:14:db:00:
                    64:fd:05:cd:8b:b1:c9:59:ae:5e:75:a8:c9:ee:3e:
                    74:b3:14:82:5f:b5:c1:69:24:ef:e2:c4:3a:02:52:
                    ed:a6:27:40:fd:a8:60:ac:75:82:0e:ff:d4:08:90:
                    c7:b6:3b:c1:ea:42:a8:25:62:8b:62:f8:a1:c7:67:
                    a1:be:8f:ce:49:eb:9f:20:df:e4:df:c6:61:93:55:
                    78:7b:05:66:27:a5:37:81:07:dc:04:fc:3d:b0:77:
                    4e:83:7f:b7:a9:b5:6b:db:90:f6:10:8d:42:f7:f1:
                    72:18:09:f9:a5:a5:fb:e9:f9:67:69:54:3f:34:73:
                    ff:7f:dc:7c:55:7d:94:80:e5:4b:48:b2:02:87:83:
                    14:9a:d2:fd:ed:fa:b0:e1:6f:64:05:4f:27:00:81:
                    71:99:a2:08:bc:43:cb:27:77:d5:39:cc:df:22:16:
                    7e:d1:bd:cc:3a:05:a2:33:6d:0c:a0:6a:62:c0:e6:
                    3a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DE:9C:A4:FC:5F:E0:76:7D:31:C6:EA:06:4F:97:E5:32:EE:A8:38
            X509v3 Authority Key Identifier:
                keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:01:dc:5f:02:4e:9c:6f:06:ff:d8:b1:6d:bb:66:02:77:5c:
         50:d6:df:2a:0b:d8:a0:a3:8e:23:c8:ae:67:95:3c:ac:c0:7e:
         51:97:d1:46:87:4c:8b:50:e3:c6:e1:27:ef:b9:4a:92:b2:0a:
         d3:ac:18:27:1f:4a:46:7d:e8:ad:52:fa:09:35:76:f0:cc:32:
         48:65:ce:ac:c2:14:58:e2:4e:ad:09:cc:bd:4d:6c:34:72:b1:
         ed:34:1c:88:64:cb:ca:60:ac:d9:ec:22:a5:cf:59:38:e1:9f:
         56:36:43:51:f2:4e:64:ab:70:d5:c5:40:7a:83:aa:f0:68:45:
         48:ba:ca:8f:63:88:5c:96:30:69:f7:70:2a:dd:6d:c6:fe:83:
         12:07:8c:3f:15:0b:d1:82:82:54:23:fc:8d:2a:d0:3b:eb:8e:
         9e:29:89:52:62:d2:8d:72:75:c9:f1:b6:91:ff:d7:31:98:8c:
         db:7d:c9:8e:05:27:5b:2b:a6:f8:31:74:c6:10:f4:30:86:f4:
         1c:d6:6f:d8:6a:c4:15:2f:16:86:a2:d3:c4:91:e7:d5:ac:99:
         60:5f:81:74:d6:f2:0e:9e:fb:56:f5:22:72:cf:63:02:4d:9e:
         fe:12:c1:0d:9f:8c:86:85:d2:dd:bf:b4:a0:07:30:ab:14:fe:
         67:69:00:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:19 2026 by rpki-client