Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
File:                     1ybobzALJko1PClnPgdxb1RUteI.mft (raw, json)
Hash identifier:          trB3OnCZOZxEfl/tKn31tp9IoC+GF0xoErtpjK5+Pg4=
Subject key identifier:   37:2F:CB:49:FA:94:76:E5:9A:4A:87:46:D7:4B:26:CC:23:A6:B5:F5
Authority key identifier: D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
Certificate issuer:       /CN=A91B4053/serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
Manifest number:          90
Signing time:             Wed 25 Mar 2026 06:44:06 +0000
Manifest this update:     Wed 25 Mar 2026 06:44:06 +0000
Manifest next update:     Wed 01 Apr 2026 06:44:06 +0000
Files and hashes:         1: 1ybobzALJko1PClnPgdxb1RUteI.crl (hash: OXbZsPlLfNStOaWsYN324/lWz5LUHpvQrBcsfL84Fqc=)
                          2: D28B7DD450E411F081600061C4F9AE02.roa (hash: Y6rYOMG7RxOkx0Rcd3xNkDAcaCpb3aXvFYNyebOyITc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl
                          rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4053, serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
        Validity
            Not Before: Mar 25 06:44:06 2026 GMT
            Not After : Apr  1 06:44:06 2026 GMT
        Subject: CN=69c38436-03f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3a:34:22:e9:f5:fa:97:4a:60:97:b7:7b:55:
                    99:01:68:d4:59:93:8c:bf:d7:51:f4:ac:02:96:c3:
                    1a:87:a5:e9:82:3d:65:c2:98:db:0f:e7:10:02:f0:
                    7d:e5:ea:3f:3e:5c:bb:ef:14:9e:b5:66:20:23:21:
                    2b:b6:3c:60:5a:bb:14:e2:97:11:48:69:2d:d2:86:
                    a9:95:f1:db:53:cd:44:fb:bf:04:4c:2c:f8:5e:1a:
                    85:65:0c:53:2a:2d:8c:eb:fb:ea:61:a9:40:81:09:
                    60:51:d0:13:33:a4:6b:5b:eb:a2:3d:50:b4:74:03:
                    4b:71:ba:aa:11:14:d3:5c:37:25:c9:51:99:72:d6:
                    48:24:bd:4d:d9:09:ca:50:05:8f:d9:27:48:fe:59:
                    f8:6b:0d:bc:e6:31:96:14:2d:9f:7e:fa:90:14:31:
                    65:fa:db:66:07:98:a8:38:f7:ce:1f:0f:3b:82:9b:
                    70:ef:76:06:0f:63:66:ab:7b:82:35:57:0b:7a:66:
                    c1:c3:af:8f:cb:e3:cd:9d:82:cd:aa:5f:33:a4:6e:
                    b0:d9:97:db:d0:c1:cc:38:36:bb:f8:db:37:40:cf:
                    fc:b2:b1:d7:f5:df:71:df:11:fd:d5:6d:b8:34:aa:
                    b4:1a:8d:16:4a:63:d6:29:85:fa:47:a2:52:90:a1:
                    0d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2F:CB:49:FA:94:76:E5:9A:4A:87:46:D7:4B:26:CC:23:A6:B5:F5
            X509v3 Authority Key Identifier:
                keyid:D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:1e:41:ef:cd:f6:ba:09:d8:ed:20:b8:79:bc:ca:66:f3:4f:
         8c:68:0b:d7:75:fb:45:f2:15:3a:bd:57:40:39:03:7f:d5:59:
         80:61:19:7c:a1:89:3c:29:62:de:15:01:20:ae:95:da:24:85:
         d8:d2:72:0e:1d:f3:38:c2:93:56:02:d3:32:31:86:b7:71:0b:
         9c:00:8f:37:4d:ad:f1:c3:69:7f:f6:10:4d:b9:21:0e:91:7c:
         96:f8:45:d0:b0:31:01:a9:fb:07:cf:4d:89:1b:dd:75:27:33:
         3f:0e:40:74:5a:79:4e:07:3e:1c:74:f4:9a:da:42:3c:23:de:
         b5:e0:4f:a0:f5:92:d4:e5:d5:19:80:c9:35:66:3c:d0:7c:d9:
         17:4c:11:4b:67:c4:0d:d5:36:ce:b1:b5:5e:52:f0:ff:27:f2:
         21:3c:31:82:cc:a1:c9:4f:cf:b9:1a:e2:ea:e9:1f:c1:19:b3:
         8c:c1:60:9e:a5:d1:90:d9:8e:19:d9:be:cf:e3:2d:2e:f4:b6:
         c7:21:62:15:63:10:bb:95:81:e9:1c:a4:46:f5:19:da:ad:41:
         35:b4:5f:46:d4:95:24:8e:7a:04:19:ff:f1:15:44:83:cb:79:
         37:79:41:d3:40:75:0e:65:cb:9d:09:3b:24:71:e5:6d:31:cf:
         c2:37:ad:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQwNTMxMTAvBgNVBAUTKEQ3MjZFODZGMzAwQjI2NEEzNTNDMjk2NzNFMDc3MTZG
NTQ1NEI1RTIwHhcNMjYwMzI1MDY0NDA2WhcNMjYwNDAxMDY0NDA2WjAYMRYwFAYD
VQQDEw02OWMzODQzNi0wM2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2jo0Iun1+pdKYJe3e1WZAWjUWZOMv9dR9KwClsMah6Xpgj1lwpjbD+cQAvB9
5eo/Ply77xSetWYgIyErtjxgWrsU4pcRSGkt0oaplfHbU81E+78ETCz4XhqFZQxT
Ki2M6/vqYalAgQlgUdATM6RrW+uiPVC0dANLcbqqERTTXDclyVGZctZIJL1N2QnK
UAWP2SdI/ln4aw285jGWFC2ffvqQFDFl+ttmB5ioOPfOHw87gptw73YGD2Nmq3uC
NVcLembBw6+Py+PNnYLNql8zpG6w2Zfb0MHMODa7+Ns3QM/8srHX9d9x3xH91W24
NKq0Go0WSmPWKYX6R6JSkKENYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDcvy0n6
lHblmkqHRtdLJswjprX1MB8GA1UdIwQYMBaAFNcm6G8wCyZKNTwpZz4HcW9UVLXi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDA1My8zRURCODNGQzUw
RTExMUYwOTFDNEJCNzRDNEY5QUUwMi8xeWJvYnpBTEprbzFQQ2xuUGdkeGIxUlV0
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzF5Ym9iekFMSmtvMVBDbG5QZ2R4YjFSVXRlSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDA1My8zRURCODNGQzUwRTExMUYwOTFDNEJCNzRDNEY5QUUwMi8xeWJvYnpBTEpr
bzFQQ2xuUGdkeGIxUlV0ZUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeB5B7832ugnY7SC4ebzKZvNPjGgL13X7RfIVOr1XQDkDf9VZgGEZfKGJPCli
3hUBIK6V2iSF2NJyDh3zOMKTVgLTMjGGt3ELnACPN02t8cNpf/YQTbkhDpF8lvhF
0LAxAan7B89NiRvddSczPw5AdFp5Tgc+HHT0mtpCPCPeteBPoPWS1OXVGYDJNWY8
0HzZF0wRS2fEDdU2zrG1XlLw/yfyITwxgsyhyU/PuRri6ukfwRmzjMFgnqXRkNmO
Gdm+z+MtLvS2xyFiFWMQu5WB6RykRvUZ2q1BNbRfRtSVJI56BBn/8RVEg8t5N3lB
00B1DmXLnQk7JHHlbTHPwjet/w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:00 2026 by rpki-client