Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
File:                     0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json)
Hash identifier:          qsO1TGLHDbcVFvXPUhYl6zsy0JoyVkwC682ePCSDHiA=
Subject key identifier:   C2:8A:F9:75:AA:CA:37:B3:FC:A9:22:2E:BE:5F:9A:17:E3:27:2E:E7
Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
Certificate issuer:       /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Certificate serial:       3475
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
Manifest number:          3463
Signing time:             Tue 24 Mar 2026 15:16:50 +0000
Manifest this update:     Tue 24 Mar 2026 15:16:50 +0000
Manifest next update:     Tue 31 Mar 2026 15:16:50 +0000
Files and hashes:         1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: 37AV/MbJr7EMIX/92ZFnc5CGAkj/wgLO2lB9aC9vE9E=)
                          2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ej83i8NuEYKasou7W/9D745hYaGsqd2oMKEiRlHzF4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13429 (0x3475)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
        Validity
            Not Before: Mar 24 15:16:50 2026 GMT
            Not After : Mar 31 15:16:50 2026 GMT
        Subject: CN=69c2aae2-41e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e0:c7:82:bc:7e:95:16:c1:f4:14:f8:cb:96:
                    38:98:ba:0e:3a:64:11:7f:c7:bd:63:97:8c:14:c4:
                    84:53:f2:d9:ef:5d:8d:0a:2d:63:a8:ff:d9:80:f1:
                    51:5f:e6:a7:01:4b:9d:1e:44:ba:a7:d9:c9:c5:fc:
                    78:e2:f1:b3:22:b9:6f:18:0c:a3:c8:05:0a:8b:28:
                    52:7d:07:89:e1:70:c5:62:11:a1:0c:42:19:05:ca:
                    ae:85:ec:73:83:7d:8f:f4:d6:df:78:e3:2f:11:a8:
                    cf:7c:24:d9:78:94:85:4e:a8:c1:43:d3:ba:88:c5:
                    6c:98:5d:b6:24:0c:ec:88:bb:5d:40:8a:cf:c4:05:
                    cb:2e:7b:72:c6:0a:de:c3:13:ab:77:6f:ee:75:5a:
                    d0:b2:90:38:c0:30:49:4f:e5:bc:6b:db:54:99:7d:
                    bb:b8:73:4f:4c:e9:12:0d:6b:1b:46:63:59:0a:32:
                    73:02:41:50:22:0a:19:39:18:ce:dd:b9:70:2b:ea:
                    91:74:e5:0f:8d:2f:c7:4e:66:a9:64:2c:ec:79:68:
                    c5:e7:22:76:07:e6:9e:15:f2:02:f9:ad:cf:64:b1:
                    36:81:7b:6a:f9:92:be:63:bc:1f:70:75:0d:8c:d9:
                    cf:6f:46:19:ac:21:94:ad:83:cc:55:9d:8c:17:ae:
                    e6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8A:F9:75:AA:CA:37:B3:FC:A9:22:2E:BE:5F:9A:17:E3:27:2E:E7
            X509v3 Authority Key Identifier:
                keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f2:6b:1b:19:73:e8:60:e9:c8:7a:9e:0f:b9:73:a5:b9:c0:
         f2:53:5c:92:16:cf:59:66:ac:53:c4:01:a2:3b:31:4a:25:21:
         bc:80:ff:c4:96:aa:ee:40:a2:36:91:79:bf:3f:ec:7a:bc:39:
         95:1a:7c:2f:36:d6:f9:63:33:9d:b4:f6:fe:ce:f2:9f:94:33:
         59:f8:5d:49:ca:ab:4a:9e:65:f5:67:fb:6d:7d:07:7b:07:2a:
         87:53:d4:63:17:cf:93:bb:20:6d:a7:44:c9:56:cb:35:ef:9f:
         78:76:e5:f8:8b:d0:b2:e3:9f:c1:b2:f9:3f:24:a8:97:67:cc:
         2f:06:b8:7f:ff:ed:59:40:43:a7:20:4f:8f:a3:26:15:c2:82:
         68:f7:d5:fd:92:86:89:cf:e9:3a:de:b2:23:f6:da:74:e9:3b:
         3e:ac:07:df:ab:e3:8f:86:57:74:ca:cb:91:c3:cf:59:68:f4:
         73:82:d4:02:ea:63:9b:af:d3:79:a5:7c:8f:88:69:3d:0c:49:
         fa:86:0f:cf:4c:90:d8:c6:ef:a8:f5:88:c3:be:d4:87:20:0e:
         a4:fe:f8:aa:ff:5e:61:12:f6:e1:ee:2d:f1:20:3c:43:65:66:
         a0:67:a9:00:16:9f:b5:f7:a3:17:eb:c4:d5:0a:0b:39:bc:1f:
         0e:7c:3b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:48:45 2026 by rpki-client