Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
File:                     y2yF51LVad_PHekEycvnHkg-9fI.mft (raw, json)
Hash identifier:          S7o5ITgfLmBJyRZ9R+6IxwhbRqdvJZEsIUrFwd1ToYI=
Subject key identifier:   B9:7A:B2:E7:6E:29:47:BA:7C:5E:21:7C:FF:09:EB:DC:5F:70:08:3D
Authority key identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2
Certificate issuer:       /CN=A91BC039/serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
Certificate serial:       0574
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
Manifest number:          056B
Signing time:             Tue 24 Mar 2026 23:02:27 +0000
Manifest this update:     Tue 24 Mar 2026 23:02:26 +0000
Manifest next update:     Tue 31 Mar 2026 23:02:26 +0000
Files and hashes:         1: y2yF51LVad_PHekEycvnHkg-9fI.crl (hash: oJWwxFEKVlAj8r1rUE8XnH01+q6BuvSLdLPOrQNr5TM=)
                          2: 004A745EDBB011F0904A453A4D641951.roa (hash: 0TWkmfJVbCOLiU1v9M8I2M82G17YACYNARPjaSNnjI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl
                          rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396 (0x574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC039, serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
        Validity
            Not Before: Mar 24 23:02:26 2026 GMT
            Not After : Mar 31 23:02:26 2026 GMT
        Subject: CN=69c31803-dd79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:aa:d6:a7:41:f9:05:96:4c:14:df:79:ff:cf:
                    42:43:fb:b5:51:d2:2e:c8:22:2e:62:9c:84:c3:b6:
                    9f:b5:ab:82:d1:04:d1:61:99:a7:4d:40:9b:1a:56:
                    1b:6c:61:f1:7d:4f:07:3f:f4:26:10:13:66:ba:77:
                    41:90:55:2f:50:00:ac:af:d0:4b:67:30:d1:c6:fb:
                    ee:0b:1b:3b:d1:13:b5:35:fa:14:0c:21:12:53:6c:
                    bd:09:5c:c6:b5:95:2c:10:dc:69:1d:f1:5b:09:20:
                    89:91:8a:84:a4:2d:32:31:66:f2:ac:91:3f:cb:ad:
                    f6:ae:b0:28:ab:ae:82:18:9b:6a:91:17:d7:d1:cc:
                    4e:54:47:04:36:f6:3a:55:b2:9c:2d:a0:9d:9d:7a:
                    ad:be:3a:07:38:b6:6b:d8:5b:f1:7a:b9:61:c7:73:
                    65:39:7b:d1:50:5d:9a:28:7a:14:f3:ae:3c:b6:a9:
                    39:db:73:de:29:f8:55:46:e5:c7:6c:31:53:96:e5:
                    0a:96:11:c8:06:30:67:47:3a:de:84:c8:6c:28:4b:
                    72:0e:a0:a0:88:a1:2b:03:71:15:93:a9:6e:0f:a9:
                    a5:ca:d0:2a:09:75:3b:34:0a:a0:e4:07:8c:1a:81:
                    df:4d:2e:00:ef:62:41:e3:93:d1:7a:94:12:08:38:
                    b4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7A:B2:E7:6E:29:47:BA:7C:5E:21:7C:FF:09:EB:DC:5F:70:08:3D
            X509v3 Authority Key Identifier:
                keyid:CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f4:4e:18:75:16:70:c6:91:75:33:07:5a:76:ae:a9:a2:88:
         a0:0c:a8:b3:50:8a:2b:0c:c6:79:ed:92:cb:5b:82:92:a5:74:
         c9:3a:d6:25:0f:c7:ae:d7:09:a0:f7:91:05:e6:a3:25:4b:fb:
         d1:c8:23:ae:ab:3a:19:f0:93:b1:e3:77:fd:b8:38:85:43:38:
         9b:fd:ed:1f:f3:00:fb:68:61:b7:1d:2e:a0:59:05:d5:9f:80:
         57:0b:86:a6:74:e6:6d:af:37:65:ed:85:37:41:74:cd:b7:81:
         f3:81:c2:b1:11:e2:b2:a9:fc:b8:2e:31:89:fb:d0:43:9d:9a:
         58:07:d0:c5:c3:56:b5:6e:60:b2:2d:ff:fe:83:e8:9a:3c:5d:
         75:d9:aa:6b:82:a7:58:60:62:23:76:3a:46:c7:1b:cf:82:ce:
         46:1d:fc:0b:c9:f3:ab:2b:df:57:6e:64:e3:f6:f9:e5:0a:c7:
         08:75:8e:d5:c5:bd:fa:54:92:50:79:51:d3:17:fa:d3:eb:89:
         ed:c6:67:27:01:ab:f4:8e:b0:0c:40:47:1c:08:d2:c6:b9:6b:
         64:2d:4e:53:05:2d:c0:fb:22:a0:f9:50:9e:ed:6b:f8:01:ce:
         62:2d:2d:e4:a8:0d:bc:95:f8:0d:d1:93:7f:ca:5f:af:51:85:
         29:d1:65:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMwMzkxMTAvBgNVBAUTKENCNkM4NUU3NTJENTY5REZDRjFERTkwNEM5Q0JFNzFF
NDgzRUY1RjIwHhcNMjYwMzI0MjMwMjI2WhcNMjYwMzMxMjMwMjI2WjAYMRYwFAYD
VQQDEw02OWMzMTgwMy1kZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnKrWp0H5BZZMFN95/89CQ/u1UdIuyCIuYpyEw7aftauC0QTRYZmnTUCbGlYb
bGHxfU8HP/QmEBNmundBkFUvUACsr9BLZzDRxvvuCxs70RO1NfoUDCESU2y9CVzG
tZUsENxpHfFbCSCJkYqEpC0yMWbyrJE/y632rrAoq66CGJtqkRfX0cxOVEcENvY6
VbKcLaCdnXqtvjoHOLZr2Fvxerlhx3NlOXvRUF2aKHoU8648tqk523PeKfhVRuXH
bDFTluUKlhHIBjBnRzrehMhsKEtyDqCgiKErA3EVk6luD6mlytAqCXU7NAqg5AeM
GoHfTS4A72JB45PRepQSCDi0vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLl6sudu
KUe6fF4hfP8J69xfcAg9MB8GA1UdIwQYMBaAFMtshedS1Wnfzx3pBMnL5x5IPvXy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzAzOS9CQjUzMjNFODI1
QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFkX1BIZWtFeWN2bkhrZy05
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kyeUY1MUxWYWRfUEhla0V5Y3ZuSGtnLTlmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzAzOS9CQjUzMjNFODI1QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFk
X1BIZWtFeWN2bkhrZy05ZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIfROGHUWcMaRdTMHWnauqaKIoAyos1CKKwzGee2Sy1uCkqV0yTrWJQ/HrtcJ
oPeRBeajJUv70cgjrqs6GfCTseN3/bg4hUM4m/3tH/MA+2hhtx0uoFkF1Z+AVwuG
pnTmba83Ze2FN0F0zbeB84HCsRHisqn8uC4xifvQQ52aWAfQxcNWtW5gsi3//oPo
mjxdddmqa4KnWGBiI3Y6Rscbz4LORh38C8nzqyvfV25k4/b55QrHCHWO1cW9+lSS
UHlR0xf60+uJ7cZnJwGr9I6wDEBHHAjSxrlrZC1OUwUtwPsioPlQnu1r+AHOYi0t
5KgNvJX4DdGTf8pfr1GFKdFlOA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:51:06 2026 by rpki-client