Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
File:                     YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft (raw, json)
Hash identifier:          4lOVCSsyPV4/k86yl43NNlUc3iwRm98rO9nEjzeeiBM=
Subject key identifier:   9B:3E:5C:02:6B:E5:0D:3C:DB:C2:3D:96:0A:04:23:78:74:2E:B4:2E
Authority key identifier: 61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC
Certificate issuer:       /CN=A91E5832/serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
Manifest number:          E3
Signing time:             Wed 25 Mar 2026 05:43:25 +0000
Manifest this update:     Wed 25 Mar 2026 05:43:25 +0000
Manifest next update:     Wed 01 Apr 2026 05:43:25 +0000
Files and hashes:         1: YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl (hash: xmifPn3/sqbB2oNP4vA9CoaiHiEr/e11UDVrK2fAeyw=)
                          2: A947EC6ED0BA11EFB7A6B027C4F9AE02.roa (hash: rcro9dP46E34GMHce4QAeTN8arZ/RvTtUrO6lFBK5gg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl
                          rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:43:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5832, serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
        Validity
            Not Before: Mar 25 05:43:25 2026 GMT
            Not After : Apr  1 05:43:25 2026 GMT
        Subject: CN=69c375fd-ee43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:25:69:ee:32:53:47:0e:7a:0b:0e:67:34:
                    26:21:59:89:d7:90:d0:e1:54:6b:82:08:06:43:4c:
                    20:3c:92:ec:c2:e3:66:99:91:38:21:02:9b:7a:f8:
                    a9:50:17:1d:0f:e2:22:59:39:a7:b1:81:30:4e:ee:
                    01:c3:6d:39:d8:53:14:a1:b5:14:80:11:e8:28:d0:
                    23:87:fd:c8:c6:a1:d7:40:da:8d:d5:2c:46:b5:70:
                    4e:3b:02:c1:bb:ea:c0:e0:8e:69:15:3b:73:ec:a0:
                    9e:17:2a:cd:ba:bd:55:54:7c:8e:7b:ef:17:b9:6d:
                    20:c0:80:86:41:12:17:c1:2a:fe:76:74:9a:7a:4c:
                    03:c3:31:c0:9b:48:40:8d:c4:04:b1:e6:c0:2f:45:
                    c0:03:38:66:8f:2d:6f:17:b1:2c:1d:68:4f:36:9f:
                    52:0c:de:fd:9d:32:c9:be:c2:fa:82:e3:be:05:32:
                    ab:b0:f7:c1:bf:53:8e:f5:3f:25:e9:fd:ee:a5:7c:
                    df:ec:73:19:aa:0b:f1:da:11:12:cd:55:31:60:f1:
                    f1:bb:9a:35:79:3a:21:39:a9:f8:75:81:28:1d:21:
                    f6:43:84:ad:0e:26:67:b5:27:0a:98:42:9a:89:1e:
                    27:43:f3:7d:c1:8a:75:cb:af:70:9e:71:b6:df:45:
                    09:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3E:5C:02:6B:E5:0D:3C:DB:C2:3D:96:0A:04:23:78:74:2E:B4:2E
            X509v3 Authority Key Identifier:
                keyid:61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:72:7d:b9:7d:a4:63:28:c9:41:30:66:bf:8d:33:a1:18:3f:
         58:50:2c:45:c6:bc:ff:8e:a8:35:a0:3a:6e:e8:28:49:a4:3d:
         b7:b2:40:97:8d:8a:87:4e:60:04:94:a7:b6:99:92:e6:a0:ae:
         fd:50:51:85:f3:46:f3:a5:d2:71:b1:7e:2d:39:06:56:6b:72:
         7d:c7:a8:4a:3f:ab:c3:e0:97:a7:30:87:46:9d:7d:b8:92:b0:
         ff:34:e7:eb:a1:fe:00:d9:03:55:87:ef:b6:66:95:f0:6e:fa:
         ad:ed:12:3f:bd:12:22:d7:e4:f5:38:af:05:04:19:d5:b1:b1:
         04:ea:29:22:89:de:d1:ca:6a:72:45:59:84:4e:4d:ce:9d:9f:
         92:d5:ec:6a:43:20:01:c0:9b:37:18:8c:93:41:b6:7a:c3:3d:
         b1:c8:e7:ac:c9:10:01:4a:27:f3:0d:8d:b1:0e:09:48:ae:f8:
         0d:d9:75:62:c0:93:95:e3:ea:d5:b4:1e:bf:ef:6d:55:eb:7c:
         2c:45:f9:54:96:a5:af:b5:58:09:e0:43:60:0f:c2:fa:b0:ce:
         b3:3f:92:c4:fa:56:fd:30:f2:26:ee:15:3a:77:21:87:27:57:
         ad:9d:40:2c:99:65:eb:3d:5b:95:51:df:52:3b:c9:d8:7f:c1:
         11:53:2c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:07 2026 by rpki-client