Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft
File:                     Y7ooHVb6T-blNbEl4W34AdEvgJk.mft (raw, json)
Hash identifier:          30NNg+j3g7uVixTyoMQkq9jKOh9tlcVebV/3Y1w8zK0=
Subject key identifier:   77:5B:14:CB:9A:CB:7E:50:DE:D8:7A:AB:BC:36:AF:CE:9D:E0:D8:0B
Authority key identifier: 63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99
Certificate issuer:       /CN=A91ECBD9/serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft
Manifest number:          0127
Signing time:             Fri 27 Mar 2026 05:08:05 +0000
Manifest this update:     Fri 27 Mar 2026 05:08:04 +0000
Manifest next update:     Fri 03 Apr 2026 05:08:04 +0000
Files and hashes:         1: Y7ooHVb6T-blNbEl4W34AdEvgJk.crl (hash: CFGW1p5tN2ZBd2o5sLLuNv3TNE4mv+pUQniugf+oW2w=)
                          2: 4E67247C681911EFA2640B43C4F9AE02.roa (hash: d9P85laPRkpKs+csnAg0oJce4egEXulgs1EnyuMeDd0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl
                          rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 05:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECBD9, serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099
        Validity
            Not Before: Mar 27 05:08:04 2026 GMT
            Not After : Apr  3 05:08:04 2026 GMT
        Subject: CN=69c610b4-0017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:43:1c:be:1f:f4:24:57:6d:30:9f:e4:77:
                    90:70:0e:9a:65:59:60:d9:5d:79:03:6f:04:0f:11:
                    31:4a:ea:00:6b:ad:c6:82:40:e4:8c:aa:38:9e:70:
                    1a:4f:93:4b:01:ee:d3:f6:77:1f:99:e5:7b:00:58:
                    ab:a2:f0:a1:3c:b5:51:73:07:30:78:a6:35:49:cb:
                    c6:32:93:b6:6e:03:5f:b4:86:5e:9a:c1:50:2f:e1:
                    d1:fd:9b:c9:1d:f4:eb:4a:af:89:a8:89:00:da:ec:
                    55:55:8d:c2:6f:8d:5f:0d:a8:b1:1b:8b:57:cf:ec:
                    24:1e:73:97:ba:6d:ea:53:de:4f:ac:f5:ce:4c:e6:
                    32:85:69:3d:0b:16:3b:3b:c6:f7:32:02:cf:6e:2e:
                    d7:9e:99:c4:64:b1:6e:b9:ab:9c:77:ac:25:8c:fc:
                    8b:07:a6:9c:f1:eb:69:e7:d0:96:9f:a5:b9:40:84:
                    ae:cf:a2:ae:35:6e:90:fc:69:77:73:ee:64:c4:81:
                    9a:61:29:60:90:23:25:43:02:e5:ce:f6:48:7c:b8:
                    1b:66:d0:17:b0:e6:a2:36:d4:c9:9b:66:75:d3:95:
                    74:3d:0d:d0:cf:68:92:96:cd:c6:0c:ab:dc:0c:99:
                    fa:16:19:00:b6:e8:fc:b0:f8:9d:f9:fd:de:79:b6:
                    63:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5B:14:CB:9A:CB:7E:50:DE:D8:7A:AB:BC:36:AF:CE:9D:E0:D8:0B
            X509v3 Authority Key Identifier:
                keyid:63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:a4:09:a0:37:46:db:54:7e:1c:3c:9e:ad:2b:8e:ef:ae:3a:
         a0:45:8e:4c:20:32:b6:b9:46:d1:95:6c:ed:63:2c:2b:3b:1d:
         1c:07:57:ef:c2:8f:34:64:a2:71:69:59:0d:69:f6:bc:72:a6:
         b3:d3:59:cd:f4:77:f0:6e:4f:38:0a:d3:c5:c7:a3:b2:95:16:
         6d:4e:21:0b:31:35:d2:be:1a:f3:80:83:ac:44:78:2a:28:64:
         fe:36:5d:b5:5c:01:0e:fa:32:e6:96:f2:a2:b4:32:b9:05:23:
         20:5c:f0:d9:6c:29:07:b5:98:8f:1c:4d:53:3b:bb:90:42:c6:
         2a:4e:73:8f:ac:96:09:ca:9b:12:34:28:d4:24:7c:c9:9b:01:
         e9:e2:2a:dc:da:c0:d1:f4:19:0f:08:08:af:a8:6b:a0:bd:b8:
         87:e7:12:f9:48:f9:0a:2e:40:d8:f5:db:3d:4a:a8:ec:88:c4:
         5b:67:53:cc:13:f0:bd:cb:7e:29:26:5a:4f:e8:2d:4f:bf:73:
         ed:2d:31:bf:5a:28:af:6e:e5:9e:91:5e:52:f0:de:76:da:ae:
         d5:ec:32:8f:aa:62:42:e5:f9:ff:9d:f9:0a:b3:ea:fe:b4:18:
         9f:49:cf:2e:3f:4a:39:04:75:67:f8:fd:1e:49:33:1a:5e:d5:
         11:94:32:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:56 2026 by rpki-client