Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
File:                     YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft (raw, json)
Hash identifier:          6Os9e53mq4fiU4MZn+n2KMbZzz6DETheUu4xrCuXmZo=
Subject key identifier:   2E:8A:DE:F0:B5:54:D9:2F:77:1F:40:97:E0:46:BB:A5:B5:DB:B1:F5
Authority key identifier: 60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5
Certificate issuer:       /CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5
Certificate serial:       06CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
Manifest number:          06BD
Signing time:             Tue 24 Mar 2026 22:01:45 +0000
Manifest this update:     Tue 24 Mar 2026 22:01:45 +0000
Manifest next update:     Tue 31 Mar 2026 22:01:45 +0000
Files and hashes:         1: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl (hash: X62e4Tr+zNslHuRktAknR9GDv+BW0b7r3IEn5P6G+vY=)
                          2: 354314309C0F11EBAEFB6225C4F9AE02.roa (hash: rLlQIkqX6i6uF1WhXyQfGL611IaLuncbJA4wjowGJl8=)
                          3: 1348519E9C1211EBA38A7C4CC4F9AE02.roa (hash: llFW+WRST7APyQa0YdaQfyP/e3DEFxsT1jj1YpwFLnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl
                          rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1743 (0x6cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59DF, serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5
        Validity
            Not Before: Mar 24 22:01:45 2026 GMT
            Not After : Mar 31 22:01:45 2026 GMT
        Subject: CN=69c309c9-75fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:06:ad:f7:34:05:bb:d4:ea:54:d7:59:1c:69:
                    c1:52:ce:f9:33:53:3e:cf:98:3c:50:0b:cc:59:88:
                    be:c2:a0:da:91:34:85:3e:6e:65:5d:f2:81:c9:67:
                    ef:6f:94:5a:41:4e:43:84:3e:bd:b2:9a:b2:fb:3c:
                    f5:39:2c:46:d4:c6:73:1b:7f:2d:ec:8d:e5:4a:cd:
                    cd:eb:55:bf:39:f0:dd:80:34:03:f0:10:e0:0b:ba:
                    a9:4c:f4:a0:14:07:41:83:8f:21:a6:4e:74:c2:8d:
                    0f:57:d9:ff:bd:2c:1d:8e:53:f6:54:a8:d3:a7:61:
                    e1:85:dc:10:8b:73:7a:4a:40:06:cb:83:0a:4b:3a:
                    fc:91:d6:12:da:fa:79:c0:2c:84:d7:21:d3:76:73:
                    c2:cb:e5:51:df:27:40:a1:d1:2f:e0:79:f5:22:ae:
                    84:11:3f:6f:42:69:4e:2d:15:77:01:5a:1e:0a:45:
                    3d:1a:22:6e:fe:95:13:d9:ac:42:e3:92:d1:eb:df:
                    58:ac:e8:36:4b:a9:7e:e0:b5:23:c5:23:2d:3e:46:
                    f0:1a:3e:0b:b8:e5:c3:19:6d:a3:61:71:47:f8:82:
                    aa:0b:dd:9e:06:b1:1d:29:09:59:7f:48:f0:55:d9:
                    1d:01:22:b9:68:21:7e:ee:05:ba:2a:c2:d5:c9:0c:
                    0e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8A:DE:F0:B5:54:D9:2F:77:1F:40:97:E0:46:BB:A5:B5:DB:B1:F5
            X509v3 Authority Key Identifier:
                keyid:60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:3c:00:79:cf:b9:5a:df:1d:45:f6:89:cc:74:e6:b0:c3:4c:
         bb:14:5f:15:31:89:ef:5d:5c:b0:a6:2d:c9:fe:a9:34:05:b9:
         62:32:28:2f:2d:e8:1c:3b:d2:1d:5b:92:a2:25:0c:90:ec:81:
         8f:f1:8c:f5:99:c4:51:40:ea:9a:ca:7e:35:e5:70:01:66:32:
         10:22:38:79:7d:f0:5e:06:48:f8:39:43:28:aa:08:b1:09:3d:
         ce:87:44:47:a1:de:11:57:13:65:e5:dd:ee:f7:4f:7f:a5:a4:
         de:9c:8b:0c:e8:87:16:68:da:3d:be:a4:4f:bd:a8:5b:6f:20:
         7e:11:23:10:88:9e:a7:f6:88:90:28:6c:63:47:07:06:52:c5:
         38:7f:76:a0:81:b6:a1:f0:68:ce:c6:01:97:09:5d:95:1a:26:
         b5:c3:71:f6:5f:34:1c:db:21:1c:19:b6:ec:2a:57:70:28:26:
         df:aa:15:55:8d:b2:42:e4:d1:35:0d:f2:40:9b:7f:82:8a:b3:
         7b:7c:a2:d2:6b:db:5e:e0:a8:f0:61:af:a8:bb:93:f0:e9:45:
         28:3d:0b:35:40:03:23:56:ed:a2:4b:8e:66:a2:23:05:dc:c4:
         dd:64:ae:63:66:07:1c:79:d4:c3:0c:8b:5a:fa:da:03:1a:20:
         18:a0:03:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:20 2026 by rpki-client