Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
File:                     Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft (raw, json)
Hash identifier:          t9NlhjeHUcL4k3mY+EGGDvGpAbkT6j28vCEYLO7NQpo=
Subject key identifier:   F8:56:48:32:6A:AC:11:A5:5C:3C:C8:43:9F:46:B3:6B:1C:F0:2F:C6
Authority key identifier: 63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB
Certificate issuer:       /CN=A9110C2F/serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
Manifest number:          3A
Signing time:             Sun 01 Mar 2026 22:24:14 +0000
Manifest this update:     Sun 01 Mar 2026 22:24:13 +0000
Manifest next update:     Sun 08 Mar 2026 22:24:13 +0000
Files and hashes:         1: Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl (hash: mxa4BlylDCx+wRlaEMxtcwHiOiBHrsSeFx3Dmcv1qiU=)
                          2: 357B8ABEC67F11F08B0CE042C4F9AE02.roa (hash: fz0PyQO3dpe/zq5PphDn6te7WEMaib2lqFLapkHh2Ws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl
                          rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C2F, serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB
        Validity
            Not Before: Mar  1 22:24:13 2026 GMT
            Not After : Mar  8 22:24:13 2026 GMT
        Subject: CN=69a4bc8e-d603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:59:8c:2e:c6:ff:13:14:ea:69:15:aa:c0:
                    93:d0:16:e7:fc:80:0f:43:cd:d0:83:cc:b5:90:3a:
                    67:f6:75:d6:65:99:d1:80:08:1e:23:3f:5d:23:44:
                    97:a9:1a:8e:55:3f:bf:73:94:cc:f6:50:f4:38:38:
                    ee:49:cc:9e:87:2d:cd:65:cd:be:f6:81:f9:29:77:
                    04:34:9a:12:8b:60:8a:7d:0e:cd:67:0c:c6:76:e5:
                    9b:3a:e0:a1:91:2b:a6:2f:e2:fa:0c:8b:dd:b7:25:
                    de:15:18:cd:e2:ed:c2:4d:49:9e:4b:95:cf:cf:bd:
                    84:8a:e0:49:19:46:84:22:cd:fe:72:80:4c:4d:57:
                    b2:5e:22:de:65:16:8d:63:c0:e6:5e:f4:bd:01:3b:
                    16:7e:87:28:89:2e:97:8c:c3:04:cb:91:f6:35:17:
                    50:aa:17:3d:e5:ae:3e:6b:a6:de:c3:e7:0c:90:b5:
                    85:3c:4f:8e:38:71:76:d8:1b:e5:8d:0c:73:4d:64:
                    95:f1:8b:7e:d6:9b:6e:fe:67:2c:93:0a:1f:73:15:
                    89:e0:35:db:a3:36:8d:49:28:93:22:57:8c:68:c9:
                    e5:ea:02:b6:e1:6a:ca:02:6f:0d:95:a9:fd:90:a9:
                    a8:62:3c:ff:ba:98:3f:be:f7:8f:9b:6f:c2:8c:f0:
                    d4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:56:48:32:6A:AC:11:A5:5C:3C:C8:43:9F:46:B3:6B:1C:F0:2F:C6
            X509v3 Authority Key Identifier:
                keyid:63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e4:56:33:1a:f3:61:a5:16:eb:b8:d2:69:8f:fd:e1:b8:e1:
         56:3c:fe:24:9b:3a:32:51:7f:f5:13:46:81:1f:b6:66:a7:f3:
         57:30:8c:21:5b:e9:20:5f:6d:8e:80:55:30:1b:19:67:c8:ff:
         6e:b0:01:35:0a:00:0b:58:70:a3:1d:86:b6:5b:ca:cb:f9:c6:
         96:56:3a:30:65:4a:9d:72:9b:58:cb:d8:5f:03:7c:80:74:d7:
         e4:37:f1:03:69:dc:c4:75:5b:5c:6a:ca:ac:08:d3:dd:da:0d:
         9c:f5:d1:b2:5a:90:96:70:10:96:93:01:c8:c7:c0:c9:23:81:
         68:2c:3e:2a:6c:fc:3c:c3:4a:72:b1:bc:94:60:9c:17:ba:35:
         0f:23:86:2a:5e:4a:e6:7c:bd:c5:84:ef:8c:9e:c3:cc:d1:64:
         9b:67:34:e3:81:a5:48:00:57:a8:d7:97:26:25:44:34:97:7f:
         0e:68:9e:f9:b7:48:ed:fa:83:88:7a:b8:2a:3d:fb:3e:54:53:
         9e:af:8b:27:1b:1e:6d:f2:0c:1e:e2:31:8b:77:bf:53:20:90:
         ad:78:1e:cc:6e:ab:20:19:3b:bb:80:81:e3:c1:07:fc:6c:41:
         36:ec:ee:2c:7d:96:b6:1e:85:e9:fc:8a:18:32:bc:c0:57:03:
         59:2c:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:04 2026 by rpki-client