Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
File:                     cyJU29YY8YhtTfkgE5O_34ueAg4.mft (raw, json)
Hash identifier:          Aj8HjC2szwTUhdJVA7+PCI3a84iOwX0RbeeYXmqwzr0=
Subject key identifier:   4C:B6:24:A5:2D:FD:FF:08:0A:B5:48:A9:BC:CD:9E:21:B5:5C:DE:E8
Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E
Certificate issuer:       /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
Certificate serial:       073A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
Manifest number:          2063
Signing time:             Sat 28 Feb 2026 16:04:41 +0000
Manifest this update:     Sat 28 Feb 2026 16:04:40 +0000
Manifest next update:     Sat 07 Mar 2026 16:04:40 +0000
Files and hashes:         1: cyJU29YY8YhtTfkgE5O_34ueAg4.crl (hash: DsQk9JCU6K77XUtYBmoPqkCRjmY+3OzFv0yNYXChnb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl
                          rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1850 (0x73a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91142EA, serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
        Validity
            Not Before: Feb 28 16:04:40 2026 GMT
            Not After : Mar  7 16:04:40 2026 GMT
        Subject: CN=69a31219-4286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d7:d6:d9:7f:e6:f7:37:1e:f3:45:40:57:51:
                    75:1c:a5:86:44:8a:7c:b9:11:cf:6a:10:f6:75:9b:
                    f2:3d:2f:25:c9:87:36:e8:ab:8f:12:7e:d9:ef:ba:
                    74:e0:19:34:42:3a:c0:95:40:08:9e:58:29:58:9e:
                    65:a4:5f:b1:4c:19:ec:41:85:12:ed:a4:7a:be:aa:
                    48:cb:2a:98:93:d3:b3:51:f4:ea:c3:b8:f1:ff:a2:
                    01:8b:ba:e9:7d:80:f5:29:2a:ba:12:2d:b1:d3:c2:
                    b2:bf:66:80:e9:b3:53:3b:ae:ac:d9:c0:e4:2a:fe:
                    95:ab:80:a2:f3:4e:6a:8b:1a:d3:f8:77:40:a5:65:
                    14:26:7c:b9:35:b4:6a:7e:73:c8:77:d2:11:4b:c7:
                    e0:03:fa:e9:16:33:14:3c:db:80:d5:c0:65:66:5f:
                    5b:81:fb:ca:38:bd:bb:cb:f6:df:b6:a9:b5:d4:c4:
                    86:9d:b7:b3:31:ef:9e:c9:43:25:11:96:c9:c8:f0:
                    9c:ec:31:45:8e:60:bc:77:59:2d:35:3f:fd:c1:6e:
                    25:0f:04:e1:e5:e2:45:14:5c:c8:88:c5:d8:57:46:
                    2b:f7:84:75:6d:57:c7:93:a9:52:90:04:a4:63:66:
                    36:0d:d7:33:dd:b0:de:8a:10:ae:e4:62:6b:f9:41:
                    58:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B6:24:A5:2D:FD:FF:08:0A:B5:48:A9:BC:CD:9E:21:B5:5C:DE:E8
            X509v3 Authority Key Identifier:
                keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:56:15:9d:d6:a8:12:64:a3:fb:3b:50:34:1c:3e:64:66:78:
         6b:28:9d:4e:46:f3:d2:b5:36:03:82:33:47:3c:7d:3c:db:ca:
         bc:37:ac:a4:d5:81:2f:d5:95:9a:62:85:f1:94:34:b2:e3:0e:
         8c:2e:64:d4:a8:7a:c5:b3:04:0a:c8:2f:2d:94:11:cb:d1:f2:
         c9:98:f5:77:36:ba:4c:01:0c:b2:61:99:35:96:99:ad:4c:ca:
         5d:e7:21:b4:75:42:32:e1:fd:c2:2d:a8:9b:fd:36:8a:22:2b:
         e1:07:0d:26:2f:88:c1:be:ee:8b:da:0b:c6:08:c3:7f:19:0d:
         7d:0f:49:94:3e:df:c9:f4:44:b9:66:0f:77:99:ce:88:3c:5a:
         54:ac:a5:2a:eb:60:5f:b8:06:8f:54:a0:7c:81:29:d3:33:23:
         c5:12:ce:50:63:be:4f:8c:f9:71:f1:04:1a:b3:79:ab:37:56:
         ab:18:ba:95:36:7b:6d:6f:16:c9:85:79:70:72:7d:e2:f8:ab:
         46:9b:c6:77:d6:a0:da:b9:9c:31:bb:ff:63:b2:1b:02:05:5e:
         62:e1:03:ed:4f:bb:d9:38:eb:b7:ad:be:b9:d2:05:27:be:70:
         27:ec:f6:e6:c2:a7:df:ec:23:d8:d1:40:42:01:97:ea:a1:47:
         56:6f:4c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:10:14 2026 by rpki-client