Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
File:                     ygBwrFIB1vandapSXVPY4zDjIJY.mft (raw, json)
Hash identifier:          +NMFHf9mmuAd9lmj3kdlGOn7gjvzkSbZrrt52f6nqTc=
Subject key identifier:   91:DE:D4:D6:78:E4:EC:03:DF:D6:E8:53:69:31:45:B4:B7:17:CA:FD
Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
Certificate issuer:       /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
Certificate serial:       0271
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
Manifest number:          0265
Signing time:             Sun 01 Mar 2026 23:36:19 +0000
Manifest this update:     Sun 01 Mar 2026 23:36:17 +0000
Manifest next update:     Sun 08 Mar 2026 23:36:17 +0000
Files and hashes:         1: ygBwrFIB1vandapSXVPY4zDjIJY.crl (hash: LLDuXUSdqPzYuNiozMkqv2RpUZXtIm/RuoWGaUqpAxc=)
                          2: EF9D5BBCE94211F08F77753A3C6F56BC.roa (hash: dSdyOI3NKroBXRPK4g3/VXBd5t/AgAoW4VERy4gWDHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl
                          rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116907, serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
        Validity
            Not Before: Mar  1 23:36:17 2026 GMT
            Not After : Mar  8 23:36:17 2026 GMT
        Subject: CN=69a4cd72-de54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:3a:a7:8e:6a:3d:ec:fc:53:c9:8a:89:75:
                    29:f2:47:47:62:47:17:42:97:67:58:dd:05:41:b1:
                    ad:5d:ad:ba:b2:15:39:48:3e:01:8a:e2:a7:e5:57:
                    59:e0:36:aa:be:e0:70:a7:02:43:10:04:5e:0f:08:
                    cc:4d:90:f8:a3:d2:05:6f:06:fc:64:aa:fd:d5:b6:
                    e6:b2:76:57:98:c3:3d:41:d1:21:eb:cc:58:6e:cf:
                    35:dc:81:f1:d7:9d:5d:94:45:d8:4d:55:29:28:a7:
                    b2:14:3f:02:fd:82:fb:70:99:f7:76:dc:3f:d0:c0:
                    07:47:5d:28:f0:1a:48:15:3f:02:59:1d:76:ff:9b:
                    72:92:7d:b6:5e:16:d4:72:7f:53:6a:88:ed:e8:73:
                    75:4d:46:ea:69:f3:57:97:56:97:0b:57:a4:91:ce:
                    7e:14:c2:70:43:19:19:86:97:30:a4:25:0e:af:3c:
                    f4:f2:1c:ef:ae:fd:f9:1f:d8:29:fa:7d:20:d0:47:
                    98:f3:3c:88:8c:0f:ea:d9:e4:83:d2:e6:c7:93:36:
                    d3:0e:85:6a:89:5c:7b:cf:03:11:44:11:de:1b:4a:
                    56:a8:68:89:00:c2:74:3d:3c:10:7e:98:3c:1b:44:
                    4c:57:ae:35:19:54:dd:f7:db:71:c7:86:e3:ea:ca:
                    64:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DE:D4:D6:78:E4:EC:03:DF:D6:E8:53:69:31:45:B4:B7:17:CA:FD
            X509v3 Authority Key Identifier:
                keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:fb:f8:eb:6f:1a:a4:41:5b:cd:8f:18:1d:9e:49:98:bc:8f:
         9e:b9:fb:94:c6:3e:ee:7b:13:26:cf:40:de:18:72:25:9f:6d:
         31:98:5a:1d:46:4b:2a:64:fe:01:25:0c:0f:25:3a:a3:ff:a6:
         0a:e4:9b:65:88:53:9a:d4:a9:30:74:82:8c:c1:9b:90:ac:80:
         05:3a:ab:48:a7:3f:47:f6:f4:cc:a3:eb:0e:e1:6c:0a:aa:ab:
         48:17:4b:42:b5:08:a2:6d:17:7d:a6:79:76:03:36:9c:c7:7a:
         12:92:e6:c4:7c:58:35:9b:66:cc:c9:46:6f:d6:43:52:64:2b:
         1f:28:12:0e:20:dd:25:46:4f:ec:23:d9:30:c5:e7:51:16:19:
         0a:89:ce:02:38:d5:7f:3b:93:a0:86:7f:a7:d6:25:e1:85:41:
         5d:ff:3b:77:f0:38:8b:bf:80:ec:51:7b:e8:8d:00:fd:cd:dd:
         fc:5a:0a:cf:92:96:d1:46:30:2d:6b:80:ee:dc:e0:56:36:e4:
         fa:63:37:79:49:b1:cb:09:9a:30:67:6e:f2:7d:07:bc:1c:60:
         b3:b4:79:0a:11:2c:fd:ed:26:d3:6a:48:9f:9e:39:a2:9c:aa:
         fd:da:ed:4e:84:fa:df:0c:36:d7:d2:41:e6:87:fc:4b:87:fd:
         4f:a2:3d:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY5MDcxMTAvBgNVBAUTKENBMDA3MEFDNTIwMUQ2RjZBNzc1QUE1MjVENTNEOEUz
MzBFMzIwOTYwHhcNMjYwMzAxMjMzNjE3WhcNMjYwMzA4MjMzNjE3WjAYMRYwFAYD
VQQDEw02OWE0Y2Q3Mi1kZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw086p45qPez8U8mKiXUp8kdHYkcXQpdnWN0FQbGtXa26shU5SD4BiuKn5VdZ
4DaqvuBwpwJDEAReDwjMTZD4o9IFbwb8ZKr91bbmsnZXmMM9QdEh68xYbs813IHx
151dlEXYTVUpKKeyFD8C/YL7cJn3dtw/0MAHR10o8BpIFT8CWR12/5tykn22XhbU
cn9Taojt6HN1TUbqafNXl1aXC1ekkc5+FMJwQxkZhpcwpCUOrzz08hzvrv35H9gp
+n0g0EeY8zyIjA/q2eSD0ubHkzbTDoVqiVx7zwMRRBHeG0pWqGiJAMJ0PTwQfpg8
G0RMV641GVTd99txx4bj6spk9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJHe1NZ4
5OwD39boU2kxRbS3F8r9MB8GA1UdIwQYMBaAFMoAcKxSAdb2p3WqUl1T2OMw4yCW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjkwNy9CNTZBN0NCMDdB
QjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2YW5kYXBTWFZQWTR6RGpJ
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lnQndyRklCMXZhbmRhcFNYVlBZNHpEaklKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjkwNy9CNTZBN0NCMDdBQjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2
YW5kYXBTWFZQWTR6RGpJSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATfv4628apEFbzY8YHZ5JmLyPnrn7lMY+7nsTJs9A3hhyJZ9tMZhaHUZLKmT+
ASUMDyU6o/+mCuSbZYhTmtSpMHSCjMGbkKyABTqrSKc/R/b0zKPrDuFsCqqrSBdL
QrUIom0XfaZ5dgM2nMd6EpLmxHxYNZtmzMlGb9ZDUmQrHygSDiDdJUZP7CPZMMXn
URYZConOAjjVfzuToIZ/p9Yl4YVBXf87d/A4i7+A7FF76I0A/c3d/FoKz5KW0UYw
LWuA7tzgVjbk+mM3eUmxywmaMGdu8n0HvBxgs7R5ChEs/e0m02pIn545opyq/drt
ToT63ww219JB5of8S4f9T6I92A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:33 2026 by rpki-client