Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft
File:                     YkYyDes0LSw9wa7bkPF2dyt_x38.mft (raw, json)
Hash identifier:          s14vO8xHrTcsuw/t5HvVmGzGQqoYp1sMN1mjCK+cqgE=
Subject key identifier:   A1:BF:1B:3E:E8:7F:5E:85:64:9D:17:D1:92:D7:C8:C7:96:7F:86:48
Authority key identifier: 62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F
Certificate issuer:       /CN=A911AD1F/serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft
Manifest number:          50
Signing time:             Sun 01 Mar 2026 09:38:58 +0000
Manifest this update:     Sun 01 Mar 2026 09:38:57 +0000
Manifest next update:     Sun 08 Mar 2026 09:38:57 +0000
Files and hashes:         1: YkYyDes0LSw9wa7bkPF2dyt_x38.crl (hash: zzEbCO0oXCIKIxErAhrrKfSsqkw6Uh68+TtJQO2+Gy8=)
                          2: 5CA352A49DAB11F0B1E32C64C4F9AE02.roa (hash: LyWvvw+ErBjB7W8o/R8I1LcD7CF1lU/R94KhGen7GVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl
                          rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AD1F, serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F
        Validity
            Not Before: Mar  1 09:38:57 2026 GMT
            Not After : Mar  8 09:38:57 2026 GMT
        Subject: CN=69a40932-18c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:be:55:41:73:78:71:84:39:ee:d5:20:91:ee:
                    bf:82:3c:0f:a7:08:34:ba:cf:90:cf:44:85:02:07:
                    8d:c5:1c:03:e6:68:e5:50:03:ee:8d:8e:8e:54:0c:
                    2b:ae:c7:c0:b1:43:51:74:bb:1a:d4:02:cc:37:8f:
                    d0:0a:c6:35:5b:16:92:09:d4:20:c2:43:69:e1:64:
                    2d:2a:52:1f:9e:30:19:30:fc:56:de:ef:d2:0e:ab:
                    ea:6f:7f:36:db:d7:71:db:fb:52:89:ff:56:47:be:
                    f1:98:15:de:62:82:c6:66:9a:fe:ff:2a:2c:50:94:
                    d9:7d:ad:89:e5:75:3e:6e:56:c6:d7:97:de:13:49:
                    f9:59:a3:b7:2d:73:c5:6e:cd:b7:5c:00:a6:23:92:
                    0a:5d:47:77:bc:36:28:db:2d:70:4b:ae:b6:c2:7d:
                    e5:cc:8b:20:5f:fe:4f:24:81:c0:af:ff:08:b8:4a:
                    5c:56:38:bb:39:f3:ac:06:d6:48:29:b6:11:cd:5e:
                    97:f2:0f:52:d6:82:1e:8c:04:8a:a2:5f:50:91:eb:
                    97:77:07:35:e4:6c:4d:de:e3:80:45:40:c5:98:46:
                    13:ac:8a:c4:2c:77:6f:05:92:73:c3:04:5c:94:68:
                    88:e3:d5:cb:ef:09:1f:d5:ad:92:15:bb:31:69:30:
                    f2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BF:1B:3E:E8:7F:5E:85:64:9D:17:D1:92:D7:C8:C7:96:7F:86:48
            X509v3 Authority Key Identifier:
                keyid:62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:22:ba:21:1f:7f:eb:49:ba:9c:d1:ef:a9:26:d4:f7:b5:b1:
         f6:48:1d:da:9a:b8:c6:5c:0a:cf:0a:78:bb:a0:84:af:6b:32:
         4e:17:43:39:12:ab:34:89:20:ab:20:59:93:a7:99:9a:3a:68:
         be:95:dc:da:df:26:1e:cc:e6:96:39:aa:de:c9:08:01:9a:18:
         ba:ce:29:c1:2a:bf:f9:bf:d2:3e:db:b6:07:43:ed:cc:03:a1:
         10:5f:fe:79:fd:14:79:5a:87:a1:96:f5:2b:c8:9f:21:89:22:
         66:4d:4c:c1:54:bd:db:9f:20:01:54:b5:c1:16:f0:fd:0c:7b:
         e0:d2:73:09:63:7f:be:c6:93:ed:c4:71:fe:f0:c1:54:98:11:
         0f:51:14:6d:b0:b7:7a:32:36:8a:3d:84:d4:82:ec:ba:5c:df:
         ae:e8:28:2b:0e:43:0f:2a:08:47:04:51:fb:c8:18:e4:dd:41:
         74:16:7e:56:ae:da:dc:5f:45:ca:2d:3f:9e:b5:81:9d:f4:f7:
         2a:19:e9:12:43:33:9a:d7:89:0c:a0:56:77:19:89:29:89:46:
         ed:29:f1:b6:3b:9b:23:ca:8e:2c:72:9c:32:79:6f:d2:f2:02:
         ef:ed:78:a0:31:d6:bb:02:75:ac:4f:55:6a:68:12:f3:51:f0:
         67:05:de:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:40 2026 by rpki-client