Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft
File:                     ymnk-Ceb-DMZDLciXOn922bT-VE.mft (raw, json)
Hash identifier:          M/fj5hIdb0d5qYCRL5NW5po0nWwrEaEV1CflkyaMRgE=
Subject key identifier:   DB:E2:54:D0:FF:05:D6:E1:26:84:1D:E5:0E:67:D0:CB:9A:8A:B0:66
Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51
Certificate issuer:       /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951
Certificate serial:       0A03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft
Manifest number:          09FB
Signing time:             Sat 28 Feb 2026 20:07:28 +0000
Manifest this update:     Sat 28 Feb 2026 20:07:28 +0000
Manifest next update:     Sat 07 Mar 2026 20:07:28 +0000
Files and hashes:         1: ymnk-Ceb-DMZDLciXOn922bT-VE.crl (hash: vra/PvAFXAtTHgNQrWGN46k4sDb5XPyXM3zFui4r2Lw=)
                          2: 16E91232932D11EABE8CE524C4F9AE02.roa (hash: UBYiOL3S3J2wImaa5FZYPTo7lTIcFacdj1EfjnAFsJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl
                          rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2563 (0xa03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C14C, serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951
        Validity
            Not Before: Feb 28 20:07:28 2026 GMT
            Not After : Mar  7 20:07:28 2026 GMT
        Subject: CN=69a34b00-bdd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2a:d1:df:23:b7:52:b6:42:8b:3c:b4:89:6e:
                    a1:d3:6e:e4:7e:08:7c:cf:56:53:dd:04:49:aa:18:
                    f7:5a:37:56:5c:1d:86:59:83:da:12:84:ff:d5:12:
                    17:11:dc:03:d2:86:3b:f3:5c:df:37:2b:b3:e3:44:
                    cb:ca:26:d5:bf:02:62:6c:95:35:39:c3:2a:96:97:
                    ad:0e:e3:30:7f:72:1a:47:a1:76:01:62:c1:b9:67:
                    c7:75:e0:c8:ac:27:9a:f1:fd:18:61:ea:c6:b7:2a:
                    3b:4f:e3:a0:4e:c3:30:f6:a4:f2:d8:75:29:28:ed:
                    7a:57:f1:9e:92:d3:d6:95:2b:39:91:4b:fd:dd:ce:
                    d1:82:c8:ad:d6:34:48:33:e1:ce:c2:09:4a:b6:bb:
                    91:72:37:bf:69:d9:07:13:b4:d3:17:09:fa:f7:5b:
                    c9:32:8f:8e:b6:01:18:4b:81:a4:c5:7d:d6:d4:42:
                    5a:35:0e:f9:33:2a:d6:73:4f:29:4d:62:4d:ba:4c:
                    58:43:70:ba:cc:7f:9c:52:9b:7c:15:37:a2:e3:6d:
                    fa:a7:ff:34:3c:9d:db:d8:3f:db:57:8d:06:cf:3a:
                    4a:f1:63:6d:70:30:02:06:88:ec:47:47:f4:0f:b4:
                    53:99:1c:3b:d5:a7:07:9b:2c:10:5e:0c:73:67:0f:
                    a2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E2:54:D0:FF:05:D6:E1:26:84:1D:E5:0E:67:D0:CB:9A:8A:B0:66
            X509v3 Authority Key Identifier:
                keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:32:f5:14:b7:ca:2e:85:02:48:40:04:de:bb:14:f6:74:85:
         6f:f3:85:88:dc:14:ae:4e:f4:76:d7:ab:d7:85:78:74:25:7e:
         fa:b4:b5:5f:d9:83:6d:e5:c8:dd:31:34:38:f8:e9:a2:78:6d:
         86:76:05:f5:37:c2:ca:cd:04:e9:2b:94:b1:1b:9f:75:a8:dc:
         99:cd:f0:a2:e6:b2:66:0b:77:a8:ef:84:b9:59:53:64:0c:1c:
         5e:83:6c:ad:03:2d:09:1a:d3:64:c5:c1:93:63:71:38:73:35:
         84:cf:e9:18:96:46:f2:79:18:b0:ab:25:e0:c1:29:5d:dd:cc:
         59:62:6b:27:ca:95:dd:1b:36:2e:04:ae:3d:99:2d:2b:2b:32:
         2f:63:b8:56:90:59:37:0c:b2:ba:b1:7e:c3:78:95:b5:47:14:
         87:4a:27:f7:25:b5:92:ec:1d:0f:ac:63:2a:3b:6a:8e:11:cd:
         7e:b8:51:1c:6e:83:2c:e2:bc:50:45:29:b3:2f:c6:4d:12:cc:
         de:0d:fa:e3:bb:50:0d:f5:85:38:03:83:78:df:0e:72:8d:0a:
         ee:60:18:b5:43:0d:81:e8:83:78:d4:c3:73:d3:5d:3c:16:db:
         ec:20:0c:ef:f0:a4:e4:22:6c:50:f0:44:b8:c3:31:88:8c:e5:
         69:6e:8b:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMxNEMxMTAvBgNVBAUTKENBNjlFNEY4Mjc5QkY4MzMxOTBDQjcyMjVDRTlGRERC
NjZEM0Y5NTEwHhcNMjYwMjI4MjAwNzI4WhcNMjYwMzA3MjAwNzI4WjAYMRYwFAYD
VQQDDA02OWEzNGIwMC1iZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1CrR3yO3UrZCizy0iW6h027kfgh8z1ZT3QRJqhj3WjdWXB2GWYPaEoT/1RIX
EdwD0oY781zfNyuz40TLyibVvwJibJU1OcMqlpetDuMwf3IaR6F2AWLBuWfHdeDI
rCea8f0YYerGtyo7T+OgTsMw9qTy2HUpKO16V/GektPWlSs5kUv93c7Rgsit1jRI
M+HOwglKtruRcje/adkHE7TTFwn691vJMo+OtgEYS4GkxX3W1EJaNQ75MyrWc08p
TWJNukxYQ3C6zH+cUpt8FTei4236p/80PJ3b2D/bV40GzzpK8WNtcDACBojsR0f0
D7RTmRw71acHmywQXgxzZw+iCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNviVND/
BdbhJoQd5Q5n0MuairBmMB8GA1UdIwQYMBaAFMpp5Pgnm/gzGQy3Ilzp/dtm0/lR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE0Qy8yQTM2MTEwQzkz
MkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1ETVpETGNpWE9uOTIyYlQt
VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ltbmstQ2ViLURNWkRMY2lYT245MjJiVC1WRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzE0Qy8yQTM2MTEwQzkzMkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1E
TVpETGNpWE9uOTIyYlQtVkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUDL1FLfKLoUCSEAE3rsU9nSFb/OFiNwUrk70dter14V4dCV++rS1X9mDbeXI
3TE0OPjponhthnYF9TfCys0E6SuUsRufdajcmc3wouayZgt3qO+EuVlTZAwcXoNs
rQMtCRrTZMXBk2NxOHM1hM/pGJZG8nkYsKsl4MEpXd3MWWJrJ8qV3Rs2LgSuPZkt
KysyL2O4VpBZNwyyurF+w3iVtUcUh0on9yW1kuwdD6xjKjtqjhHNfrhRHG6DLOK8
UEUpsy/GTRLM3g3647tQDfWFOAODeN8Oco0K7mAYtUMNgeiDeNTDc9NdPBbb7CAM
7/Ck5CJsUPBEuMMxiIzlaW6LxA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:04 2026 by rpki-client