Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
File:                     yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json)
Hash identifier:          ogw7BzxURRrvHUpw1/Tdpv53882Y3gtRPEK8yOvDdio=
Subject key identifier:   D2:22:6A:5E:99:9C:3B:86:0C:D4:36:1D:D6:DF:C6:56:AA:5E:AC:7E
Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
Certificate issuer:       /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Certificate serial:       0C0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
Manifest number:          0BF3
Signing time:             Sat 28 Feb 2026 19:05:51 +0000
Manifest this update:     Sat 28 Feb 2026 19:05:50 +0000
Manifest next update:     Sat 07 Mar 2026 19:05:50 +0000
Files and hashes:         1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: 8/ZV3HBndT6lNNNVABP58EhSm9BF2lRCTwdeOvWBjXs=)
                          2: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: XVfMBcXtDO1jUoG+sHDNkKo4flq8bpzbYOt+jR030cw=)
                          3: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: O8pf/JsmCFd15kL2jrOJdQ8+KzjXz0a4Yu14ll5Qa4k=)
                          4: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: DFS61O9UPT1SugykAObJGdG0GOOSvUeDS9odcGc2Vmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
                          rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3083 (0xc0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
        Validity
            Not Before: Feb 28 19:05:50 2026 GMT
            Not After : Mar  7 19:05:50 2026 GMT
        Subject: CN=69a33c8f-dc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:81:be:03:ae:0a:1b:3a:d5:86:24:1d:5d:
                    e8:e1:bb:76:07:de:b2:eb:e0:90:5b:e8:6c:ae:ba:
                    eb:24:de:70:8b:d0:46:0e:60:31:5d:40:84:41:6c:
                    9b:bc:9e:40:f8:7d:4d:d6:48:89:af:9e:19:65:71:
                    39:d2:6f:01:59:0a:3c:36:7a:31:06:8e:4a:85:4d:
                    85:b2:f9:1f:07:3d:fd:26:a0:0f:50:15:d9:ba:33:
                    7a:82:b9:fa:9c:aa:0a:3d:13:ef:9d:af:0c:76:9c:
                    38:d5:79:5c:06:62:a3:e4:72:1d:d3:09:d7:0d:23:
                    33:8f:cd:2c:04:1e:ee:45:e9:2a:47:30:bf:fd:a2:
                    b8:36:2c:2d:e0:b4:bd:80:df:42:37:64:72:64:89:
                    72:c4:dc:dc:44:e6:43:cf:9c:17:d3:84:33:c8:e4:
                    9e:0b:a4:cf:6f:a6:29:d5:19:6b:82:e2:7b:04:56:
                    b1:a6:be:e3:3c:c2:33:d8:02:be:b6:3f:35:7a:25:
                    bb:6e:aa:0d:41:f3:8f:b6:13:49:ba:dd:6b:6f:9b:
                    e4:b2:6d:0d:8b:3c:5f:28:30:9c:47:92:c3:61:27:
                    c6:19:9e:3d:52:69:45:16:eb:9d:8a:a4:38:5d:a6:
                    e1:e7:a4:7c:3d:63:54:02:32:c3:3e:19:10:13:d2:
                    a3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:22:6A:5E:99:9C:3B:86:0C:D4:36:1D:D6:DF:C6:56:AA:5E:AC:7E
            X509v3 Authority Key Identifier:
                keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d6:95:85:58:a6:8a:5c:44:19:a6:9b:4b:d2:1a:2f:0c:2e:
         3b:76:51:b8:98:5b:71:72:9c:04:0a:4f:f4:89:b1:8a:2f:49:
         42:1f:b6:cf:ab:47:62:c9:40:ce:49:63:5d:1a:f9:f5:9c:18:
         7d:ee:c9:0f:a0:89:f0:58:fa:15:a8:94:04:b6:96:f0:54:5e:
         d8:f0:d1:21:ff:7c:cd:30:38:29:30:e3:98:d2:2b:8c:ab:0d:
         c1:0e:2f:ef:7e:69:6d:96:c9:93:d4:0d:7a:04:fa:2a:41:cb:
         b8:8c:eb:6a:de:d9:7a:00:01:60:00:ac:99:d1:45:5d:16:69:
         2c:9c:a0:7d:34:ae:05:f9:5d:22:ab:cb:fa:23:62:12:ba:38:
         55:45:75:29:e5:08:b0:32:ff:40:a9:ae:9d:f1:07:8b:01:14:
         45:e3:4d:4e:a6:b9:3a:f9:39:79:4c:43:24:1a:75:4c:32:6f:
         f2:af:c6:b6:19:fb:41:0f:36:c9:d8:3e:16:0d:07:08:57:e0:
         cc:d8:1b:53:fc:d7:a6:62:2d:f1:82:90:db:0f:3e:d2:83:70:
         6e:99:fe:ae:d4:73:1e:ab:be:a0:e9:a3:61:07:43:dc:57:9f:
         fc:00:5c:59:81:5a:1b:4c:ea:49:4b:f7:44:c1:1c:b3:82:70:
         aa:bd:3d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:37:30 2026 by rpki-client