Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
File:                     09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json)
Hash identifier:          h3mfnWWNtdikE1uSutkrkA34y+K+MzO4OdbPSVWn6yQ=
Subject key identifier:   DB:9D:6E:BA:7F:B4:A3:4D:D9:64:02:A5:18:2B:1E:A3:AD:22:55:0B
Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16
Certificate issuer:       /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16
Certificate serial:       0200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
Manifest number:          01F2
Signing time:             Mon 02 Mar 2026 00:39:53 +0000
Manifest this update:     Mon 02 Mar 2026 00:39:52 +0000
Manifest next update:     Mon 09 Mar 2026 00:39:52 +0000
Files and hashes:         1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: eu4KfdL17Bc5Mj0v1X3jJ5ljGk0n2dQqaJ0pGNUbRvw=)
                          2: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: Csy9xn8YVykTwlTrdK4oyxiVi/Dh8Dq8HQrWcuNnI3Q=)
                          3: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: 0bElPxBjauRXpVNFFxGy9YP+xctGpLoQsZSJlTgz+9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl
                          rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16
        Validity
            Not Before: Mar  2 00:39:52 2026 GMT
            Not After : Mar  9 00:39:52 2026 GMT
        Subject: CN=69a4dc59-38a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:54:10:c2:cf:84:f0:d0:fd:78:91:26:39:
                    a9:4b:8d:0d:3a:15:74:35:48:0d:1d:f6:f2:26:86:
                    df:0c:7e:dd:d1:58:a8:32:16:aa:86:a2:1c:2b:b3:
                    cc:94:70:90:24:aa:82:0f:67:35:f1:7a:93:08:73:
                    ec:73:c0:bd:88:6b:5f:c9:17:a6:cc:22:5a:4c:3f:
                    cb:4d:69:9d:4c:3f:40:1f:37:8c:01:0c:17:e4:ca:
                    52:4e:d7:c4:43:a2:e5:63:21:b0:e0:4b:39:72:7f:
                    6d:1d:15:e4:e9:4c:15:3d:3f:30:08:29:78:ba:78:
                    eb:da:7b:9d:13:09:45:24:32:11:2b:9e:7b:20:94:
                    a7:8b:d6:c2:51:7c:4d:11:ed:34:21:0d:b1:24:11:
                    2e:00:67:d5:c7:45:5a:0b:fc:00:c4:d2:40:82:1d:
                    12:d8:56:62:ea:eb:ab:e5:9f:7b:8e:b4:69:8f:0d:
                    e9:0a:43:ca:59:59:e4:64:c1:06:89:d1:d1:34:95:
                    c9:ad:0c:7e:2b:d9:64:61:f3:70:65:82:46:be:ff:
                    75:42:71:31:f3:b5:7f:5e:19:55:14:33:99:a7:55:
                    00:da:2c:0a:49:77:e3:93:16:a7:f7:bc:5b:6f:d1:
                    a4:2f:d8:51:a3:55:90:e4:4d:86:77:d4:de:8f:62:
                    7f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9D:6E:BA:7F:B4:A3:4D:D9:64:02:A5:18:2B:1E:A3:AD:22:55:0B
            X509v3 Authority Key Identifier:
                keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:53:8d:17:48:25:ae:af:d4:64:4d:4b:bf:91:56:db:3b:f6:
         a4:99:16:af:62:e7:cb:6f:d6:c2:1f:0f:5e:6f:df:71:88:57:
         ce:4f:8d:d9:a9:90:12:05:ce:8c:b5:04:1f:86:f9:8e:37:4b:
         ea:33:8b:38:ad:4d:9a:b9:6f:66:ef:6b:e3:4c:f7:e0:31:2c:
         1e:14:34:7d:b5:3a:87:af:70:a2:65:b9:6f:ff:f4:a3:2d:64:
         1a:0b:bc:ac:31:8d:b1:0a:ba:a9:06:df:86:0d:af:0d:17:80:
         78:02:3c:28:4e:2b:5f:29:68:b4:f1:27:32:96:57:ed:f1:1f:
         d5:37:76:5b:b0:0b:4b:1f:7d:d2:01:1c:35:05:aa:e1:41:2c:
         82:b8:f7:0f:0a:0d:78:c0:e2:be:2c:e0:56:32:16:7e:e7:c0:
         d0:5f:a4:80:e9:a5:c2:58:40:bf:be:43:69:0d:22:4d:0d:34:
         c8:9d:69:96:50:b4:e9:07:89:50:a3:7a:d2:0f:91:3d:37:70:
         12:33:1d:10:74:b9:17:1b:76:1d:3b:99:14:de:3f:69:94:9d:
         8d:72:e1:5f:ab:42:c4:fb:a5:e5:97:b3:db:fd:74:95:b5:ea:
         b8:5e:1f:f3:2d:26:42:ee:59:fe:44:a3:6e:3b:63:0d:3d:7e:
         c1:c2:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:01 2026 by rpki-client