Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
File:                     yQm9soTk3whHdmDWgrfLP1lIMeM.mft (raw, json)
Hash identifier:          ptemDKKFpwPlXVFJ4yhhPAgvgtnTWyGBi2OfyzgRMfQ=
Subject key identifier:   5E:79:21:26:7B:2C:EA:72:F9:E0:77:74:CA:97:67:FE:CF:F0:1F:91
Authority key identifier: C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
Certificate issuer:       /CN=A912BD25/serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Certificate serial:       0C90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
Manifest number:          0C84
Signing time:             Mon 02 Mar 2026 00:51:27 +0000
Manifest this update:     Mon 02 Mar 2026 00:51:25 +0000
Manifest next update:     Mon 09 Mar 2026 00:51:25 +0000
Files and hashes:         1: yQm9soTk3whHdmDWgrfLP1lIMeM.crl (hash: HN1R0vsX5LZV2Jd1M7HD1f8MxEPzPHn9+/hoC9xMXws=)
                          2: CF3378E272DB11ED8483E95DC4F9AE02.roa (hash: k4o/xpl05MWpxfINsWsD9ge7BlRuKXGB+2xC5Rxqzp0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
                          rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3216 (0xc90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BD25, serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
        Validity
            Not Before: Mar  2 00:51:25 2026 GMT
            Not After : Mar  9 00:51:25 2026 GMT
        Subject: CN=69a4df0e-c332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:88:3e:e3:40:72:35:be:d4:9a:6a:c8:cf:ef:
                    39:5d:9e:f1:b8:1c:ca:ca:55:9f:b0:52:bb:96:f8:
                    69:90:07:77:52:ac:6d:86:b7:16:b8:f0:b5:2c:0d:
                    82:d8:52:df:52:24:67:ed:d8:b2:4c:36:2b:c9:1d:
                    eb:42:fb:3d:cf:4c:74:3f:a7:be:1d:7d:6f:44:6d:
                    bb:f1:f7:83:5a:d8:12:f0:57:07:3b:bb:b6:8d:a2:
                    56:be:ec:28:38:92:46:97:c3:54:cd:1f:fe:97:1b:
                    37:35:92:10:a4:96:43:c1:01:5d:a6:36:53:99:51:
                    9a:12:3f:f3:72:38:42:87:d8:63:9d:b5:3d:98:7e:
                    d3:9b:fb:18:cd:fd:87:05:d7:eb:d9:2b:ca:44:60:
                    af:4f:6d:81:83:4b:74:02:03:21:8f:92:5f:db:8e:
                    d1:e1:fb:6a:75:26:a1:df:47:2d:0e:42:b1:1a:e7:
                    27:41:6c:b9:8b:06:f8:69:19:1f:d7:87:ce:9b:bb:
                    7e:43:0b:df:40:31:93:77:11:8a:6e:1f:81:05:fc:
                    fb:f8:fb:12:97:df:20:7c:06:29:28:7a:4b:cb:06:
                    ed:41:7f:00:93:32:a0:b6:80:fb:5e:e5:83:49:3a:
                    9d:7d:59:ec:5b:2a:a5:13:7b:d8:68:82:be:0d:c1:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:79:21:26:7B:2C:EA:72:F9:E0:77:74:CA:97:67:FE:CF:F0:1F:91
            X509v3 Authority Key Identifier:
                keyid:C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f7:2e:7a:44:91:27:12:93:55:08:ae:b4:6c:49:c9:5b:46:
         74:d6:d1:c8:26:42:5f:90:4b:20:9b:1b:0e:0d:28:65:48:ad:
         c9:20:2a:0d:c6:a7:4f:06:78:95:af:7a:b4:61:db:c0:b7:a2:
         79:3f:8a:25:ad:42:c6:fc:40:a2:12:a0:fd:93:5e:f5:f3:d8:
         27:92:76:34:fa:24:20:e6:39:88:7c:e8:79:7f:a4:9a:dd:ad:
         63:4b:fb:38:36:3c:28:31:76:6b:5c:5e:a5:b9:65:21:0a:fe:
         bf:5e:db:e6:cd:2d:ae:65:09:e5:35:1a:4e:03:67:55:1f:57:
         df:5e:ba:9b:67:c3:d9:0c:9f:98:c0:75:49:1a:3b:5b:5e:6e:
         1d:89:71:10:7e:3a:4c:60:fe:7d:68:f9:ce:97:6a:57:e1:aa:
         2f:01:38:46:38:36:c6:61:1c:aa:33:1c:c1:aa:11:b8:50:9a:
         e8:1d:bc:b4:e0:38:ad:d6:33:e0:33:16:d0:9d:a0:2f:40:ca:
         be:a8:d0:4e:86:9b:a9:d5:22:d7:38:e0:13:66:6b:f1:66:2c:
         b0:34:51:de:9a:92:c0:b4:ad:aa:7c:4e:c3:c9:20:96:35:ce:
         c1:85:35:dc:59:8b:76:07:aa:ef:49:92:cf:76:b8:45:c6:de:
         68:d2:0c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:00 2026 by rpki-client