Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
File:                     YmINYNuoUorqQhLM7bcpYTqZFVw.mft (raw, json)
Hash identifier:          72r9/4OSwUaNvpTCO8Lvn3qmTKkJNr8TLrRWhUyEfJI=
Subject key identifier:   6B:B1:2D:59:67:00:9A:9A:14:06:82:F0:C1:06:F2:DA:09:64:4C:3F
Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
Certificate issuer:       /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
Certificate serial:       03E9
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
Manifest number:          03E1
Signing time:             Mon 02 Mar 2026 02:57:51 +0000
Manifest this update:     Mon 02 Mar 2026 02:57:48 +0000
Manifest next update:     Mon 09 Mar 2026 02:57:48 +0000
Files and hashes:         1: YmINYNuoUorqQhLM7bcpYTqZFVw.crl (hash: EFPWz2d4nrB8+QyEV7EACW/NPvHcyTz9SDF6Ugt9V5w=)
                          2: C9E2B406804111EEA6703F81C4F9AE02.roa (hash: s9x9gIirWntlK8Owx596ebxdwlOGog5ZPg7HYcpO694=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1001 (0x3e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5, serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
        Validity
            Not Before: Mar  2 02:57:48 2026 GMT
            Not After : Mar  9 02:57:48 2026 GMT
        Subject: CN=69a4fcae-cb96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:99:06:fb:b5:5d:fd:45:98:8a:90:63:7e:6d:
                    db:89:b9:2b:51:13:73:8d:9b:1c:32:24:49:f4:50:
                    4c:1f:bf:e7:15:ad:eb:b8:73:68:1d:51:4c:3b:28:
                    62:a3:e6:2f:36:8d:61:1c:bb:d9:34:f3:98:a7:ee:
                    b3:53:1c:f2:f5:62:ca:45:13:32:11:c7:27:9a:04:
                    13:05:a1:6d:6d:88:b7:ee:d9:63:1e:ae:c8:0f:2e:
                    24:e6:0d:e3:7f:e9:4f:97:c9:60:31:e4:1f:39:bc:
                    91:3e:34:81:c5:94:9d:a0:6f:82:8e:e2:c3:42:64:
                    87:ac:bc:35:e6:ac:07:f0:d7:39:73:55:f5:2e:38:
                    3d:84:d9:ac:0b:88:ea:4e:29:db:27:d4:1f:55:9a:
                    8f:1b:cd:7a:a3:ca:00:03:76:45:52:f8:36:52:22:
                    9d:9b:d7:0c:01:f2:b3:e4:23:a9:52:20:e9:b8:8c:
                    e2:11:d7:16:44:51:5b:05:85:0b:94:60:c9:9e:2e:
                    b8:e2:06:10:32:da:88:c1:80:6c:ec:38:bd:3c:e5:
                    f1:a5:9e:8f:ec:82:36:3a:37:4d:61:d4:39:00:fa:
                    80:8d:63:85:72:b8:9f:88:03:f1:31:84:88:bd:13:
                    0b:d3:37:ec:c5:1f:28:13:95:1d:3e:2f:6a:5f:52:
                    06:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B1:2D:59:67:00:9A:9A:14:06:82:F0:C1:06:F2:DA:09:64:4C:3F
            X509v3 Authority Key Identifier:
                keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:7e:89:02:9c:b5:17:23:95:f1:a2:2d:63:cd:cc:51:b7:a8:
         22:36:b2:a1:ef:23:4a:55:b0:d5:79:70:ee:54:17:32:47:7f:
         dd:4a:2c:d4:b0:c0:26:52:c1:76:5e:6a:59:9b:10:74:f4:e8:
         3a:f7:3d:9b:c2:d8:3c:61:5a:26:e5:40:02:ab:91:77:4e:75:
         5c:12:97:f7:82:d7:f2:10:f1:93:c6:99:b1:14:e0:24:49:49:
         1c:14:17:b6:db:e9:e7:b5:6c:13:35:b0:b5:a6:db:7a:af:c5:
         e8:ca:74:e6:15:b7:4b:19:58:9b:60:23:68:dc:37:37:f8:00:
         d0:af:69:62:d9:27:36:13:ba:aa:c9:1e:c2:38:e1:89:04:28:
         fe:6c:b7:4d:41:3e:31:d6:01:ec:b7:40:3b:c6:a4:fa:60:10:
         56:f3:76:21:76:c8:d5:b0:ce:63:f3:39:cc:19:4f:84:3e:1f:
         bb:9d:59:05:f8:5c:dd:6c:f6:11:34:84:a6:ea:2e:06:02:2f:
         bf:3f:a9:ca:04:65:e7:9d:5e:79:59:bf:55:8e:40:34:8e:e2:
         da:37:34:b3:21:4b:a1:57:89:a6:21:70:35:4f:d8:7d:55:2b:
         60:3c:b8:04:36:d1:8c:aa:35:21:f9:5b:7e:08:c4:f4:34:91:
         ef:41:c2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:41 2026 by rpki-client