Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
File:                     yoPUPlpeWcd1mxubL72YqUff07w.mft (raw, json)
Hash identifier:          UjE+AaDLNd8QHI2wVthNP+itx+TGS1A5piPhJOJRqoQ=
Subject key identifier:   DD:EA:B6:99:78:56:84:AD:0C:D5:DE:17:F7:F0:D7:42:9E:49:1A:E6
Authority key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC
Certificate issuer:       /CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
Certificate serial:       1123
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
Manifest number:          10F6
Signing time:             Sat 28 Feb 2026 17:25:21 +0000
Manifest this update:     Sat 28 Feb 2026 17:25:21 +0000
Manifest next update:     Sat 07 Mar 2026 17:25:21 +0000
Files and hashes:         1: yoPUPlpeWcd1mxubL72YqUff07w.crl (hash: WtuQQIsN9zTQ0lEW/R1jd61bUkCVqdQz1zQBYz+WVQU=)
                          2: 7B306A34218D11EC87C96D6DC4F9AE02.roa (hash: xb4FGOu1Mf4Rf3VIrMEf7uT8+tpvnSSDi1qsrPtD9y4=)
                          3: AAAA30A6288411EEAD22D65DC4F9AE02.roa (hash: nAHKnk0VK0wiSj9/S1LWVkXtZYLu05eoXq0eZ/NpUR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl
                          rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4387 (0x1123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6, serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
        Validity
            Not Before: Feb 28 17:25:21 2026 GMT
            Not After : Mar  7 17:25:21 2026 GMT
        Subject: CN=69a32501-877d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:38:a3:61:19:d9:50:03:fd:e4:98:25:c4:d5:
                    a3:4d:1a:32:1a:9b:19:d1:82:22:54:4f:96:38:b1:
                    94:a0:25:17:dc:3c:21:58:af:87:d6:c3:81:86:c7:
                    9c:72:e9:5f:47:6b:20:95:77:ae:c1:a0:3f:fd:3c:
                    99:3a:5d:de:9d:66:e9:ed:d0:4b:1b:b9:32:3b:7e:
                    4e:66:a4:56:bd:40:b0:f0:44:bf:a0:39:0d:2f:72:
                    51:f9:14:04:1c:84:e7:89:f8:05:f7:6d:16:cc:4d:
                    51:5e:aa:4d:25:03:d8:94:e1:ad:54:b2:ee:73:2b:
                    6f:4f:fb:89:c6:7c:b1:4f:b9:38:8b:9e:e7:99:4a:
                    be:89:1f:f2:bd:55:92:72:5b:80:c9:3d:81:4f:43:
                    e5:8c:4d:c7:98:1a:e5:dc:8c:a5:a9:2c:19:ed:13:
                    41:7d:8b:fa:f7:26:ef:d7:5b:35:4b:59:d8:90:db:
                    78:48:c3:4d:0b:c0:ed:90:cf:24:e3:b6:e7:8f:0c:
                    28:0c:5f:ce:79:73:63:69:6e:42:f9:25:29:25:3d:
                    25:ad:53:f3:d9:82:be:fe:41:6b:c5:e2:fc:c6:82:
                    ff:c6:45:08:08:3a:bc:1d:9c:51:e9:f8:f0:13:d2:
                    4c:58:c1:5e:30:e9:d4:14:7a:c0:07:1d:36:dd:8f:
                    f0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EA:B6:99:78:56:84:AD:0C:D5:DE:17:F7:F0:D7:42:9E:49:1A:E6
            X509v3 Authority Key Identifier:
                keyid:CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:54:a8:7d:85:62:5b:97:ab:cb:2c:82:18:4c:e1:c3:54:7c:
         2f:47:7c:e9:99:e8:22:64:37:29:bd:68:f4:ca:a1:13:c3:c7:
         9a:c8:4c:76:bf:ca:0a:a6:2a:a0:5b:fc:6b:bd:59:bc:1e:6c:
         25:93:62:9e:90:03:d8:c0:6c:36:cf:f4:e5:b0:bb:33:08:5b:
         bf:4b:bb:a4:74:60:a6:4c:f4:d3:42:b6:b5:1f:42:c2:ff:6e:
         9c:19:d1:72:cb:2d:df:3c:60:66:37:a3:7c:fb:13:ef:0c:12:
         d1:d6:cc:d5:10:74:63:71:51:7e:54:04:56:22:73:f0:19:db:
         2e:1d:a6:11:4c:49:f8:7c:69:8f:62:84:c0:c5:ed:cf:f9:68:
         8e:40:e6:24:d3:7b:b6:f8:c5:07:f8:a0:55:e9:40:f0:2c:c5:
         84:a8:5d:32:1b:da:58:68:ff:8b:ed:ce:cc:3e:ab:97:d6:3b:
         45:3b:fa:f2:94:de:c5:77:c2:3a:d7:dc:19:bb:83:88:ef:68:
         4a:62:69:7b:a7:a1:96:9b:29:e5:a4:e9:ff:e8:b9:4b:63:6f:
         14:07:5b:c1:73:f9:cd:ce:21:f2:27:9f:be:bf:4c:ce:dd:f6:
         a7:bd:d4:6c:62:bb:49:ad:92:a3:ae:39:2d:82:a4:a4:33:fd:
         fc:b8:c3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:30:30 2026 by rpki-client