Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
File:                     YhuBwQnlqnjYKfMKV9o1MwglT2k.mft (raw, json)
Hash identifier:          BcuEHBfI8Ddae4SV05BO9a/JQFHCEfKJgFRcYAY13sE=
Subject key identifier:   38:5F:8D:13:17:72:92:88:85:3C:3C:26:EA:2A:21:70:FD:6E:5D:92
Authority key identifier: 62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69
Certificate issuer:       /CN=A9138D62/serialNumber=621B81C109E5AA78D829F30A57DA353308254F69
Certificate serial:       04CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
Manifest number:          04C4
Signing time:             Mon 02 Mar 2026 01:30:06 +0000
Manifest this update:     Mon 02 Mar 2026 01:30:03 +0000
Manifest next update:     Mon 09 Mar 2026 01:30:03 +0000
Files and hashes:         1: YhuBwQnlqnjYKfMKV9o1MwglT2k.crl (hash: BL/8Zu3nbxmNXnzY8I6BFUj6yrKdgW4rVBMBRIeAKO0=)
                          2: 31E51BB65FD311EC9AA5DA4EC4F9AE02.roa (hash: QGxKWKuwU4koWUT3cHCTo7iWv57eqY9PU0NUcULxizU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl
                          rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1229 (0x4cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138D62, serialNumber=621B81C109E5AA78D829F30A57DA353308254F69
        Validity
            Not Before: Mar  2 01:30:03 2026 GMT
            Not After : Mar  9 01:30:03 2026 GMT
        Subject: CN=69a4e81d-468c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fa:ca:31:fe:18:27:22:eb:4e:5d:73:21:05:
                    1a:96:d0:e6:04:1e:7d:98:bc:77:c9:1e:6e:27:27:
                    9f:b4:82:26:40:d3:ad:ee:e6:8c:50:e1:1a:b0:fc:
                    7e:37:3d:c5:71:04:a2:ec:d2:72:8a:8a:d0:25:d2:
                    ee:e3:51:39:18:3d:5f:a4:48:df:ba:7d:99:fb:be:
                    f8:18:91:73:95:08:2b:ea:16:63:f3:54:46:6f:fc:
                    fb:12:0a:cd:cd:1b:9b:c3:e8:bc:1c:fe:c1:b5:d5:
                    6c:16:f8:dd:65:da:8a:6e:b5:0c:fd:80:5e:be:4f:
                    60:f1:37:43:61:c0:c4:43:2c:b9:d9:93:eb:2a:66:
                    39:b3:9e:33:56:fc:9c:9b:eb:bb:77:3c:87:ed:74:
                    3f:8e:cc:e1:c0:f4:56:45:d9:5f:d5:1b:61:1d:34:
                    eb:89:e1:46:51:6d:d9:2f:d7:c6:18:a4:9d:df:e7:
                    d0:9b:8f:a9:78:e2:8c:75:a9:01:2a:5f:2b:e1:d9:
                    82:ae:1c:1d:5f:64:f7:d3:1e:0e:a7:5e:3b:f5:41:
                    18:88:70:83:82:6f:f0:4a:21:5b:28:a0:31:ce:8e:
                    d6:89:69:08:b2:1b:1c:69:99:74:a6:e3:c7:a4:4e:
                    f8:e9:56:2b:dd:12:74:b7:62:e1:72:78:2d:06:cb:
                    1a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5F:8D:13:17:72:92:88:85:3C:3C:26:EA:2A:21:70:FD:6E:5D:92
            X509v3 Authority Key Identifier:
                keyid:62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c0:a7:09:25:2c:bc:d4:f9:f4:d1:31:93:70:4c:63:23:7e:
         f3:f6:f1:99:bb:8d:d1:32:c7:c9:d5:7d:69:8c:9e:27:98:ac:
         0f:7c:57:ea:9c:52:cf:ed:a0:2d:a5:c7:49:77:5a:62:36:ed:
         64:a3:33:4c:7f:3a:95:0f:51:5b:57:5a:fc:bd:39:64:2e:41:
         07:f1:8d:31:c7:54:20:96:c3:c0:f0:df:d6:bd:10:00:7c:10:
         7b:55:1b:51:c1:41:a5:ae:74:09:fc:f8:67:84:28:8c:ae:69:
         a7:3d:01:dd:f9:29:f6:09:c2:44:e9:32:d3:3c:c1:71:08:30:
         34:3c:2c:f1:1c:99:f3:c5:38:f8:b5:04:ac:5a:52:48:4f:20:
         ea:df:5f:46:04:7f:41:fd:59:ed:d0:6c:69:6a:9b:07:bf:b8:
         d9:94:c0:25:38:2d:e0:4b:c1:e5:14:61:c3:0e:26:5c:1d:00:
         8b:bc:ae:80:df:fe:96:4b:07:4d:46:40:69:f3:4b:35:a2:dc:
         d7:b7:e1:27:26:69:dd:26:28:cc:69:c0:d4:ac:12:86:f7:56:
         e3:cf:5d:29:b9:64:7b:c8:86:47:d1:6b:76:da:be:92:3a:ba:
         b7:e7:78:10:67:16:e8:d0:0e:2e:24:31:53:7c:5c:36:f5:ea:
         12:19:59:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:45:19 2026 by rpki-client