Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
File:                     Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft (raw, json)
Hash identifier:          y0GZpPCzrnb+0XrFN+MzY0SCpVirjtSlNtAubj8GDWU=
Subject key identifier:   99:72:74:88:6F:9C:FC:8A:DF:7B:C6:DD:FC:EE:59:43:12:A7:23:09
Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59
Certificate issuer:       /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59
Certificate serial:       01BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
Manifest number:          01B9
Signing time:             Mon 02 Mar 2026 02:17:00 +0000
Manifest this update:     Mon 02 Mar 2026 02:16:59 +0000
Manifest next update:     Mon 09 Mar 2026 02:16:59 +0000
Files and hashes:         1: Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl (hash: ZeXf2mOydIpIX6hh+zB+MQachRUO6ufaJEl9LwUx7QM=)
                          2: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (hash: CpTWwAtDyYV5NG3Dw7iBHIxDpXfL3jOA6p5oviFkDVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl
                          rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142B70, serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59
        Validity
            Not Before: Mar  2 02:16:59 2026 GMT
            Not After : Mar  9 02:16:59 2026 GMT
        Subject: CN=69a4f31c-da0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7f:42:e7:f9:e9:78:05:06:bc:4c:2b:52:04:
                    45:58:19:2e:f5:53:6a:6b:86:37:36:d4:1e:46:54:
                    03:4c:fd:71:16:0c:60:5a:05:b1:26:fb:a0:03:e0:
                    a4:e9:48:c6:40:79:cf:8d:81:3c:be:06:d8:15:29:
                    53:a1:c5:db:58:6a:3d:9e:77:a7:6c:0a:48:ea:c7:
                    d8:84:9a:0d:c6:38:7a:e7:d7:bc:cc:bd:98:42:c6:
                    05:c4:88:d3:8e:6d:cb:c7:09:24:4c:2c:35:79:50:
                    3c:64:ff:14:a5:ed:c9:93:15:97:44:fb:0e:6c:06:
                    fd:60:db:66:8d:f2:7e:b0:d7:ff:7d:03:fa:bc:a0:
                    29:69:e9:7c:ff:eb:f7:de:03:47:88:36:5b:58:69:
                    49:f1:df:4f:85:fb:5b:e9:6b:de:b4:1d:94:f3:12:
                    c4:cb:15:89:2f:99:88:5d:02:21:26:a4:86:4e:0c:
                    58:c0:11:0e:a9:5d:31:28:55:2a:30:8f:59:25:81:
                    3c:0a:38:03:88:4e:22:b3:69:ac:42:11:a3:2f:20:
                    35:99:c3:f2:92:b6:dc:82:e5:6e:59:57:f5:54:46:
                    9a:4e:97:9a:d8:08:bb:1b:e4:1d:b8:12:9e:23:51:
                    39:12:1a:fa:37:01:8d:be:d7:25:45:60:69:64:86:
                    6e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:72:74:88:6F:9C:FC:8A:DF:7B:C6:DD:FC:EE:59:43:12:A7:23:09
            X509v3 Authority Key Identifier:
                keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ca:70:da:fa:be:c5:ea:14:8d:8e:7f:81:28:21:bc:f0:a3:
         7f:bb:b8:86:f5:e2:bf:41:af:94:f2:c3:eb:3f:bd:af:70:86:
         65:dd:1c:5c:49:d0:25:e8:29:c4:77:bb:87:2b:2c:c0:1c:4a:
         44:e6:9e:b6:27:de:8d:3e:5b:90:10:77:85:ab:ff:f4:46:a8:
         28:99:aa:4e:4c:de:0b:00:5f:32:64:e9:b8:a0:b5:19:66:47:
         0c:95:3a:65:14:b1:e0:ce:d7:1e:e2:b7:e2:95:17:40:63:2e:
         1d:d2:02:f4:dd:38:6b:a1:52:0e:23:54:45:4b:de:3d:82:06:
         53:88:41:a5:47:75:7e:6c:7d:c6:5b:f2:3d:a6:a5:d6:13:fe:
         8e:68:0a:b9:6b:38:96:6f:e2:bd:6e:75:7e:17:2a:93:c9:24:
         84:34:4c:ec:bc:17:b0:9f:a1:ef:27:bf:ae:b7:3a:2f:bd:15:
         61:ac:49:77:5e:9a:60:45:3e:cc:7b:f8:ee:d1:41:48:90:c2:
         09:83:70:c1:a5:ff:1c:a9:85:62:89:c5:53:a9:ce:25:a2:cf:
         f5:e7:5d:76:8c:8f:ec:84:47:8f:21:7a:41:b8:2f:28:92:56:
         e2:90:19:03:63:9e:d5:f6:3a:cc:59:80:64:ed:29:b4:73:0d:
         6e:50:c7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:18 2026 by rpki-client