Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
File:                     zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json)
Hash identifier:          JWnQBWHX4Cvb3SMBD7MYHQbHj0rm2zciEq1vvV8AbnM=
Subject key identifier:   0B:8E:66:BD:39:71:9C:72:2A:11:14:99:AF:86:42:71:94:7F:C6:B8
Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
Certificate issuer:       /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
Manifest number:          01AC
Signing time:             Sun 01 Mar 2026 04:56:40 +0000
Manifest this update:     Sun 01 Mar 2026 04:56:39 +0000
Manifest next update:     Sun 08 Mar 2026 04:56:39 +0000
Files and hashes:         1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: F/7kd+xyKkiEDJsvziZxzZEuBtnzMGGLydtIG+Mrhiw=)
                          2: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: 9Q+HQXXAbRbCindFzL11Sl7xP8MpJ0UkQtCzSJLhKzg=)
                          3: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: Af5Dk6PvZbcdMA4DkF0hlb165xcGBe8IuWniIFEXzBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
                          rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
        Validity
            Not Before: Mar  1 04:56:39 2026 GMT
            Not After : Mar  8 04:56:39 2026 GMT
        Subject: CN=69a3c708-f9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:17:8c:d8:c6:68:b7:9a:9f:fc:93:1d:5d:1a:
                    16:5b:e8:7e:7b:d7:f0:17:42:8a:6d:f5:9f:66:7f:
                    c6:ba:e4:35:e9:4b:cf:ac:6d:38:2a:f2:e2:ff:fd:
                    dc:1b:c5:a4:b3:5c:91:4c:a7:a9:e7:12:68:c9:43:
                    1b:67:74:7f:f6:70:54:29:c4:3a:7e:5e:ab:c0:33:
                    0c:bb:e1:ce:60:16:56:80:88:aa:b0:7b:49:46:5f:
                    52:0e:fc:c3:e9:34:b4:65:b1:7c:6e:04:d1:99:9c:
                    52:dd:5b:d5:9b:7a:a6:98:30:43:bf:fb:5b:7f:ac:
                    6b:1e:13:83:74:c8:eb:a1:3e:9e:cd:8a:86:e7:b7:
                    c9:06:bd:f2:c9:85:4c:5f:84:34:59:42:87:47:8d:
                    7e:de:f2:80:9c:8a:84:b0:0e:7c:0a:9c:d1:d2:ad:
                    e2:cb:f7:eb:ff:ee:08:ff:0e:e7:d3:d5:63:c0:a8:
                    0b:a2:43:80:69:52:94:ed:0d:af:bd:2b:8a:82:cc:
                    7e:92:c8:5b:af:99:27:fa:e4:62:be:bc:d5:00:c0:
                    fd:70:1f:81:57:e4:b7:d4:1f:cd:c3:b0:0d:d8:24:
                    e9:85:f6:df:fe:50:1b:a3:dd:39:73:a7:a7:03:a9:
                    af:16:f7:52:23:80:38:a3:0d:2b:95:98:1a:78:2c:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8E:66:BD:39:71:9C:72:2A:11:14:99:AF:86:42:71:94:7F:C6:B8
            X509v3 Authority Key Identifier:
                keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:4e:2b:db:1c:a3:3f:17:c4:15:96:cf:50:70:13:59:dc:3e:
         b1:94:ef:a3:c2:e8:52:74:88:c5:69:49:0f:7a:65:8d:c2:82:
         c3:76:89:fd:ae:f1:a4:e5:f9:58:51:6d:d8:e6:3e:d8:dc:f1:
         39:8a:31:4b:97:25:a0:b7:2d:8b:18:8a:d2:f2:ff:b3:55:d2:
         1c:33:47:86:13:61:9a:d4:41:dd:b6:3f:37:93:5c:6c:01:dc:
         ca:f7:c4:c6:c5:f6:cf:b7:6f:01:64:ce:7d:5d:87:c0:5b:df:
         1a:eb:92:b3:90:05:e0:58:9a:cb:bc:be:18:99:10:4e:95:84:
         6b:73:62:cc:43:24:7f:e9:04:f0:51:d6:21:5e:fa:71:ff:6b:
         72:19:75:81:fd:ba:5d:db:3f:89:ba:df:2f:e8:72:16:4a:18:
         c9:98:9c:35:52:71:8b:0d:04:0b:5d:87:55:21:aa:a7:1f:27:
         bc:1a:43:95:b2:f4:a5:aa:db:70:03:78:b2:eb:f6:54:77:06:
         4d:1f:01:80:68:ed:0b:ec:e1:1e:42:a4:3f:b4:f0:90:25:12:
         60:fa:ae:90:cd:da:9a:57:3f:aa:84:c9:52:46:70:cc:d5:ac:
         94:e7:6c:76:95:10:72:cc:e2:5f:e2:fc:1b:51:ed:53:dc:bf:
         f7:f2:d3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:49 2026 by rpki-client