Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
File:                     yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json)
Hash identifier:          aIpeRwAhrL+KwGy3j95RFCCkvfGckVdHG8LACCOAVCY=
Subject key identifier:   64:FC:59:8A:6F:A2:66:6F:FC:97:DC:C2:1B:B8:E6:0C:B5:C7:E3:5B
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Certificate issuer:       /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial:       082B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
Manifest number:          0822
Signing time:             Sat 28 Feb 2026 21:21:19 +0000
Manifest this update:     Sat 28 Feb 2026 21:21:19 +0000
Manifest next update:     Sat 07 Mar 2026 21:21:19 +0000
Files and hashes:         1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: Ws3/d9z0CI78AhMUORytniaZ+TSw6tfqAhL1mYyd8Bs=)
                          2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: VJ44WLNQk6fthSf4IfFQ/fDdSEbGp2lfMGV/+APm5xk=)
                          3: E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa (hash: qJReJaaTRE38lshBw+MzbYFyUK14agtT5WHSqFZE0ko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
                          rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2091 (0x82b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
        Validity
            Not Before: Feb 28 21:21:19 2026 GMT
            Not After : Mar  7 21:21:19 2026 GMT
        Subject: CN=69a35c4f-5d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fd:b5:f5:f7:82:f6:d1:74:3d:e5:87:4c:64:
                    18:28:12:bd:fb:81:45:51:51:e7:3a:99:03:c8:ac:
                    80:24:9f:91:3c:8b:16:c0:d2:30:33:0b:51:c3:eb:
                    aa:25:15:62:ff:d2:5b:db:d7:88:d5:11:78:c3:00:
                    75:86:ff:f7:b1:45:e8:1f:3b:6a:1d:9d:83:11:ef:
                    cd:88:1e:bc:0e:6e:e4:15:7a:56:82:3a:cb:bb:bb:
                    5a:36:de:1c:d2:69:46:b0:fc:6e:84:e3:0a:4e:76:
                    24:9c:85:bc:a0:ea:2f:63:ab:9b:35:73:cf:e4:2d:
                    6e:36:48:1b:b1:9d:49:bf:58:c2:5c:8a:e1:c9:0d:
                    9e:ee:a0:b1:08:80:8a:53:88:c9:ca:ca:5c:1f:28:
                    02:b8:5e:67:9d:f5:e4:38:1f:c1:30:31:be:0b:d0:
                    db:cb:7e:bb:84:34:3b:66:b0:7d:93:5b:03:15:8b:
                    a1:c0:c6:ee:24:17:3a:16:28:a0:f4:d7:f1:5f:97:
                    c5:c8:86:7a:44:3b:81:0c:ef:42:66:e9:17:4d:27:
                    d9:30:16:6a:7f:42:72:76:b2:fa:63:da:b1:6f:0c:
                    2a:92:3b:87:07:ec:dd:8f:49:d4:91:e7:fc:cf:5e:
                    05:bd:c6:1c:e5:bc:a0:65:02:e6:e4:d9:b2:81:63:
                    71:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FC:59:8A:6F:A2:66:6F:FC:97:DC:C2:1B:B8:E6:0C:B5:C7:E3:5B
            X509v3 Authority Key Identifier:
                keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:be:01:54:ec:a7:f0:12:e1:a1:20:2b:04:38:e1:e0:d4:07:
         2a:fa:5b:8a:ea:59:d5:4f:85:65:c2:ed:53:df:99:69:2a:d2:
         ba:d0:57:f5:01:e7:ed:05:9c:52:bc:c0:e5:52:c8:db:7f:59:
         b3:9c:70:1d:3b:7f:c4:46:3d:95:28:d7:1d:1f:00:77:d5:28:
         d7:a1:66:68:f6:38:2e:0d:0c:1f:43:df:72:60:f1:50:d1:eb:
         bf:ec:7a:eb:5b:de:08:e1:05:98:62:04:94:16:65:c7:3c:ed:
         56:67:54:b2:80:e3:ca:5e:6e:64:9a:e1:70:9e:d8:79:c4:95:
         5d:32:40:4a:e5:1a:49:3d:43:da:e3:bb:ba:89:70:c6:fb:86:
         17:48:6a:58:ec:35:21:4f:cb:4b:04:71:45:1f:c8:32:cb:db:
         58:b9:e9:0c:63:ec:46:98:40:b1:76:f9:62:13:63:06:c6:3c:
         e0:bb:03:de:b9:68:9f:b5:6c:15:3a:b4:2e:27:71:81:92:b7:
         11:c8:52:11:37:e3:b1:3d:5c:39:29:a3:88:5f:ab:86:25:ba:
         d8:1c:fe:05:1b:ad:84:ba:ca:d7:85:66:e6:96:af:fd:8a:98:
         16:df:3e:22:dc:ee:1c:85:df:5a:70:0a:2c:5a:a6:24:55:c1:
         31:cb:db:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:38 2026 by rpki-client