Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
File:                     ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json)
Hash identifier:          IQlxULjDq7Dk5AGPdRRhZ/Mi/yVmxlALUBDpSq/ljXI=
Subject key identifier:   23:D3:B3:1C:D5:6D:FB:B3:8D:63:AA:78:22:DE:7F:8A:6B:D8:DF:CF
Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
Certificate issuer:       /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Certificate serial:       258D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
Manifest number:          256C
Signing time:             Mon 02 Mar 2026 01:14:53 +0000
Manifest this update:     Mon 02 Mar 2026 01:14:51 +0000
Manifest next update:     Mon 09 Mar 2026 01:14:51 +0000
Files and hashes:         1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: vOCIkFw+2DsSn9B+K3gRXiY5SA8umkmmNfXpjypn0Tc=)
                          2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: /APSJPO1WwUNbNz10EJn94BnFWAnDuB94L0jk/7YJvM=)
                          3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: UvaAhwggzxiP5BreIlqS+S/h5B1PMRbtiBEtDey1XLE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
                          rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9613 (0x258d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
        Validity
            Not Before: Mar  2 01:14:51 2026 GMT
            Not After : Mar  9 01:14:51 2026 GMT
        Subject: CN=69a4e48c-4cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:21:d8:4d:61:91:83:f4:ea:50:26:b2:f1:8a:
                    80:d6:33:70:09:38:bd:43:09:dc:2f:76:57:81:ab:
                    44:d2:8a:8c:5e:31:bc:3f:fc:69:82:11:bf:7d:0e:
                    d0:1a:04:5b:36:9f:33:13:fc:24:a8:4d:a1:00:dd:
                    bc:79:c7:02:f6:41:27:c1:fa:4a:11:b5:31:d2:80:
                    5b:81:11:2d:ee:75:f3:2e:58:fb:a8:a8:f9:10:1d:
                    e9:85:dd:c7:4a:72:97:33:d8:df:0a:2b:4c:55:11:
                    7c:c5:63:aa:43:48:a4:b8:da:d2:8f:46:8d:12:ce:
                    33:f9:22:78:12:39:62:c3:6c:de:53:73:06:21:18:
                    be:55:f2:54:e9:68:a9:16:da:81:f9:81:f0:9e:5e:
                    3c:a9:f2:68:46:78:54:ac:c4:11:13:5f:62:6b:ef:
                    c6:92:bb:63:27:ee:50:6c:59:94:10:5e:6c:a7:dd:
                    1e:36:35:df:cc:a6:94:24:43:61:2e:45:0c:de:24:
                    b0:22:85:5d:37:35:84:45:95:87:d9:6f:df:44:26:
                    72:dd:ab:9f:fc:c3:a9:ed:8f:4b:6e:bb:09:ac:e9:
                    4e:db:be:52:b3:86:d9:d7:34:5d:79:73:d0:c9:19:
                    37:3e:5a:ab:42:93:33:f2:2b:34:97:8a:2f:52:50:
                    09:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D3:B3:1C:D5:6D:FB:B3:8D:63:AA:78:22:DE:7F:8A:6B:D8:DF:CF
            X509v3 Authority Key Identifier:
                keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ee:10:06:eb:5d:4b:59:42:ff:e7:4f:91:8d:18:0a:ec:99:
         13:15:0f:83:ce:61:8a:46:bd:ba:39:fd:b4:6d:4e:d3:a4:71:
         f7:a9:40:f6:b4:ed:f2:2a:12:0a:9b:14:48:b1:08:e0:b0:8f:
         c2:35:a7:f5:76:31:de:a1:89:5a:9d:c2:22:b1:4a:4a:15:3f:
         49:06:42:64:f8:bc:b8:88:45:0c:87:ee:19:63:64:2a:b5:a6:
         d2:fe:3e:18:04:83:18:3c:ff:24:5f:59:ca:91:8f:11:38:f4:
         57:ee:da:23:af:b9:ee:6a:22:62:72:11:3e:c1:98:b6:95:c0:
         fe:fa:ae:74:6d:c5:51:49:bd:c8:57:33:9a:f4:fb:12:a3:0f:
         f0:ad:0d:5e:57:73:1b:ee:af:39:ce:ff:97:99:be:f6:71:cb:
         ee:62:15:87:4c:6d:dd:22:6c:b9:bb:7d:ba:27:be:8a:4e:51:
         75:d0:2b:da:8e:b2:43:09:98:cc:71:7e:22:17:71:1e:d3:b7:
         23:0b:3e:0e:67:10:91:dd:6f:74:61:b4:b1:cd:49:d7:d8:b3:
         ce:f5:8d:25:d8:c1:33:df:40:76:07:b7:3f:2f:4c:39:a7:f9:
         4f:33:65:31:44:7e:6a:67:cb:72:fc:50:23:05:e0:dd:0a:4e:
         d5:87:aa:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4
N0QyRDhGNTcwHhcNMjYwMzAyMDExNDUxWhcNMjYwMzA5MDExNDUxWjAYMRYwFAYD
VQQDEw02OWE0ZTQ4Yy00Y2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsyHYTWGRg/TqUCay8YqA1jNwCTi9QwncL3ZXgatE0oqMXjG8P/xpghG/fQ7Q
GgRbNp8zE/wkqE2hAN28eccC9kEnwfpKEbUx0oBbgREt7nXzLlj7qKj5EB3phd3H
SnKXM9jfCitMVRF8xWOqQ0ikuNrSj0aNEs4z+SJ4Ejliw2zeU3MGIRi+VfJU6Wip
FtqB+YHwnl48qfJoRnhUrMQRE19ia+/GkrtjJ+5QbFmUEF5sp90eNjXfzKaUJENh
LkUM3iSwIoVdNzWERZWH2W/fRCZy3auf/MOp7Y9LbrsJrOlO275Ss4bZ1zRdeXPQ
yRk3PlqrQpMz8is0l4ovUlAJHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCPTsxzV
bfuzjWOqeCLef4pr2N/PMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3
MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq
MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzQ1Ni82MTU0RDE2ODM3MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpm
TFozNzNyZGpnSnVIMHRqMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj+4QButdS1lC/+dPkY0YCuyZExUPg85hika9ujn9tG1O06Rx96lA9rTt8ioS
CpsUSLEI4LCPwjWn9XYx3qGJWp3CIrFKShU/SQZCZPi8uIhFDIfuGWNkKrWm0v4+
GASDGDz/JF9ZypGPETj0V+7aI6+57moiYnIRPsGYtpXA/vqudG3FUUm9yFczmvT7
EqMP8K0NXldzG+6vOc7/l5m+9nHL7mIVh0xt3SJsubt9uie+ik5RddAr2o6yQwmY
zHF+IhdxHtO3Iws+DmcQkd1vdGG0sc1J19izzvWNJdjBM99Adge3Py9MOaf5TzNl
MUR+amfLcvxQIwXg3QpO1YeqBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:31 2026 by rpki-client