Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft
File:                     yukPRsIh0AstoIB61MSwZQM3Q0Q.mft (raw, json)
Hash identifier:          0Kt3AooE7yczrtNprfkvD+U7UOcnuVHGXWnEC8e6g6E=
Subject key identifier:   DB:01:B7:D7:FE:89:66:0A:CE:35:E5:EF:71:42:02:3B:CF:D0:92:C1
Authority key identifier: CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44
Certificate issuer:       /CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft
Manifest number:          018F
Signing time:             Sun 01 Mar 2026 05:17:04 +0000
Manifest this update:     Sun 01 Mar 2026 05:17:03 +0000
Manifest next update:     Sun 08 Mar 2026 05:17:03 +0000
Files and hashes:         1: yukPRsIh0AstoIB61MSwZQM3Q0Q.crl (hash: k84J7JUFQ2voNLY36x+a/MMizFT1+1SfNv0AxjEUqcU=)
                          2: 40F782C8B4AA11EEB330C137C4F9AE02.roa (hash: Oy0sD/XZsc15D/sxcRQlGFb92CKWJ3EipEQzMz/zoGc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl
                          rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148526, serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344
        Validity
            Not Before: Mar  1 05:17:03 2026 GMT
            Not After : Mar  8 05:17:03 2026 GMT
        Subject: CN=69a3cbd0-899c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bb:15:69:90:f7:0b:11:12:05:62:8f:21:fc:
                    3e:3e:e9:1a:fc:01:a5:10:8a:e5:3a:2d:e3:31:d3:
                    f0:80:cf:bc:11:fc:07:19:9f:43:df:f5:07:0f:37:
                    84:fe:21:e9:37:25:a0:80:88:84:00:7a:75:23:49:
                    a5:b1:b2:5e:27:ef:4b:2f:4a:1a:64:fe:0d:8b:b4:
                    24:dd:e1:21:f6:60:43:99:c5:f7:e5:8d:e7:8c:6b:
                    f4:f5:55:af:01:17:ee:da:eb:a4:de:4b:05:22:10:
                    29:2d:21:ae:c2:59:d7:cf:d2:cb:26:25:e3:74:4e:
                    73:c8:d3:94:76:90:4c:93:14:fc:94:b2:9f:b1:9b:
                    28:5b:f1:5c:ef:c0:6f:a3:ae:04:58:11:6d:45:09:
                    ce:d4:6f:ff:e7:c9:f7:65:be:24:6e:d9:5a:d6:1f:
                    ab:bc:be:40:b2:73:97:e8:b6:5f:55:e4:6b:b9:4e:
                    6d:ca:9f:68:89:ac:ae:f1:0d:bc:ad:0f:bc:51:c3:
                    30:e7:93:18:1d:65:a4:85:b9:2f:bd:dd:94:f6:e2:
                    d6:c8:1d:fd:f0:27:c3:19:62:f6:17:50:9f:ff:7f:
                    c7:17:4d:b7:22:0a:93:de:aa:b0:68:b9:62:75:88:
                    fa:c8:ef:f8:2b:2e:b0:14:f9:e4:07:8a:b6:05:a9:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:01:B7:D7:FE:89:66:0A:CE:35:E5:EF:71:42:02:3B:CF:D0:92:C1
            X509v3 Authority Key Identifier:
                keyid:CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:bc:73:4e:82:4d:d8:33:15:4f:01:ec:5e:18:32:3b:8e:bb:
         ed:04:fe:33:07:e7:06:9f:fd:77:66:12:ca:0f:01:10:95:c3:
         82:f0:4f:75:8b:b3:f4:f1:7e:21:a0:07:ee:aa:ab:fc:16:2f:
         25:e8:c6:3c:5a:4b:56:91:bc:89:73:4f:ed:c8:14:57:ac:b2:
         72:70:d1:55:05:06:3d:a3:e3:26:51:9c:2f:ab:26:d5:54:a9:
         6d:2c:37:ed:11:65:9f:82:d6:70:71:72:a1:b1:88:f8:4e:cf:
         2f:c1:05:f9:c3:8e:3d:1b:13:da:cf:14:9d:15:fa:13:b6:6f:
         d6:a7:10:65:5d:57:b2:97:dc:6f:9e:b1:f5:98:da:2e:99:ff:
         02:99:47:d9:5d:30:e4:bf:90:d9:d4:2a:95:e3:2b:1f:a1:73:
         69:1d:64:57:6a:6f:1c:8a:43:24:fb:bf:bb:a7:fa:40:c5:5d:
         57:c6:37:54:9a:31:3e:15:e9:4d:e7:81:b2:32:1c:0c:ed:c1:
         a9:d8:17:ba:df:ce:37:16:37:09:e6:e5:ed:d5:b3:5a:b1:c0:
         e1:1e:70:77:d5:c0:5d:bb:9d:b0:49:a4:99:88:ed:46:df:0f:
         a2:32:ac:e9:be:e8:16:c2:27:cb:a5:41:6b:cf:86:dd:c1:87:
         37:ad:8c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:52 2026 by rpki-client