Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
File:                     P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft (raw, json)
Hash identifier:          rS2xT8Pf+7YPkk347hrsqtkSKjOlmG9yfKqu6UzVGhI=
Subject key identifier:   4F:1F:D8:67:A2:B5:5F:56:CE:DC:32:5A:0D:8D:D9:2B:2E:34:FD:10
Authority key identifier: 3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94
Certificate issuer:       /CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094
Certificate serial:       084D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
Manifest number:          0845
Signing time:             Sat 28 Feb 2026 21:11:49 +0000
Manifest this update:     Sat 28 Feb 2026 21:11:49 +0000
Manifest next update:     Sat 07 Mar 2026 21:11:49 +0000
Files and hashes:         1: P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl (hash: NAeAmqfMfiCXeXjNpQhG16/GF0rBi9rUb06NgB1B3WE=)
                          2: 4ED5A00CFE2611EAA4F3424DC4F9AE02.roa (hash: jObAEaW9jlDTMyIb6A8JZqjslqhvlPIsAzJOzv+NnRY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl
                          rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2125 (0x84d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914988F, serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094
        Validity
            Not Before: Feb 28 21:11:49 2026 GMT
            Not After : Mar  7 21:11:49 2026 GMT
        Subject: CN=69a35a15-bbde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9e:e7:4d:85:7c:a6:c0:24:5d:23:f3:c0:b8:
                    8d:cf:3b:4e:f7:96:d4:ec:df:37:03:37:83:0e:60:
                    53:a4:53:e1:0e:7b:4c:84:46:d7:eb:9c:47:97:d5:
                    e7:a9:e4:78:7b:8c:49:80:49:f7:ab:66:ba:56:17:
                    28:df:2a:e8:c6:9e:59:96:33:c4:d4:3c:c4:fa:c0:
                    b2:a6:14:1e:6c:e2:34:61:5a:c1:a6:f6:e2:b3:6e:
                    af:ab:72:8d:c8:ff:a8:45:62:80:0b:25:52:09:d9:
                    dd:7f:24:1c:db:79:63:03:a8:dd:74:bd:cd:8e:83:
                    0c:80:40:92:0d:00:ad:ab:5b:d1:99:16:ae:0a:0a:
                    4d:e7:6d:28:59:ba:e4:50:9d:f2:0d:5d:8f:43:2a:
                    7d:01:16:e1:18:14:5a:a6:13:21:13:57:0b:c1:75:
                    37:38:b4:6a:f2:39:0d:b1:d0:5a:97:f3:cb:7d:c1:
                    ca:53:4c:04:e0:98:d4:87:d4:f0:ff:df:2e:97:86:
                    6c:95:3d:b2:06:4b:ee:51:ea:41:3a:ed:ab:ca:4f:
                    51:de:ba:55:ea:01:b8:69:d4:19:86:58:32:34:a4:
                    05:a7:2f:f9:97:9c:56:03:89:71:71:4a:a9:b4:e5:
                    a5:da:55:11:b2:27:d0:47:2e:d6:34:08:6e:e6:20:
                    60:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1F:D8:67:A2:B5:5F:56:CE:DC:32:5A:0D:8D:D9:2B:2E:34:FD:10
            X509v3 Authority Key Identifier:
                keyid:3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:e2:45:ad:49:00:a6:a4:d2:2c:3b:7b:7b:74:14:65:8d:7c:
         25:37:e5:b7:f9:7d:65:f0:d9:4e:1c:81:d6:fc:7a:4c:f0:90:
         fc:28:9e:ac:50:90:c8:4a:05:95:d9:26:e4:51:b1:08:77:2b:
         a6:be:f6:d4:43:48:00:bd:a6:b9:eb:66:a9:07:d0:29:9a:fc:
         a4:a1:81:49:20:7b:03:ef:23:87:48:9d:17:d0:8a:c1:fe:39:
         73:bb:75:b7:9d:b9:bb:99:8b:bf:7a:67:7c:f8:01:5a:4d:3d:
         4f:a3:8e:5d:b8:ca:c4:56:ec:c5:bb:9f:cd:ea:e4:f2:98:81:
         94:2d:76:c9:1d:98:2f:62:bb:10:6c:14:74:04:f1:b3:9c:70:
         20:2c:15:e4:fc:05:c4:a7:d5:40:6b:b4:4e:fe:49:3f:af:5b:
         32:fc:5d:ea:5a:83:1d:d1:7b:a1:28:85:82:44:6a:ae:13:35:
         9b:79:27:20:3f:23:13:f9:15:2f:b2:39:58:47:ba:6d:78:bc:
         42:62:c2:a5:4c:4e:57:96:2b:31:8e:56:5f:2a:bf:7a:09:06:
         c0:1a:ac:e8:70:c9:12:12:db:b6:2b:0b:df:c0:07:fb:2e:1d:
         cc:37:5a:4b:a9:81:e3:89:86:8b:c0:6b:41:6f:2e:3e:3b:ca:
         27:1a:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:41:35 2026 by rpki-client