Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
File:                     yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft (raw, json)
Hash identifier:          23qH4YcYiRZf0e4EurbU8Ipp8Uf6ouEaoFg7T+WBlio=
Subject key identifier:   E7:A6:B8:13:22:C7:B9:74:DE:82:02:AC:E3:82:27:E8:15:08:8F:92
Authority key identifier: CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF
Certificate issuer:       /CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
Manifest number:          0153
Signing time:             Sun 01 Mar 2026 06:04:58 +0000
Manifest this update:     Sun 01 Mar 2026 06:04:58 +0000
Manifest next update:     Sun 08 Mar 2026 06:04:58 +0000
Files and hashes:         1: yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl (hash: jCXZ/BdcnjbZDZ0o9bMmn/PhqGMq7KNH77BP6V+XGIc=)
                          2: F8636CC60F9D11EFA1E14343C4F9AE02.roa (hash: tBki4iy/q8HliVYsXbIzEJgcPuIm2NjXgIYSPz8ugw8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl
                          rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153675, serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
        Validity
            Not Before: Mar  1 06:04:58 2026 GMT
            Not After : Mar  8 06:04:58 2026 GMT
        Subject: CN=69a3d70a-1472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:de:55:06:49:4e:67:63:ab:11:bb:e1:44:c5:
                    c5:12:b6:75:1d:ac:ba:12:a0:16:6f:23:55:11:d7:
                    cb:3f:6c:ad:a9:1f:d6:40:55:12:0f:94:51:d2:dd:
                    38:b8:6e:cd:0c:2e:79:7b:a8:79:46:b6:37:1b:da:
                    0e:d1:f7:40:30:87:19:66:48:4b:58:8b:e8:77:b5:
                    5b:5c:98:db:8d:d6:43:f6:ad:51:39:49:7a:6d:c9:
                    fb:2c:0d:bb:30:3c:77:fd:c9:29:69:71:04:43:e6:
                    74:5e:2a:d4:9a:94:75:28:d9:10:c8:76:bb:26:dc:
                    59:cd:05:e1:90:ac:89:f0:14:98:69:18:1e:ad:5b:
                    63:87:c8:4a:20:d0:59:66:17:3f:a9:d3:c7:76:97:
                    c6:7e:45:63:22:8f:83:c1:c0:b0:db:56:e1:bb:36:
                    df:ab:c7:73:da:b5:43:33:85:4d:86:7c:0d:9f:bf:
                    50:0b:ad:47:92:32:33:03:cd:fa:6c:69:f2:0d:5f:
                    7c:3f:0c:be:c1:5c:c1:0d:56:c7:b2:d1:3e:f5:79:
                    8c:fe:60:1e:00:b6:57:18:2f:6a:21:13:8c:2f:6b:
                    92:a7:72:30:b6:15:6a:9a:c2:5f:69:17:41:99:30:
                    e8:6d:49:18:60:e8:45:dd:ca:ee:35:bc:37:97:b7:
                    e1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A6:B8:13:22:C7:B9:74:DE:82:02:AC:E3:82:27:E8:15:08:8F:92
            X509v3 Authority Key Identifier:
                keyid:CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:4d:1d:b6:05:70:7c:8e:41:82:d6:95:7c:1a:09:b3:b5:34:
         14:1a:10:91:39:2a:77:de:45:04:8e:bb:93:15:ac:93:f3:e3:
         2e:e2:54:35:98:04:55:f8:82:0f:80:f2:b2:90:84:4a:6a:fb:
         b2:70:e0:79:6d:fb:87:41:e5:c3:44:fb:d2:a8:e4:5e:49:fa:
         46:6f:0b:32:c1:cb:27:da:81:e4:8c:9e:01:43:6e:ac:6b:75:
         a1:53:d0:eb:15:26:a8:3f:fa:f9:3e:e8:49:e5:f0:c6:67:82:
         3b:a0:c9:53:37:a3:69:13:82:86:cb:bb:05:0b:65:e1:94:96:
         04:e0:d2:8e:ca:73:7d:59:e5:3b:22:c1:07:44:c3:6e:d8:e4:
         03:cf:4f:1f:68:3d:8b:bd:a0:14:9f:4b:57:7c:45:73:fb:80:
         24:02:e1:79:ef:de:cf:9a:01:5b:d4:44:db:81:f1:78:af:6e:
         a0:76:b4:cb:c9:62:b3:f8:be:eb:4c:b9:1e:78:8a:86:f8:d4:
         b8:fd:d0:e7:0a:5a:7e:40:48:d1:36:a0:45:4f:75:07:42:0e:
         d2:fe:82:fa:ed:79:05:20:77:64:71:bf:c3:47:3f:72:5b:fe:
         a5:2e:18:6a:06:c6:6b:2a:dc:a0:a4:e2:25:4f:76:77:59:60:
         34:a2:92:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:10 2026 by rpki-client