Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
File:                     dYrCvtrcujrXOBafs4nVCLVNdL8.mft (raw, json)
Hash identifier:          HhWTF9NMYv17zPxDR1rvlUpqCvyyHEY/GbrUMi9dwBM=
Subject key identifier:   98:8D:4E:D9:C2:BC:41:B0:17:83:18:7F:98:19:4E:7F:53:98:29:0F
Authority key identifier: 75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF
Certificate issuer:       /CN=A915479A/serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
Manifest number:          C7
Signing time:             Sun 01 Mar 2026 08:01:24 +0000
Manifest this update:     Sun 01 Mar 2026 08:01:23 +0000
Manifest next update:     Sun 08 Mar 2026 08:01:23 +0000
Files and hashes:         1: dYrCvtrcujrXOBafs4nVCLVNdL8.crl (hash: YNlkgk+PrGmXuK1lqqUpuuVdhtvDukStsRThyooCHHw=)
                          2: 88A1F6DEE37B11EFB4D75458C4F9AE02.roa (hash: KDGyy/GchxuzslQqk05EAU/7HZtXDChnhvSxOxv70ns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl
                          rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915479A, serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF
        Validity
            Not Before: Mar  1 08:01:23 2026 GMT
            Not After : Mar  8 08:01:23 2026 GMT
        Subject: CN=69a3f254-4b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:ce:46:f9:11:8f:76:b3:5c:16:b3:99:4e:
                    25:2f:2d:fb:8a:6c:6c:bf:bc:34:b0:da:1d:7a:06:
                    b7:76:4f:e6:cc:0e:bd:28:e9:5c:0d:db:82:3f:d9:
                    6a:55:89:c7:07:47:cd:6f:6f:b9:0a:9f:f9:ef:3f:
                    de:25:24:e9:b6:02:17:c2:df:46:b3:d4:2a:73:71:
                    aa:29:75:f9:81:62:30:14:78:b5:5a:ea:2f:6b:8a:
                    16:09:4d:43:93:47:9f:a7:f6:49:90:33:ae:d1:7f:
                    26:7f:d8:37:be:2a:6e:bb:f0:ad:60:60:3f:cc:67:
                    8a:92:db:fa:09:cc:e7:50:32:d1:72:ad:ad:34:4b:
                    2e:ff:b6:64:61:8b:61:ee:80:7c:e9:c9:8c:61:64:
                    cc:60:9a:9a:2d:06:96:a2:69:b6:38:6c:c7:50:a5:
                    04:d1:a6:60:48:51:76:62:f8:76:ff:1c:23:38:6c:
                    d2:ea:70:4f:07:ce:4f:1a:b2:7a:12:4d:b0:5c:c0:
                    23:84:1d:4c:c2:2c:4b:3d:ad:d1:48:99:76:55:dc:
                    23:10:2c:c5:12:41:b6:33:66:4e:f6:41:3f:3a:bf:
                    67:e4:33:17:a8:8f:57:39:e4:a8:6c:81:e6:90:e6:
                    58:e4:aa:f7:76:90:f7:e6:a5:9e:12:d9:77:27:3f:
                    30:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8D:4E:D9:C2:BC:41:B0:17:83:18:7F:98:19:4E:7F:53:98:29:0F
            X509v3 Authority Key Identifier:
                keyid:75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:1a:2d:d6:0c:7d:c6:71:22:4d:84:ef:5d:04:a9:a6:26:6c:
         d5:a1:02:5e:a8:6e:cc:9f:de:04:1f:c5:d0:17:ac:87:0f:8e:
         55:c6:ab:b0:25:fe:d9:4d:a4:c9:fc:f6:20:0c:da:b1:b5:ec:
         1c:f1:6a:0b:e4:f2:39:c5:51:c3:fb:5c:7d:1a:56:19:28:96:
         e1:c7:9e:fd:5d:fd:45:dd:d9:1e:03:6b:90:69:71:ac:97:a7:
         90:9e:fb:5e:9e:b1:56:5c:5d:2a:66:4c:b4:a5:7a:e0:26:6a:
         60:3c:9d:aa:aa:9b:0c:00:78:81:3e:a5:88:76:45:92:06:3a:
         1d:bf:2a:47:56:ac:78:e3:a1:84:d3:62:b1:c2:9b:62:a1:54:
         83:93:1f:d7:37:6b:77:1c:3d:a4:01:44:77:e6:d9:52:49:14:
         a2:25:22:97:76:3e:80:d2:0c:03:0c:5f:ce:3e:75:63:71:e6:
         5b:f3:84:35:0c:de:6d:df:3b:bb:2d:cd:1b:00:dc:e0:2e:8f:
         67:6c:4b:46:34:3f:db:85:80:59:a3:fc:83:84:df:05:20:49:
         ea:03:f7:bc:01:c4:91:0b:ae:85:6a:08:f9:d8:db:c7:5f:b9:
         42:eb:dc:63:4e:87:1b:74:8e:8a:82:b1:15:e6:82:43:b6:e5:
         61:c6:03:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:28 2026 by rpki-client