Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
File:                     Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json)
Hash identifier:          Y3s31qdnDBKrXlt2qTefBnb+OFtleHJQiwITjCPEA7E=
Subject key identifier:   25:3D:F2:FB:4B:AE:52:20:CD:B8:71:AC:34:14:F8:EC:7C:C0:55:26
Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56
Certificate issuer:       /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
Certificate serial:       045F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
Manifest number:          045A
Signing time:             Sun 01 Mar 2026 00:55:17 +0000
Manifest this update:     Sun 01 Mar 2026 00:55:16 +0000
Manifest next update:     Sun 08 Mar 2026 00:55:16 +0000
Files and hashes:         1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: Mcj7EddpZ0eJCELYLG93YRPMJkBFTp+h5LosT1MVEKg=)
                          2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: 4ePFqqTPP+4ZfS7bacR18941px2N5kQ0emROx+NaWmA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl
                          rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119 (0x45f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
        Validity
            Not Before: Mar  1 00:55:16 2026 GMT
            Not After : Mar  8 00:55:16 2026 GMT
        Subject: CN=69a38e74-b87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:51:1b:51:5c:35:c0:4b:e6:4f:94:e3:ff:b4:
                    09:0a:03:82:53:4c:21:43:3d:34:1e:23:99:97:c2:
                    de:18:22:d6:5f:12:8a:cd:0f:5b:a7:38:18:b2:e8:
                    8d:fc:ac:f8:91:82:11:5e:f2:69:71:81:a1:8c:f9:
                    56:c8:26:28:31:fe:ba:ca:6b:4d:b2:6c:6b:6b:8b:
                    22:6f:1e:bc:1e:0d:1c:22:6c:c9:28:d0:15:c8:4c:
                    7d:2a:83:f0:d9:32:26:32:d2:3e:e3:38:28:8e:b6:
                    09:52:7b:ce:a5:e1:fc:50:50:66:f0:8c:7d:3f:ad:
                    dd:52:ec:c5:f7:ec:06:31:b3:13:80:7a:82:28:aa:
                    3d:69:de:34:1e:79:67:9a:d4:94:8f:fb:3b:9f:08:
                    97:99:21:92:f5:8b:0c:cb:72:7e:6f:a1:85:5e:a8:
                    02:34:a2:a5:00:c3:d1:9b:83:6d:31:92:31:22:aa:
                    2c:8d:c8:b0:16:73:3b:11:5b:e0:c7:85:00:6a:05:
                    1e:25:fd:3d:f4:11:b2:33:bd:1d:27:f6:ff:ed:e0:
                    02:6f:f3:a3:d9:4b:c7:3c:a9:e8:27:f5:a8:88:0d:
                    cb:24:28:56:f5:68:18:2d:0c:8f:71:51:05:91:22:
                    e7:07:96:5a:c6:57:52:de:f2:26:fb:a1:c7:f7:66:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3D:F2:FB:4B:AE:52:20:CD:B8:71:AC:34:14:F8:EC:7C:C0:55:26
            X509v3 Authority Key Identifier:
                keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b5:01:95:19:f8:5f:9b:c3:1d:b8:66:83:ca:9f:fb:75:66:
         0d:04:32:17:b0:36:b8:b2:b8:12:af:5b:47:7c:bd:e4:11:72:
         79:2d:aa:c2:e7:4c:be:a2:01:e8:a8:fd:0e:af:7a:1f:60:9f:
         73:05:f3:43:40:08:f1:66:a7:15:ff:21:25:10:b0:a3:33:72:
         99:30:fb:d6:da:82:bd:45:3b:47:60:93:01:df:38:e9:99:83:
         65:2d:63:d6:f1:0f:ef:cc:21:f7:9a:52:25:4d:0d:7e:38:06:
         29:e1:f3:47:a8:74:7b:ee:9e:d2:f3:29:32:ec:83:0e:83:85:
         9c:13:2e:b8:e3:f1:07:a6:6f:70:f7:0d:78:42:43:4f:22:91:
         ee:ef:c8:f2:de:75:30:3c:84:65:4d:1c:e0:76:9e:35:26:52:
         6f:04:f5:98:7d:4d:8e:38:af:8b:d4:35:19:c6:fd:39:31:c6:
         27:0e:7a:74:17:42:15:8b:17:01:87:20:25:c0:f5:79:37:e5:
         9f:db:9a:bc:2c:bf:4d:29:5b:9f:a4:f9:43:b7:39:f8:f3:5a:
         21:3d:24:59:d8:6a:ee:f3:23:e1:60:47:90:30:39:cb:5d:7a:
         e8:06:97:b3:df:ce:3c:ac:33:53:d5:cb:5f:5a:c3:12:36:2e:
         de:ec:4c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:57:49 2026 by rpki-client