Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
File:                     YeT4YWtiQmYakffQErbNHkCTiQs.mft (raw, json)
Hash identifier:          vTAxCOhJPSa6JmRH9o1eMG59oe6MyWUCT4IH7TeaoAs=
Subject key identifier:   FB:B6:F8:C5:AE:3A:32:AA:46:93:F3:ED:C9:42:36:AB:82:A9:9B:E7
Authority key identifier: 61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B
Certificate issuer:       /CN=A91605D7/serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
Manifest number:          016E
Signing time:             Sun 01 Mar 2026 05:45:27 +0000
Manifest this update:     Sun 01 Mar 2026 05:45:26 +0000
Manifest next update:     Sun 08 Mar 2026 05:45:26 +0000
Files and hashes:         1: YeT4YWtiQmYakffQErbNHkCTiQs.crl (hash: t2hxmjo8NjoOzHteCuBBMU2eUv8ZhO32PW2IXrkwCmU=)
                          2: EA46D7ECE57F11EE96F8FB39C4F9AE02.roa (hash: NSJGyrEWDrkxD54heabP960jKMt1bxB8Ljqg2B9Pmbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl
                          rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91605D7, serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
        Validity
            Not Before: Mar  1 05:45:26 2026 GMT
            Not After : Mar  8 05:45:26 2026 GMT
        Subject: CN=69a3d276-b713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:37:e4:2b:8a:30:b0:1c:f7:0c:62:dc:ed:
                    52:52:01:8d:37:70:fe:df:b9:e3:c3:a9:a8:b7:70:
                    bc:38:32:52:e7:ed:9f:d5:69:a6:49:34:a0:a6:09:
                    fb:e6:f3:70:dc:6d:ab:a6:a9:3d:14:22:b2:64:da:
                    a9:63:e7:98:51:bd:2a:a8:46:03:e3:b5:f6:f4:39:
                    90:52:5a:88:21:92:2a:c3:7b:f7:a1:b4:97:f1:95:
                    e5:86:d0:27:6c:d0:13:68:55:54:b7:b8:de:4e:c4:
                    d4:f3:25:40:b1:17:2d:a1:4d:15:67:96:e6:d3:3a:
                    02:93:79:78:e2:bb:59:3e:56:bc:52:27:7a:04:c5:
                    f1:1b:23:7a:f2:bb:3c:07:45:62:05:18:a1:42:e3:
                    7e:f2:73:f3:c0:e7:cf:d3:19:22:40:e5:0f:c4:43:
                    f1:bb:4a:4e:26:0a:86:42:41:d1:e1:0d:3d:0f:4f:
                    9b:68:6c:dd:e7:b8:20:22:44:8c:15:89:73:e8:46:
                    49:36:ee:f8:e5:39:91:85:19:55:13:1c:98:04:e9:
                    27:d0:8f:a5:e7:e9:7a:fb:03:78:66:7f:7e:cc:4d:
                    87:44:83:13:fc:5e:fd:09:bd:ac:b4:9f:ec:08:16:
                    55:fc:83:c1:a1:a1:0e:90:5b:76:ab:47:8d:e2:51:
                    b8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B6:F8:C5:AE:3A:32:AA:46:93:F3:ED:C9:42:36:AB:82:A9:9B:E7
            X509v3 Authority Key Identifier:
                keyid:61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2c:2a:5b:b9:85:d3:8f:d6:00:79:2e:97:80:76:fb:c4:40:
         54:5c:ec:d7:58:54:0d:3a:c5:91:35:6d:d6:42:da:71:23:19:
         7a:15:b9:ad:f3:20:de:25:34:6c:0f:be:48:fb:7b:cf:63:0d:
         48:f4:8c:cb:f8:57:1e:71:63:df:50:0c:99:77:2b:bf:89:4c:
         9f:78:c9:b0:79:ae:56:84:10:31:53:87:a5:6d:54:c2:1b:a3:
         8c:1e:1e:13:50:00:6e:9d:8c:55:66:39:61:c1:c5:81:d7:41:
         23:8b:47:08:23:fd:56:5d:68:4e:04:ad:f2:99:07:a7:b0:5b:
         7b:a2:48:be:bf:e6:cb:97:f6:81:f7:a8:9d:2f:03:5e:ea:2c:
         79:6d:cf:52:6a:e2:81:5d:de:96:08:09:00:8f:ed:0b:06:8c:
         9a:17:f2:cc:16:67:56:39:ce:0f:34:f5:ce:34:f6:30:ca:9a:
         f1:59:36:62:d2:91:c6:9d:f1:e9:20:d0:29:15:20:65:de:34:
         6b:e3:57:83:9d:ae:7a:11:91:a8:cd:2b:e2:fc:bf:86:49:39:
         11:00:dd:9b:c2:9e:e5:0c:5f:1e:99:5e:4c:ea:5f:b8:67:59:
         91:02:90:23:7a:db:3b:aa:c1:b6:d7:7d:00:34:39:38:03:80:
         66:85:46:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:50:19 2026 by rpki-client