Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
File:                     yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json)
Hash identifier:          y9zunHGbyHChJgtvPWHtNYkAqelc3Kjml0J3WbB5bRo=
Subject key identifier:   D6:94:DD:98:50:87:F1:1B:39:9C:D4:8D:27:BD:24:82:09:99:1D:42
Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91
Certificate issuer:       /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
Certificate serial:       01FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
Manifest number:          01F2
Signing time:             Sun 01 Mar 2026 23:20:17 +0000
Manifest this update:     Sun 01 Mar 2026 23:20:15 +0000
Manifest next update:     Sun 08 Mar 2026 23:20:15 +0000
Files and hashes:         1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: YTB4HtQTZauG+t889bdIzzz4W4Za+lUlj20MmgjZ2h4=)
                          2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: rQ+1OcyjHezWFqWYZ65A+pce2X8sBRkVZ+HRYo38KSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl
                          rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162969, serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
        Validity
            Not Before: Mar  1 23:20:15 2026 GMT
            Not After : Mar  8 23:20:15 2026 GMT
        Subject: CN=69a4c9b0-a667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b7:86:ce:17:89:9a:e8:2a:59:f6:b4:4e:6c:
                    b4:3a:9f:3e:a8:19:3b:c2:36:4d:17:30:70:01:9e:
                    e8:44:2d:03:8b:f9:50:cb:8c:f6:31:3a:56:19:77:
                    55:5e:ef:42:77:0b:1c:4c:62:58:9f:13:db:d3:84:
                    02:ce:9f:20:0d:2e:13:9b:e2:f7:65:ee:3f:64:19:
                    d7:01:b1:c8:17:e8:ea:48:4a:e8:25:03:c4:6a:19:
                    10:9a:5b:81:28:70:34:e8:f5:0d:66:49:9e:d6:1b:
                    d3:13:dc:1f:0d:15:62:dd:a0:3a:de:8c:ea:c4:ce:
                    4a:22:b7:9a:13:45:43:b9:39:61:52:40:2a:ec:9d:
                    ee:a3:eb:e9:56:9a:40:03:2f:9d:c3:c4:c4:df:08:
                    ad:6a:a7:09:cc:24:97:f9:72:47:3c:e5:ed:d3:2d:
                    db:df:e4:b2:e6:b2:3d:b5:d7:d4:ea:50:bf:9c:e1:
                    da:10:d9:88:58:31:0a:b4:04:d5:b9:09:69:28:57:
                    63:35:be:f9:00:4f:51:b6:b2:63:70:f8:b8:ec:23:
                    29:38:52:4a:f7:37:c3:26:a2:56:06:ca:21:2f:a7:
                    cc:95:05:c5:fe:da:9b:58:14:57:d6:d1:70:94:41:
                    c5:a2:bf:6c:6d:c3:cb:b7:51:00:45:01:57:c7:78:
                    59:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:94:DD:98:50:87:F1:1B:39:9C:D4:8D:27:BD:24:82:09:99:1D:42
            X509v3 Authority Key Identifier:
                keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:92:e1:76:59:45:03:45:0f:9d:0e:b4:23:ca:09:35:af:a6:
         48:04:dc:4d:e3:47:28:df:08:9a:4d:6d:b7:a3:49:25:97:0b:
         5c:93:06:cd:8f:b7:42:7b:f2:78:aa:6d:03:4d:78:8a:e1:63:
         e0:dc:e0:af:1d:8a:05:08:66:2a:ff:e3:6d:1e:6b:41:9c:c7:
         d7:23:1d:d4:ce:28:3c:33:33:99:31:31:21:4e:0e:f8:0c:28:
         59:f5:7b:29:13:9d:45:4e:55:b5:fa:d8:4a:d2:ad:71:a2:da:
         18:62:70:1c:f1:2a:5b:3d:74:4d:59:96:fd:fc:a8:97:6e:45:
         19:60:18:25:e7:62:41:86:27:cc:22:a9:1b:5a:b0:ef:07:fe:
         2f:80:3b:b7:94:47:5a:a1:eb:78:bf:16:97:27:87:7c:79:35:
         dd:27:3f:e9:1a:cb:f5:5c:d1:85:7f:75:4c:08:31:00:57:60:
         3a:b3:95:50:60:5d:01:51:1a:19:b0:64:17:e3:99:79:37:ff:
         45:ff:91:68:22:28:d4:d6:d4:a4:68:d1:f3:39:3c:94:bd:8e:
         ca:fb:a5:8e:cd:77:65:03:e9:03:ad:0c:25:6a:39:43:28:01:
         c7:f0:26:1f:50:fc:b2:bb:d2:f9:ae:7e:a0:42:6e:04:93:71:
         66:f7:bf:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI5NjkxMTAvBgNVBAUTKEM5OEVGMjJBREZGRjYxM0Y1Njk4MzUzRkM4NUIwQzkw
NkRGNDdFOTEwHhcNMjYwMzAxMjMyMDE1WhcNMjYwMzA4MjMyMDE1WjAYMRYwFAYD
VQQDEw02OWE0YzliMC1hNjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5reGzheJmugqWfa0Tmy0Op8+qBk7wjZNFzBwAZ7oRC0Di/lQy4z2MTpWGXdV
Xu9CdwscTGJYnxPb04QCzp8gDS4Tm+L3Ze4/ZBnXAbHIF+jqSEroJQPEahkQmluB
KHA06PUNZkme1hvTE9wfDRVi3aA63ozqxM5KIreaE0VDuTlhUkAq7J3uo+vpVppA
Ay+dw8TE3witaqcJzCSX+XJHPOXt0y3b3+Sy5rI9tdfU6lC/nOHaENmIWDEKtATV
uQlpKFdjNb75AE9RtrJjcPi47CMpOFJK9zfDJqJWBsohL6fMlQXF/tqbWBRX1tFw
lEHFor9sbcPLt1EARQFXx3hZ0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNaU3ZhQ
h/EbOZzUjSe9JIIJmR1CMB8GA1UdIwQYMBaAFMmO8irf/2E/Vpg1P8hbDJBt9H6R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjk2OS8wREIzNDQzMjI2
MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lUOVdtRFVfeUZzTWtHMzBm
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lZN3lLdF9fWVQ5V21EVV95RnNNa0czMGZwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Mjk2OS8wREIzNDQzMjI2MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lU
OVdtRFVfeUZzTWtHMzBmcEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFpLhdllFA0UPnQ60I8oJNa+mSATcTeNHKN8Imk1tt6NJJZcLXJMGzY+3Qnvy
eKptA014iuFj4Nzgrx2KBQhmKv/jbR5rQZzH1yMd1M4oPDMzmTExIU4O+AwoWfV7
KROdRU5VtfrYStKtcaLaGGJwHPEqWz10TVmW/fyol25FGWAYJediQYYnzCKpG1qw
7wf+L4A7t5RHWqHreL8WlyeHfHk13Sc/6RrL9VzRhX91TAgxAFdgOrOVUGBdAVEa
GbBkF+OZeTf/Rf+RaCIo1NbUpGjR8zk8lL2Oyvuljs13ZQPpA60MJWo5QygBx/Am
H1D8srvS+a5+oEJuBJNxZve/Cw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:58 2026 by rpki-client