Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft
File:                     YgNWI5rPPPQIizzmK88YvKgIncc.mft (raw, json)
Hash identifier:          m1sRAwqj5TTXhiAZapNWE/LNHpGNglAuEA1qdr3s2IQ=
Subject key identifier:   5E:0D:78:EE:43:AD:CC:EA:C7:2D:16:FF:00:B4:EF:74:28:D1:9D:74
Authority key identifier: 62:03:56:23:9A:CF:3C:F4:08:8B:3C:E6:2B:CF:18:BC:A8:08:9D:C7
Certificate issuer:       /CN=A9168497/serialNumber=620356239ACF3CF4088B3CE62BCF18BCA8089DC7
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgNWI5rPPPQIizzmK88YvKgIncc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft
Manifest number:          1C
Signing time:             Sun 01 Mar 2026 10:24:59 +0000
Manifest this update:     Sun 01 Mar 2026 10:24:58 +0000
Manifest next update:     Sun 08 Mar 2026 10:24:58 +0000
Files and hashes:         1: YgNWI5rPPPQIizzmK88YvKgIncc.crl (hash: YjxITaDKaPWl5n0ByODe2XsLOrEdFKD0ZIyTNO6+B0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.crl
                          rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgNWI5rPPPQIizzmK88YvKgIncc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168497, serialNumber=620356239ACF3CF4088B3CE62BCF18BCA8089DC7
        Validity
            Not Before: Mar  1 10:24:58 2026 GMT
            Not After : Mar  8 10:24:58 2026 GMT
        Subject: CN=69a413fb-5274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a9:f5:e2:71:0f:b5:da:fd:e2:a8:43:8a:01:
                    40:a2:26:cb:35:eb:61:77:5a:e1:25:33:83:bd:ab:
                    dc:7d:ff:eb:5d:37:51:74:12:d8:f7:3f:34:87:3d:
                    bc:5e:11:79:20:80:cd:e1:d6:17:b0:09:6a:a4:0a:
                    d3:92:3e:07:bf:47:53:66:7a:76:5c:ec:37:b4:18:
                    b1:6f:3e:20:0c:99:15:74:16:28:30:7d:41:89:2b:
                    81:3f:ad:bf:ac:80:fb:08:2f:aa:30:6c:bc:ae:13:
                    e5:86:6d:7b:b1:08:02:96:24:00:0c:75:57:30:ce:
                    64:a7:0f:0b:e7:41:d5:37:3a:76:f1:cf:af:a8:c8:
                    85:e0:f3:04:d6:0b:03:a3:b1:b4:d4:7d:ef:2e:23:
                    a0:bb:35:83:4a:df:91:c0:5d:8c:a2:9c:d1:32:1c:
                    d4:c1:01:09:55:0f:6d:07:8a:3f:da:4a:ce:f4:65:
                    16:f4:59:79:92:97:f3:f6:b6:64:c4:d3:ee:88:27:
                    92:43:ab:11:d1:8f:32:34:fa:39:3c:1c:33:9e:5f:
                    a4:c3:03:65:90:52:5e:cb:1e:44:5b:9e:c3:8d:40:
                    23:e7:f5:53:21:9e:72:fe:3e:d5:04:da:40:99:23:
                    e8:7a:98:eb:1d:2b:62:52:c6:a0:4c:97:13:40:e1:
                    18:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0D:78:EE:43:AD:CC:EA:C7:2D:16:FF:00:B4:EF:74:28:D1:9D:74
            X509v3 Authority Key Identifier:
                keyid:62:03:56:23:9A:CF:3C:F4:08:8B:3C:E6:2B:CF:18:BC:A8:08:9D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgNWI5rPPPQIizzmK88YvKgIncc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:7a:9e:00:a3:3c:03:44:b4:23:ce:3f:61:18:06:c0:e8:91:
         9d:c5:00:3e:66:a4:60:63:89:48:64:53:cb:b5:83:fa:64:02:
         c0:f6:c1:38:39:ad:9b:f0:ce:84:ca:d8:8a:0a:c0:15:be:33:
         41:bb:85:ad:02:28:22:7b:56:1e:27:04:fb:18:6c:96:2c:18:
         c9:64:ef:18:42:80:a9:8d:41:76:39:62:c3:a3:ca:19:75:f5:
         82:59:46:60:9b:8b:bf:b5:c8:f8:19:3e:ba:9f:a5:d3:55:01:
         6b:3c:f5:0a:f6:99:af:ac:2d:b4:be:94:da:38:80:61:cd:94:
         f7:13:34:95:2a:27:f3:7c:6d:e5:e8:2f:75:aa:e4:09:4c:55:
         d1:bd:5b:ef:24:93:09:43:37:96:11:a4:a4:06:4a:7b:46:e8:
         2c:41:79:df:fa:55:31:f3:a8:21:42:88:9b:ca:c3:56:10:ec:
         e5:99:8e:b4:50:35:28:d8:9e:6a:92:a9:b9:02:59:36:9e:73:
         4d:d7:8f:aa:62:16:4c:0a:86:f5:56:f9:a9:14:5d:fe:09:95:
         03:22:06:7c:68:44:df:4b:1e:3a:59:eb:38:a9:90:86:05:c1:
         33:ed:a0:1e:37:5b:2b:67:e4:ce:35:44:bb:1d:85:ad:ee:5c:
         e6:d3:fa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:08:37 2026 by rpki-client