Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
File:                     YiiraKJGC9xWaItuVYkXkN2ASxA.mft (raw, json)
Hash identifier:          uVOohWcQmzKtLHTFRM40G5+xQlnS9zKSifxcDc4y5qc=
Subject key identifier:   50:18:26:51:04:49:6A:5E:4E:0B:E2:F8:D0:64:D1:79:AB:AE:B1:87
Authority key identifier: 62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10
Certificate issuer:       /CN=A916A285/serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10
Certificate serial:       023E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
Manifest number:          0235
Signing time:             Mon 02 Mar 2026 00:57:01 +0000
Manifest this update:     Mon 02 Mar 2026 00:57:00 +0000
Manifest next update:     Mon 09 Mar 2026 00:57:00 +0000
Files and hashes:         1: YiiraKJGC9xWaItuVYkXkN2ASxA.crl (hash: C2KvMPMcwZaqmqHPHWq+o5z2/p79364d9hpXW0Bkv/4=)
                          2: BCAF365487C111F0AC525C39C4F9AE02.roa (hash: qXkatjQdk9/LRncp/cgGtu7Z2Y3FqEqyaJABgXad1Wc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl
                          rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A285, serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10
        Validity
            Not Before: Mar  2 00:57:00 2026 GMT
            Not After : Mar  9 00:57:00 2026 GMT
        Subject: CN=69a4e05d-f68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:56:1d:f3:d4:88:82:de:d6:f4:9f:98:ee:
                    15:ab:de:a2:76:f4:7b:58:67:e4:88:47:e1:33:06:
                    83:f1:ab:36:bf:ef:b4:84:da:e1:ec:3c:80:73:6b:
                    a4:cf:66:44:31:4a:40:aa:0d:82:41:38:3e:03:aa:
                    fe:7b:12:9b:71:0e:18:38:8a:8a:11:b1:41:11:a9:
                    74:04:11:3c:32:b4:99:f4:5b:fb:8d:3a:75:8b:f7:
                    66:bd:3d:9b:2e:e1:d7:17:31:54:36:23:5f:15:18:
                    a1:e5:48:76:ca:48:03:13:46:3e:d5:5e:ee:d1:b0:
                    d3:d3:0b:67:9f:ce:99:6d:e4:09:94:b2:1b:0f:89:
                    34:ca:d2:21:8e:ae:f5:83:a1:0b:1f:06:34:90:67:
                    9c:b3:88:7e:e5:b3:55:84:5f:da:12:c2:68:cb:61:
                    76:ca:5c:67:2a:23:0b:de:60:b6:f0:81:f2:43:d9:
                    88:ed:1a:3f:7c:8e:c9:61:b8:33:91:25:84:1d:30:
                    1a:2e:00:9f:10:a6:7d:7d:6f:93:df:60:65:87:48:
                    2c:df:fc:a0:cd:8d:5a:9c:50:17:65:9f:05:06:2e:
                    d1:00:63:47:22:e0:8e:2d:77:37:f1:90:28:c7:1e:
                    bf:87:2c:6d:91:41:23:e0:75:a1:65:fc:b2:a1:28:
                    3b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:18:26:51:04:49:6A:5E:4E:0B:E2:F8:D0:64:D1:79:AB:AE:B1:87
            X509v3 Authority Key Identifier:
                keyid:62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9c:82:56:ee:92:33:0a:bd:c8:7c:0d:ba:4c:78:42:5f:0a:
         ab:8b:ac:88:d0:9f:2c:2f:46:9e:3e:a7:b4:51:80:46:3f:6b:
         8f:f1:a9:e8:e9:cc:1f:25:c0:ab:2b:ca:b9:79:69:3e:1d:28:
         b3:84:62:4b:d5:6d:c4:b5:2f:28:a2:59:de:4b:99:1b:a6:6a:
         b6:09:f6:00:3c:3a:f6:14:f4:b4:b2:6b:8c:23:3e:b5:8d:0b:
         bb:a5:f1:da:98:ad:22:2a:e5:30:00:f4:85:84:7d:51:d3:b5:
         e5:bf:c1:3b:22:f3:71:bd:4d:11:91:55:aa:1c:60:74:77:f6:
         b0:6f:4b:17:0c:cf:79:2a:c4:3c:e3:45:e0:a7:8a:e2:49:ff:
         68:c1:d3:a1:bb:50:96:02:ea:8d:dc:65:2e:04:f3:63:0f:c9:
         6a:cd:8f:08:cb:73:da:cf:d4:24:5d:66:9e:c0:2c:a9:a9:2f:
         f7:bf:b1:98:01:75:91:e9:d5:25:48:89:b7:67:1c:d7:f6:91:
         6a:43:db:a8:3b:60:0f:df:ad:64:a3:a4:0e:5f:c4:fa:11:fe:
         b7:79:52:18:22:32:1c:e4:05:db:a7:b4:96:23:e4:ce:08:de:
         28:88:fd:63:5e:44:7d:48:b1:25:57:79:24:6c:ef:2c:80:cb:
         da:4b:b7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:02 2026 by rpki-client