Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
File:                     gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft (raw, json)
Hash identifier:          F9Qi4opMvgxa3qWJJQ3u4fQu1D2ZOzkPMQesPOPm1Qs=
Subject key identifier:   BB:42:C1:BE:11:9F:59:A2:5D:28:87:F6:07:46:AD:BC:27:BD:72:59
Authority key identifier: 83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4
Certificate issuer:       /CN=A9171669/serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
Certificate serial:       0307
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
Manifest number:          0303
Signing time:             Sun 01 Mar 2026 02:04:18 +0000
Manifest this update:     Sun 01 Mar 2026 02:04:18 +0000
Manifest next update:     Sun 08 Mar 2026 02:04:18 +0000
Files and hashes:         1: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl (hash: mSqpTZ7K7RYD1IsrqU6bpBYfts1U3JHZ/eItQFb8m98=)
                          2: 91BBC8880D9711ED8F09C27DC4F9AE02.roa (hash: KV+SoYHbA+Q51JP+NigJCe33FcHjWlimMC267ADRQGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl
                          rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 775 (0x307)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171669, serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
        Validity
            Not Before: Mar  1 02:04:18 2026 GMT
            Not After : Mar  8 02:04:18 2026 GMT
        Subject: CN=69a39ea2-8e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:5d:aa:9e:fd:8e:f9:46:00:e9:94:aa:03:
                    4f:bd:28:ee:48:2c:5e:d3:27:50:52:e4:94:10:e8:
                    a2:44:5b:dd:76:55:cb:31:06:06:89:c2:bc:a5:b7:
                    21:69:30:5d:7c:6b:c3:9d:aa:5f:91:5f:3c:82:83:
                    d2:12:c2:45:c5:e9:64:fa:c1:01:89:d2:e6:9e:95:
                    47:c6:52:c0:ff:36:6a:1d:c4:53:5e:80:36:c0:b8:
                    9d:38:7e:23:f9:11:fa:59:ff:d3:df:81:c0:8a:89:
                    be:e5:29:6a:41:0a:71:a8:a4:34:fa:46:41:14:c5:
                    88:e2:9f:30:d6:3e:4b:50:84:b6:69:30:25:ab:b3:
                    8b:9b:da:a2:46:1f:30:bb:90:4d:ef:51:a5:1b:8f:
                    70:ab:a1:65:21:0c:33:f4:a1:90:a0:b0:63:13:e2:
                    17:2f:9c:33:9a:a5:a3:45:4f:86:d8:04:66:1f:ca:
                    27:dd:b8:3d:da:97:f9:d5:bc:58:a7:15:ad:d0:77:
                    21:48:de:6d:ba:7e:18:2a:8a:c9:62:4a:92:39:3f:
                    90:32:2e:fb:d1:84:be:ba:5a:79:11:97:45:28:98:
                    11:58:f2:84:9d:df:6e:14:ec:65:81:a3:39:89:79:
                    46:3d:5c:42:fc:9f:c0:d4:be:1c:da:a5:77:05:ad:
                    01:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:42:C1:BE:11:9F:59:A2:5D:28:87:F6:07:46:AD:BC:27:BD:72:59
            X509v3 Authority Key Identifier:
                keyid:83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:20:9a:e9:c3:13:70:14:35:76:f5:e5:b0:b3:e2:5a:ee:d7:
         6b:e6:b8:95:b6:11:83:a3:68:2a:ed:8d:cf:84:1e:32:7d:31:
         aa:1d:c5:3a:0f:7c:92:f7:1f:ec:eb:59:40:61:a2:5b:c6:a7:
         11:78:9e:e8:b4:ea:82:39:64:bf:59:fe:1c:03:31:8e:59:eb:
         01:ad:a3:c7:7d:c4:d7:1f:7c:80:79:a7:29:f6:20:cf:7d:d5:
         f2:c1:98:d4:56:4d:0b:42:ed:fb:19:ed:ca:9b:bd:01:65:e7:
         7b:0f:c1:8e:d3:ca:ba:5b:23:73:2d:b2:7a:f8:8f:e1:b8:6d:
         a2:22:d6:f9:15:aa:5c:34:d0:70:22:55:e0:5c:1a:3b:68:31:
         e9:07:00:00:8f:90:48:0c:cb:49:0a:10:ff:82:83:f5:91:34:
         91:5c:27:c5:56:0f:87:e6:df:ae:ff:3c:21:ed:4b:6d:29:09:
         bb:be:69:be:94:33:f7:f4:f3:86:fe:01:48:90:5a:50:2d:4a:
         1c:c4:b2:8f:9d:17:6a:db:77:7d:83:e0:46:cb:66:06:37:ff:
         f1:db:25:2e:09:ba:21:47:6a:4b:a2:bf:f6:fd:cf:a9:dd:01:
         5a:2c:4f:9e:d1:30:24:39:ee:19:01:79:be:49:c2:73:55:3c:
         6b:ee:dc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:12:24 2026 by rpki-client