Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft
File:                     YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft (raw, json)
Hash identifier:          A3mnmEgB0ZnmonGgPUF2ZNmopsbm6kzMp/Wbi/0bmzY=
Subject key identifier:   D5:54:09:08:18:CA:67:50:FD:80:76:CA:B1:8A:54:48:45:E8:70:B9
Authority key identifier: 61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A
Certificate issuer:       /CN=A9171D16/serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft
Manifest number:          0191
Signing time:             Sun 01 Mar 2026 05:13:40 +0000
Manifest this update:     Sun 01 Mar 2026 05:13:40 +0000
Manifest next update:     Sun 08 Mar 2026 05:13:40 +0000
Files and hashes:         1: YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl (hash: LVrTxeinUBRpF1Jv2/OBZK2fxJmWQrisHNsBop6Yye0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl
                          rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D16, serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A
        Validity
            Not Before: Mar  1 05:13:40 2026 GMT
            Not After : Mar  8 05:13:40 2026 GMT
        Subject: CN=69a3cb04-0634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:aa:49:83:53:ba:8d:4a:5f:aa:cb:33:d5:da:
                    7f:84:e0:1b:24:cf:70:d4:c2:2d:86:c2:eb:93:56:
                    59:fb:84:bb:e7:da:4b:a6:2f:89:71:9b:d3:dd:5b:
                    1f:59:d0:b6:c6:ec:a3:d2:f9:02:b6:89:45:f6:95:
                    5a:36:ea:04:da:49:cc:10:85:94:7d:a6:3f:cd:b5:
                    9b:ff:5c:15:ca:9f:d6:50:13:d3:ae:09:1c:75:df:
                    ae:a4:51:54:81:9c:39:ce:ed:dc:ee:5a:aa:b4:32:
                    76:b6:91:57:90:66:a8:ff:97:b5:60:a2:76:cc:dc:
                    7e:af:9b:b5:50:87:d7:0a:7e:8c:30:03:02:18:de:
                    a2:9a:3d:1b:50:00:f6:cb:77:a1:a8:96:dd:33:30:
                    f2:d6:24:13:a3:27:ea:fe:06:cf:84:00:90:d3:d6:
                    18:12:8e:ab:c9:8e:0f:95:8e:f0:ba:8f:b6:a1:93:
                    45:a9:3c:3d:fd:f8:a2:5d:29:1c:ff:71:3b:71:8d:
                    e4:e9:2b:bc:32:33:c4:e4:75:9c:13:3b:2b:84:fc:
                    08:f7:0d:7f:36:ea:61:86:f5:55:ec:7c:06:4b:b9:
                    eb:30:ad:0d:48:be:e6:cd:01:12:34:d4:b2:07:d9:
                    06:51:18:a9:de:e7:d6:f1:3f:fb:5c:09:af:0e:37:
                    43:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:54:09:08:18:CA:67:50:FD:80:76:CA:B1:8A:54:48:45:E8:70:B9
            X509v3 Authority Key Identifier:
                keyid:61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d3:7c:ed:cd:ee:e4:47:06:37:3f:a9:0f:f6:8d:14:fa:ba:
         7c:03:d4:c1:31:cc:e7:f0:36:f4:c0:7d:f7:12:78:9f:41:6f:
         fc:26:95:d8:68:b1:00:a6:09:ca:26:1e:e0:21:06:71:e7:bb:
         02:c5:f4:b0:a2:08:2e:d3:7a:c9:65:26:9b:f4:8e:4a:00:8f:
         4d:d7:ff:27:9f:3e:ad:3c:1f:e3:65:21:3f:da:48:04:72:e5:
         44:47:73:56:5a:bd:f7:7f:a9:69:68:fb:ec:a7:e0:8e:4b:22:
         d9:b9:c5:62:05:bb:b5:92:dd:25:5c:33:55:43:46:64:97:25:
         cc:d5:46:b9:54:d8:58:2a:01:73:10:54:70:29:7e:7f:a9:65:
         28:cf:80:1a:38:16:4b:9c:1b:23:dc:17:be:34:1f:af:a3:4b:
         aa:64:b6:3c:0e:32:fc:1a:3e:f6:b7:5a:30:66:3a:d8:2d:91:
         dd:77:36:30:e2:2b:0d:1c:50:13:f1:cf:46:cb:58:6e:66:57:
         45:c4:89:44:ed:ff:9f:5c:a9:e5:68:70:10:d8:59:ca:53:0a:
         54:78:d7:37:93:6e:03:71:97:6e:58:e9:48:56:c5:9c:1e:25:
         48:d9:53:49:00:36:0e:fb:be:3b:1c:c1:f4:e3:5b:ab:4f:1b:
         c5:ec:02:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:25 2026 by rpki-client