Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
File:                     YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json)
Hash identifier:          u9j0Fp7j9Tq30PGLFWc0O7z4B80L0406O0P0cpbez2Q=
Subject key identifier:   BF:73:BE:0C:D2:16:7B:7C:A8:80:F7:5F:71:E5:81:7E:DE:77:54:B8
Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
Certificate issuer:       /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Certificate serial:       0511
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
Manifest number:          0505
Signing time:             Mon 02 Mar 2026 00:41:17 +0000
Manifest this update:     Mon 02 Mar 2026 00:41:16 +0000
Manifest next update:     Mon 09 Mar 2026 00:41:16 +0000
Files and hashes:         1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: TeN4VJhm/WOAhtwjv9XBnsB7BiG/exoCNpc77LVggPc=)
                          2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: voztcrzhiVsnEEDAL+kh/aaIgcYKoM5wE79GPvMJ4lw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
                          rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1297 (0x511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
        Validity
            Not Before: Mar  2 00:41:16 2026 GMT
            Not After : Mar  9 00:41:16 2026 GMT
        Subject: CN=69a4dcad-5559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:88:d7:9c:95:96:a8:8c:6d:35:56:c7:37:
                    a8:ba:13:c8:65:18:23:b2:9d:cb:38:f5:62:78:60:
                    47:a3:38:3f:d5:06:9a:39:b6:f5:19:fb:d8:1d:7f:
                    6e:5a:3f:70:e4:34:9a:05:e2:87:31:22:66:b0:ec:
                    d6:49:3b:d6:61:ab:b0:c5:19:0e:5e:8d:1d:0f:02:
                    e3:35:01:ef:a4:82:35:1b:86:c4:22:a8:8b:f4:a1:
                    5e:1d:9a:6b:bd:d8:cd:2f:32:fa:1e:29:e6:32:7d:
                    a6:0a:85:1e:e9:4c:93:94:2e:75:47:6d:b6:b1:15:
                    98:f0:2d:b9:2d:26:88:79:1a:76:ec:79:4f:71:e9:
                    7c:e7:ae:cb:2b:86:41:71:b7:01:42:58:c8:f7:af:
                    7b:86:fc:d8:06:d8:8d:02:e4:6e:49:57:5d:83:f6:
                    95:42:7b:5e:b4:65:53:5b:d6:48:d1:1e:9c:91:d0:
                    1a:9e:75:36:e4:bc:0b:01:38:3b:b8:d5:c8:dc:80:
                    19:f8:13:5d:19:c3:75:24:26:f0:72:85:e8:65:1d:
                    ba:a4:cc:ed:b9:e6:f6:fe:ad:e3:3b:a7:73:6a:63:
                    03:51:28:68:4b:d1:3c:31:b4:28:98:62:15:6e:9c:
                    e6:fc:f6:15:d0:7d:98:3e:70:8d:2f:d2:2c:0e:2b:
                    81:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:73:BE:0C:D2:16:7B:7C:A8:80:F7:5F:71:E5:81:7E:DE:77:54:B8
            X509v3 Authority Key Identifier:
                keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:84:9c:27:0a:23:a8:51:2b:c7:f6:c5:81:a3:d1:fd:08:2e:
         08:b4:00:66:7c:c8:21:39:22:0f:fd:8a:69:f0:6f:0e:c7:45:
         37:88:fb:2d:a6:45:60:66:d1:ce:31:c3:51:20:14:a1:51:1e:
         f1:28:d3:12:58:9d:12:59:29:29:1a:87:9f:60:46:66:f6:d1:
         82:f6:fb:94:bc:68:2a:9a:26:44:4a:03:e7:ca:ac:cb:ae:0f:
         4d:b2:e5:17:7d:6c:b8:2d:7a:d7:37:ce:0a:7e:b7:13:3c:0d:
         0b:6d:06:8a:04:20:c1:df:89:6e:bc:17:43:fb:90:68:0d:34:
         d9:92:bf:6f:c5:42:99:43:ed:93:0c:d1:f2:58:27:14:1d:ac:
         e6:64:14:fd:21:23:3a:e7:82:f5:ac:fb:31:3f:35:01:54:cd:
         d5:1a:d4:1f:50:ee:fe:b6:56:e8:22:f8:2e:a2:a3:7e:9a:b6:
         60:1b:4b:32:e9:0c:f8:61:e3:25:36:1b:cb:c6:78:cc:09:6c:
         a9:18:2e:0b:8c:1f:9e:05:d2:fd:d1:21:55:d4:38:af:ef:18:
         a1:c5:d8:b6:4f:86:e2:d9:a9:19:57:cd:88:c2:ca:80:7f:7c:
         2a:88:cd:20:c6:0a:f6:bc:93:2a:c3:29:8c:3d:2e:2c:d5:c5:
         c3:5a:4b:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQyODIxMTAvBgNVBAUTKDYxNjNEQ0I1RDUzQjQ4NzJFMTU5NTYzRTkwRkM1RTQx
QUQwMDJDMkQwHhcNMjYwMzAyMDA0MTE2WhcNMjYwMzA5MDA0MTE2WjAYMRYwFAYD
VQQDEw02OWE0ZGNhZC01NTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwjKI15yVlqiMbTVWxzeouhPIZRgjsp3LOPVieGBHozg/1QaaObb1GfvYHX9u
Wj9w5DSaBeKHMSJmsOzWSTvWYauwxRkOXo0dDwLjNQHvpII1G4bEIqiL9KFeHZpr
vdjNLzL6HinmMn2mCoUe6UyTlC51R222sRWY8C25LSaIeRp27HlPcel8567LK4ZB
cbcBQljI9697hvzYBtiNAuRuSVddg/aVQntetGVTW9ZI0R6ckdAannU25LwLATg7
uNXI3IAZ+BNdGcN1JCbwcoXoZR26pMztueb2/q3jO6dzamMDUShoS9E8MbQomGIV
bpzm/PYV0H2YPnCNL9IsDiuBVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9zvgzS
Fnt8qID3X3HlgX7ed1S4MB8GA1UdIwQYMBaAFGFj3LXVO0hy4VlWPpD8XkGtACwt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDI4Mi85NzE0MzM3NjQ3
OTgxMUVDQjAzRDU1MzhDNEY5QUUwMi9ZV1BjdGRVN1NITGhXVlkta1B4ZVFhMEFM
QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lXUGN0ZFU3U0hMaFdWWS1rUHhlUWEwQUxDMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDI4Mi85NzE0MzM3NjQ3OTgxMUVDQjAzRDU1MzhDNEY5QUUwMi9ZV1BjdGRVN1NI
TGhXVlkta1B4ZVFhMEFMQzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACIScJwojqFErx/bFgaPR/QguCLQAZnzIITkiD/2KafBvDsdFN4j7LaZFYGbR
zjHDUSAUoVEe8SjTElidElkpKRqHn2BGZvbRgvb7lLxoKpomREoD58qsy64PTbLl
F31suC161zfOCn63EzwNC20GigQgwd+JbrwXQ/uQaA002ZK/b8VCmUPtkwzR8lgn
FB2s5mQU/SEjOueC9az7MT81AVTN1RrUH1Du/rZW6CL4LqKjfpq2YBtLMukM+GHj
JTYby8Z4zAlsqRguC4wfngXS/dEhVdQ4r+8YocXYtk+G4tmpGVfNiMLKgH98KojN
IMYK9ryTKsMpjD0uLNXFw1pL2g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:47 2026 by rpki-client