Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
File:                     YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft (raw, json)
Hash identifier:          7diK/WJyV+5NJnqoyoVMA2lRE9ykWqBGWjwEQ3gJmbM=
Subject key identifier:   E2:3D:31:3B:58:6A:27:F1:9E:7A:81:E5:CF:5C:EB:59:8A:77:A9:52
Authority key identifier: 60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5
Certificate issuer:       /CN=A917799C/serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
Manifest number:          83
Signing time:             Mon 02 Mar 2026 03:08:22 +0000
Manifest this update:     Mon 02 Mar 2026 03:08:21 +0000
Manifest next update:     Mon 09 Mar 2026 03:08:21 +0000
Files and hashes:         1: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl (hash: s08klC73K8FLC8wcnPKt+l3SIWtQiXhQp0JBAlHlFZs=)
                          2: 05939A1C554611F09F737331C4F9AE02.roa (hash: Clnr+6xHUPwytcBM6eO/TUPMVIT7s9w+w77rdDAuRPs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl
                          rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917799C, serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
        Validity
            Not Before: Mar  2 03:08:21 2026 GMT
            Not After : Mar  9 03:08:21 2026 GMT
        Subject: CN=69a4ff26-2772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:33:d4:7f:73:40:cb:ff:69:fd:39:ba:94:
                    ad:eb:22:7a:ac:9b:46:c7:78:e2:1f:df:6c:db:9c:
                    11:f3:0b:32:38:2e:f3:29:50:25:cd:30:a3:01:3e:
                    44:9d:ed:b9:8e:79:a4:9a:f1:17:5f:cf:74:b1:71:
                    46:d1:78:8d:59:ae:d1:58:e1:06:4b:37:f4:eb:a3:
                    bb:75:4b:8d:aa:2b:95:1b:2f:13:37:07:71:b4:ce:
                    5b:02:8b:69:50:cc:b8:f2:19:68:e6:6f:7a:eb:ef:
                    de:26:d4:e0:2a:ee:4b:fb:b7:e4:0e:d4:ac:47:7f:
                    be:4c:05:79:2f:c7:9e:dc:86:50:ae:3f:69:4a:ef:
                    f3:a2:96:ad:0b:41:15:76:3b:bf:dc:0e:f0:1f:22:
                    7e:40:02:ad:5a:36:c1:93:cc:0b:ee:e3:f1:09:e3:
                    52:71:93:f4:c1:b3:8e:80:28:38:e8:54:d7:a4:51:
                    e8:ce:4d:1e:6f:95:d3:cd:60:44:fd:59:dd:41:8f:
                    d7:2b:06:31:58:0d:6f:95:8e:d4:29:ae:3e:60:b6:
                    e1:c3:e8:27:98:71:4e:b2:02:50:13:16:57:f4:44:
                    37:bf:93:1d:78:01:96:83:a7:a8:a4:c8:2c:16:82:
                    d5:0c:81:e6:2b:9b:20:2b:2d:b3:79:8d:0e:d9:ef:
                    10:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3D:31:3B:58:6A:27:F1:9E:7A:81:E5:CF:5C:EB:59:8A:77:A9:52
            X509v3 Authority Key Identifier:
                keyid:60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:59:73:44:fe:6c:c4:9e:35:ad:1e:0e:46:22:7b:58:12:ed:
         51:db:b1:5f:7e:27:2e:e9:f8:20:fd:93:84:72:f6:c3:e9:aa:
         62:2e:17:3d:ed:d3:ca:ba:db:a7:e4:ea:bb:b1:6b:d5:27:12:
         b9:b2:30:65:a9:de:fc:4f:37:7b:99:af:90:ee:98:b9:f7:7e:
         03:32:0b:4e:b0:79:f1:7c:dd:99:30:b7:f3:33:a6:bf:df:9b:
         5e:f7:49:26:91:e7:00:f4:47:90:01:c3:b5:04:af:8d:da:95:
         36:36:27:43:16:6c:bc:f0:7c:4e:12:97:1d:06:cd:fc:7c:53:
         f8:2b:31:59:a2:09:e8:21:97:04:1e:e6:74:d1:76:45:2b:a4:
         66:ee:ef:8a:7b:62:cd:9e:52:1a:d5:b5:b2:d6:c9:1d:af:fe:
         ce:d9:fb:86:d9:aa:04:e2:4e:e0:14:66:ed:97:ec:de:82:ca:
         ba:40:b2:93:9d:97:12:67:da:e9:8e:8b:b2:45:dd:5a:34:95:
         70:72:50:3e:3c:27:18:65:07:eb:72:1b:c9:8d:eb:2b:05:d8:
         c5:12:b8:fc:1f:d5:9a:ec:ed:36:41:3c:cf:f9:e9:1d:01:de:
         83:8f:3f:f6:80:5f:09:62:56:e6:73:4a:b5:38:ea:25:47:52:
         9c:4a:17:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:59 2026 by rpki-client