Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File:                     YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier:          tjOpoRmwiohFzkwUMyN2PUcWp+0sQjBeVe47I1PMHt4=
Subject key identifier:   7C:15:62:90:74:48:F4:64:9C:12:59:09:B4:E6:2A:97:77:7A:3A:90
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer:       /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial:       0266
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number:          0261
Signing time:             Sun 01 Mar 2026 02:44:57 +0000
Manifest this update:     Sun 01 Mar 2026 02:44:57 +0000
Manifest next update:     Sun 08 Mar 2026 02:44:57 +0000
Files and hashes:         1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: lpCrMiIocHS5Pb2cJCZQ34BHli/z5Yr+QMNiuzC/gao=)
                          2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: GPH0EzTOvf8jZ7f6MSDgIy6jbOQ54/6c8g2ijkFuu3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
                          rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
        Validity
            Not Before: Mar  1 02:44:57 2026 GMT
            Not After : Mar  8 02:44:57 2026 GMT
        Subject: CN=69a3a829-6b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:12:c3:de:d9:e7:bc:6f:67:15:54:82:44:
                    d7:cf:06:b2:23:58:8d:be:fa:18:53:07:a4:34:76:
                    2d:76:59:db:68:7b:82:f9:b4:67:b0:39:b4:7d:ba:
                    44:60:ba:57:be:f7:59:e8:e3:8b:98:f0:72:f1:5d:
                    1c:1e:af:c2:b1:8c:ea:c8:a5:6a:85:ce:e6:d7:cc:
                    4c:5d:85:58:bb:5e:62:16:ff:6b:17:dc:6c:75:f8:
                    15:6f:f4:20:d2:9a:5e:28:80:64:ac:b7:cc:0a:98:
                    9c:be:e4:71:6d:e9:bf:b1:3a:3f:e4:51:34:2a:30:
                    b9:6c:ed:00:9c:f1:03:b0:7b:71:96:da:3e:79:1f:
                    f4:cc:3d:10:ac:5b:d8:66:e2:1d:2b:6b:16:c4:7b:
                    6a:e5:48:30:1c:84:8c:03:7d:d5:0a:44:b8:b9:f6:
                    4a:cf:d1:7b:3e:60:45:4b:8f:e7:b5:70:5c:b6:d6:
                    bd:0a:d4:95:e1:8d:c4:bf:be:a6:a3:83:1d:be:e1:
                    a5:bf:b3:4b:33:96:7b:7a:15:5f:8c:b6:63:d4:ce:
                    5d:16:30:89:55:d5:76:80:35:12:a2:ff:62:5f:67:
                    b6:dd:88:19:80:c4:d0:88:95:72:1c:e5:71:47:54:
                    b9:c7:0f:87:01:d7:fd:76:55:23:61:45:b2:96:2b:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:15:62:90:74:48:F4:64:9C:12:59:09:B4:E6:2A:97:77:7A:3A:90
            X509v3 Authority Key Identifier:
                keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b7:cc:16:6d:0f:61:42:62:46:08:23:54:a4:0f:cb:d7:6e:
         a2:7c:05:b0:8f:78:7a:b2:eb:ec:af:31:86:8f:c5:fe:c8:40:
         4b:2f:f5:1c:03:0e:5e:14:7f:e4:d4:b2:e9:ff:a9:e8:75:51:
         a6:45:e4:49:66:9e:3e:67:35:fb:44:78:72:57:1c:dd:8f:fd:
         aa:25:f4:10:b3:d8:d4:05:7a:b5:1f:d2:40:dd:79:5e:03:a2:
         3f:be:b4:59:a6:c8:28:27:6f:d9:4b:8c:28:15:36:04:da:7c:
         67:8e:c3:16:96:68:64:74:f8:0e:c0:1e:fd:50:91:b1:4b:b2:
         08:43:ff:dc:5c:80:20:09:dd:a1:d1:e2:bb:30:64:6e:ef:51:
         89:b9:72:f5:57:1f:df:40:31:5a:35:52:f6:54:5b:de:06:96:
         2b:79:69:57:ab:08:b0:0a:cf:36:f8:26:07:91:7a:fb:92:99:
         c7:01:dd:ab:cc:f7:2d:59:66:b0:c5:1b:fd:cc:76:c5:94:53:
         b0:f0:4b:8b:6e:fb:3e:34:38:5c:02:42:cd:28:13:c4:76:72:
         93:96:00:76:9c:88:b7:a5:f5:5a:b5:54:b8:e6:11:5a:e5:14:
         59:2e:4e:89:2b:15:d2:e0:5d:30:aa:39:22:0f:b9:4c:70:b8:
         52:fc:6a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:56 2026 by rpki-client