Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
File:                     YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft (raw, json)
Hash identifier:          lOywXIYscvtvsGdfD8IHEI/pUj1Tf7hX7B1sAv2yXzs=
Subject key identifier:   4F:3B:38:60:B3:79:6B:80:9D:8A:E1:A8:AB:39:34:7B:4D:29:30:31
Authority key identifier: 61:FA:70:86:81:1C:B0:3F:CB:94:C3:16:CF:EE:AD:88:9A:85:27:F7
Certificate issuer:       /CN=A918E3C0/serialNumber=61FA7086811CB03FCB94C316CFEEAD889A8527F7
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
Manifest number:          11
Signing time:             Mon 02 Mar 2026 00:51:10 +0000
Manifest this update:     Mon 02 Mar 2026 00:51:09 +0000
Manifest next update:     Mon 09 Mar 2026 00:51:09 +0000
Files and hashes:         1: YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl (hash: 19OJCuqTkG19yviX1ECFWgeR6A2B23Iewjo0P8hjogs=)
                          2: 3F6F4A1A01B211F19B62C4E66C6F56BC.roa (hash: rCzJIy/NYAsPTGfAatavk8j2jLpwkOtS62qzcnx2R38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl
                          rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E3C0, serialNumber=61FA7086811CB03FCB94C316CFEEAD889A8527F7
        Validity
            Not Before: Mar  2 00:51:09 2026 GMT
            Not After : Mar  9 00:51:09 2026 GMT
        Subject: CN=69a4defd-b9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:36:5f:ff:d3:36:20:43:dc:f4:0a:cc:e4:9d:
                    f6:c6:8c:83:bc:15:38:fd:1b:b5:36:d7:9e:ac:73:
                    17:fd:b4:02:35:c0:8c:9c:e9:64:2b:a8:d0:3e:df:
                    b2:ab:eb:3a:c2:f4:40:ac:2b:e4:5f:d9:a7:f9:53:
                    57:fe:68:e7:ab:94:4b:56:23:03:01:6d:6e:78:fd:
                    5e:50:b0:6f:65:a4:b5:c9:c7:ee:06:03:3f:c3:db:
                    ba:ee:ca:a4:82:be:e9:83:78:0a:df:ea:6c:10:af:
                    74:ab:00:b2:18:ba:a7:ea:1e:50:4c:c9:14:77:1d:
                    42:b9:5f:79:f9:93:26:ba:19:f6:42:b4:d3:d8:50:
                    63:e3:93:0a:5c:47:4c:aa:d7:f9:fb:89:16:1b:10:
                    20:9e:ea:f1:63:e0:0f:2a:8a:bd:94:eb:fa:0f:68:
                    57:f4:3a:05:f9:43:09:60:f0:98:cf:8c:ac:16:b6:
                    e8:37:b2:52:f4:a2:6a:82:85:83:85:67:13:d4:dc:
                    7f:dc:4b:ab:1f:bf:db:ff:8b:66:7c:37:ef:b5:8c:
                    c3:7a:61:a4:df:2b:66:0c:e5:bc:34:79:60:2b:b0:
                    e5:fd:f9:aa:2f:4c:e3:e2:17:2e:71:77:92:39:ef:
                    80:a8:13:77:e8:73:e9:d9:10:07:b7:f9:75:2a:0c:
                    3e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3B:38:60:B3:79:6B:80:9D:8A:E1:A8:AB:39:34:7B:4D:29:30:31
            X509v3 Authority Key Identifier:
                keyid:61:FA:70:86:81:1C:B0:3F:CB:94:C3:16:CF:EE:AD:88:9A:85:27:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8f:96:ac:f0:b9:f3:e0:4a:2d:b8:66:c4:5e:87:d6:86:df:
         78:fd:6e:4a:95:b1:1e:73:61:8f:0a:b7:86:bc:7e:b5:6e:eb:
         ab:0f:8c:de:5a:ee:2b:f3:78:66:94:cc:a8:e8:b6:3c:72:36:
         82:f8:c2:e1:bb:f3:46:da:f5:e6:14:15:13:89:dd:96:b7:35:
         12:3c:1e:8c:90:2f:a9:73:e9:ab:0f:81:3c:fb:42:43:15:e7:
         f7:bc:5a:c3:35:7c:9e:b5:ab:5f:f6:06:ec:20:c0:f0:8f:53:
         c1:34:57:9d:f8:6a:84:a4:0f:37:0d:18:77:49:cd:8d:63:32:
         8a:a9:84:ae:ad:68:3e:4a:0b:70:5a:e7:83:47:3a:72:ed:ee:
         b4:9e:db:54:62:58:c6:64:ee:bc:e5:2f:bc:ff:e9:a3:d9:0c:
         63:9f:92:3f:46:ec:40:45:b5:94:d2:83:3a:09:2e:a9:75:c2:
         d0:53:e9:f1:a8:0b:30:8c:82:0b:00:82:8b:6e:e9:fe:e9:90:
         36:1d:8d:ae:f7:40:f3:11:cc:a0:76:22:9f:82:5b:6b:80:79:
         11:d7:61:ec:aa:c4:1c:de:1f:b4:7f:01:66:e9:66:73:be:02:
         da:8f:e7:e4:6d:8e:59:ac:bf:1f:4f:46:63:11:1e:1b:10:bb:
         76:28:f4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:36:22 2026 by rpki-client