Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
File:                     yPzMxL6JiqkgZxNmoP15UynpIB0.mft (raw, json)
Hash identifier:          VPbEH1t7vf+bVhVDlw6rN1X2qWKcsATlhOnAM9aQC88=
Subject key identifier:   2D:4A:E5:B7:F8:24:AA:E0:ED:7D:68:CF:C3:87:5E:99:43:25:1F:7F
Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
Certificate issuer:       /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Certificate serial:       0C53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
Manifest number:          0C3C
Signing time:             Mon 02 Mar 2026 02:19:56 +0000
Manifest this update:     Mon 02 Mar 2026 02:19:54 +0000
Manifest next update:     Mon 09 Mar 2026 02:19:54 +0000
Files and hashes:         1: yPzMxL6JiqkgZxNmoP15UynpIB0.crl (hash: 449G1EDENbxrz9UopVtydh6PLQCbTNRdE/WH09u1dmg=)
                          2: 20748896236511EABCF20E10C4F9AE02.roa (hash: 9c0xnj42aQVd0DJMJ7QVY1vll1L6k0F8fnB4B2KdtTM=)
                          3: 5407E320236911EA9967DA1CC4F9AE02.roa (hash: q8cCOCPHYUVLORYyWYiF8lMPvMHY/AGuLx1h919ki24=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
                          rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3155 (0xc53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919040F, serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
        Validity
            Not Before: Mar  2 02:19:54 2026 GMT
            Not After : Mar  9 02:19:54 2026 GMT
        Subject: CN=69a4f3cc-4f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:a0:b1:cf:89:d4:9c:50:dd:88:bf:c9:81:
                    a4:78:7b:6f:8a:80:fe:dd:9d:1d:34:4c:b1:64:51:
                    39:98:c6:4f:35:ff:1b:e0:da:87:24:54:33:17:33:
                    81:2d:b0:27:d5:a5:5c:35:1d:97:5c:02:09:4f:bd:
                    fe:e8:f0:e8:71:52:77:72:d4:7e:44:06:b4:44:a7:
                    76:3b:38:04:18:5c:93:8d:a3:74:1f:ed:f4:ac:02:
                    4c:63:14:ab:7c:43:bd:07:f4:80:dd:38:4d:e8:7c:
                    cd:dc:93:5b:bb:e9:d0:20:42:b1:fc:8f:59:5c:58:
                    80:a5:bf:32:af:07:ff:1e:ee:3f:46:f2:dd:c5:2d:
                    96:ff:fc:3e:86:b0:50:e8:94:24:4f:11:cc:0f:84:
                    e2:f6:8e:15:52:76:51:97:a9:f6:fa:99:cd:60:dc:
                    52:f1:1d:95:ac:ae:33:6f:30:03:45:ad:ab:c7:e2:
                    be:ca:48:5b:69:32:cf:58:66:16:57:1f:a0:88:9d:
                    5a:31:8a:21:a3:90:31:ed:13:23:d3:43:14:0f:47:
                    ed:65:8a:c6:73:4e:d7:61:c9:09:0f:61:fc:9c:64:
                    2b:63:8f:ca:51:91:1a:81:0e:07:cb:76:7e:02:9b:
                    e4:26:66:34:6d:6a:7c:99:c5:9e:22:6c:98:b4:4f:
                    ff:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4A:E5:B7:F8:24:AA:E0:ED:7D:68:CF:C3:87:5E:99:43:25:1F:7F
            X509v3 Authority Key Identifier:
                keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:66:ab:30:f3:18:61:5b:7d:fd:69:3b:bd:61:f7:d5:49:a1:
         50:ff:32:a3:a0:df:70:82:65:31:c5:1f:f5:62:39:5b:d0:68:
         0a:ba:09:da:7a:0f:1a:62:56:58:ff:d5:ac:45:ae:ab:1a:35:
         41:92:57:19:c7:86:80:4c:11:f8:47:8e:55:8c:19:3f:ff:61:
         42:70:71:8d:af:ed:6e:8d:22:cc:61:32:cd:2d:10:f5:82:66:
         ab:b2:9f:87:dc:1e:46:74:54:d7:0b:de:ae:0e:33:29:24:82:
         ea:b8:97:64:0b:03:c8:1e:68:95:b0:07:8f:f6:80:e6:49:d2:
         54:64:b8:36:2b:e5:ad:79:9b:e0:6b:58:9b:d6:05:5d:b4:78:
         7d:4a:d2:41:a0:2f:dc:2e:b4:28:db:27:90:b8:83:09:08:ae:
         23:4b:9e:28:9c:df:88:f5:3c:63:76:24:8e:6e:fc:d7:de:4b:
         e8:31:4d:34:9b:a5:53:73:50:b0:f5:84:ca:6f:35:76:c5:03:
         6f:49:64:6f:db:ec:f3:44:60:99:8d:56:70:18:cb:4e:46:db:
         c0:cb:04:e6:37:9e:d8:14:22:da:99:ea:0d:35:c1:bd:d1:5a:
         87:ec:b5:0a:2d:43:db:e1:29:9a:a3:d2:1b:54:55:2b:90:c3:
         21:fd:a6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:09 2026 by rpki-client