Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
File:                     Y04osQAuVW6OsU-VPq1jttZ3WAk.mft (raw, json)
Hash identifier:          ohbNfBwjqmCe44JBIKlSYKe1/f18YJKd4Ua5x/8mDuc=
Subject key identifier:   87:83:BB:A4:A9:E1:8C:4A:2B:76:F2:4E:AC:EE:56:98:FA:FA:60:31
Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
Certificate issuer:       /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Certificate serial:       0202
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
Manifest number:          01EE
Signing time:             Sun 01 Mar 2026 04:26:10 +0000
Manifest this update:     Sun 01 Mar 2026 04:26:09 +0000
Manifest next update:     Sun 08 Mar 2026 04:26:09 +0000
Files and hashes:         1: Y04osQAuVW6OsU-VPq1jttZ3WAk.crl (hash: MqCdnYjBWRtyNP+zCWQc8dHqrBxjbDZ9CE7c/P1GEy4=)
                          2: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (hash: zdwZO0F8HmTS0a7Wa5QQzty6jheoVPgBvRYPbS/dvxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
                          rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C0D, serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
        Validity
            Not Before: Mar  1 04:26:09 2026 GMT
            Not After : Mar  8 04:26:09 2026 GMT
        Subject: CN=69a3bfe1-d681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:63:b9:d4:df:bf:7b:73:1e:3a:aa:fd:9e:
                    a8:c7:95:b7:ea:17:a8:04:44:ce:4b:3a:63:68:e0:
                    9c:17:1c:de:32:3f:64:de:8a:a6:6a:7f:de:54:a0:
                    9e:88:46:b0:91:da:fd:31:41:22:b0:e0:21:a2:b5:
                    d5:55:89:26:ab:2e:9a:f1:98:e4:80:6f:6a:13:2b:
                    5e:06:e1:e5:2c:d3:b2:d7:8b:e1:ec:b7:42:f5:86:
                    46:3b:e3:15:53:8f:8a:b0:b5:d2:15:dc:16:b3:50:
                    9a:a3:8b:79:e8:57:5b:55:fb:43:ea:93:25:61:12:
                    b6:26:de:8a:d0:f1:89:de:c3:be:63:6a:31:17:69:
                    21:2e:62:94:1a:b9:42:4a:10:d1:79:27:69:47:eb:
                    4e:b2:17:38:6e:32:82:6f:12:56:4c:78:75:81:8f:
                    48:26:2b:ee:70:9d:13:36:7f:31:ec:c7:fb:08:a8:
                    a2:a7:50:3d:56:49:3d:0a:50:7e:a3:d7:14:8f:a5:
                    db:d1:0c:00:1d:0d:7e:96:55:b7:96:98:22:00:8a:
                    70:2d:e5:63:94:d9:03:d5:f6:64:3b:63:6e:ee:85:
                    c3:ea:31:31:b7:eb:9d:0b:17:ab:9c:d1:a2:ab:2b:
                    0f:7e:e2:54:4d:cd:85:45:b0:64:3e:03:53:60:57:
                    e8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:83:BB:A4:A9:E1:8C:4A:2B:76:F2:4E:AC:EE:56:98:FA:FA:60:31
            X509v3 Authority Key Identifier:
                keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:71:5b:6e:e0:61:4f:a2:f0:42:28:95:3d:d1:3c:17:87:3f:
         56:4e:8f:ab:dc:3b:43:c0:69:29:a8:40:b2:b3:7c:b1:36:03:
         1c:6c:a3:f0:97:ef:6b:32:aa:45:d6:3b:d7:ce:7b:19:97:d2:
         bf:33:f0:75:82:96:ab:f8:5c:f6:dd:7e:ce:35:7a:9c:c1:a4:
         96:03:0a:2f:0f:23:84:8e:47:30:62:67:d8:e3:ae:74:d4:e0:
         1e:bc:08:53:14:18:94:c9:b6:ab:ad:bb:63:af:de:e9:a1:3e:
         d0:2e:12:b1:0d:f2:4e:33:b6:de:06:1c:f3:45:ab:db:7c:de:
         14:3f:ff:5a:e1:c3:e7:a4:e6:ef:21:8e:9f:3d:76:8b:a5:23:
         e8:7f:96:52:5d:fb:52:ae:c4:da:14:47:eb:b2:cf:cf:e2:2c:
         8b:c5:70:80:68:7c:f2:78:58:6b:d5:e3:ca:f4:30:24:b1:bf:
         6b:95:60:37:b1:81:57:9b:18:bd:cc:70:fb:f6:d4:74:04:c7:
         4b:75:b4:e5:12:45:a5:bc:94:66:32:61:68:47:a0:39:99:b5:
         cd:25:a0:d2:7f:12:11:9e:21:51:91:1b:1e:7b:ac:43:0c:65:
         59:7f:af:f4:5e:51:52:ae:51:b7:4f:b7:f6:7f:53:44:4c:05:
         78:5c:8d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:09:44 2026 by rpki-client