Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
File:                     YhVbsAWcTchhU2ywUux1W6sWbD8.mft (raw, json)
Hash identifier:          h+XKBnzeUTq27c8jEA5VVnnasAvBoTqRMGghEHFhF/A=
Subject key identifier:   AA:10:07:14:1D:8D:79:A6:F6:26:87:17:FB:31:8A:19:EF:DB:02:71
Authority key identifier: 62:15:5B:B0:05:9C:4D:C8:61:53:6C:B0:52:EC:75:5B:AB:16:6C:3F
Certificate issuer:       /CN=A91978F7/serialNumber=62155BB0059C4DC861536CB052EC755BAB166C3F
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
Manifest number:          5A
Signing time:             Sun 01 Mar 2026 09:31:07 +0000
Manifest this update:     Sun 01 Mar 2026 09:31:06 +0000
Manifest next update:     Sun 08 Mar 2026 09:31:06 +0000
Files and hashes:         1: YhVbsAWcTchhU2ywUux1W6sWbD8.crl (hash: zxk99ifxel7EWwZB/EqAAe59RzXipawTYNzpPkIBhxI=)
                          2: 87C69A4E8DEE11F0A7999742C4F9AE02.roa (hash: AF9EblqIIR14Jg1fqI/l7p20Pg6bE92rpu7Zvd4y37I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.crl
                          rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91978F7, serialNumber=62155BB0059C4DC861536CB052EC755BAB166C3F
        Validity
            Not Before: Mar  1 09:31:06 2026 GMT
            Not After : Mar  8 09:31:06 2026 GMT
        Subject: CN=69a4075b-97a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:bd:d0:27:a8:ad:79:0c:36:50:aa:ba:f3:
                    b1:c7:f7:cd:b6:63:2a:c6:8e:3b:d6:0e:1c:95:1d:
                    47:07:f6:6b:b7:f1:25:e2:f6:43:ba:1f:d6:2c:37:
                    f1:80:ab:79:4e:b6:62:3d:d4:68:b5:2b:d2:0d:03:
                    a3:bc:3d:81:37:a4:00:51:7d:7c:d2:5c:0c:44:9d:
                    f8:4f:e8:77:3a:63:49:83:2f:d7:28:44:54:ef:96:
                    22:20:0b:7d:11:4d:ec:10:e7:03:53:d2:20:13:04:
                    3a:84:33:90:43:75:cd:eb:2f:6b:d8:c4:de:01:32:
                    49:da:df:ad:f9:bd:fd:1c:cc:7a:b6:c0:ba:58:ec:
                    46:ed:47:a8:7c:34:ef:cf:c5:aa:7a:4c:29:a0:02:
                    c4:02:9c:74:12:61:63:ac:67:24:b8:a8:94:f6:62:
                    02:81:86:19:22:25:10:b3:70:1c:06:50:da:7a:17:
                    b5:5f:89:e0:00:38:d9:17:75:fd:90:ca:33:f6:db:
                    b0:6a:5b:b8:25:c9:2b:10:8e:0b:60:30:d1:0d:5a:
                    59:38:5f:b3:6b:97:23:17:72:02:17:26:6b:ff:f8:
                    18:26:ae:fe:08:97:21:a7:af:ad:91:3d:af:88:0a:
                    55:61:5d:2e:59:ac:ec:3f:d3:8b:e0:c8:2e:54:b1:
                    00:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:10:07:14:1D:8D:79:A6:F6:26:87:17:FB:31:8A:19:EF:DB:02:71
            X509v3 Authority Key Identifier:
                keyid:62:15:5B:B0:05:9C:4D:C8:61:53:6C:B0:52:EC:75:5B:AB:16:6C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a4:62:b0:fb:c9:32:40:17:40:12:00:6b:f1:3a:9b:67:72:
         c1:41:59:f8:7b:29:36:d1:2d:f7:5e:20:33:aa:68:80:cc:28:
         11:ac:44:57:e6:5a:c7:80:18:08:76:65:0d:24:a0:68:91:c1:
         1e:79:69:f5:9a:34:85:5d:4e:bc:97:b4:3a:e7:c5:88:9e:e4:
         dd:a3:6a:66:6d:f5:6b:92:d0:92:95:29:d2:fc:f6:3d:4e:fd:
         52:3b:3a:03:18:c3:20:44:1d:f5:84:67:62:47:7e:b9:97:71:
         82:66:39:6c:1b:ab:03:91:6c:ec:32:32:1d:a6:51:76:d9:9c:
         3c:6c:73:25:48:b7:7a:cf:31:cb:04:56:be:a8:fb:8f:3b:db:
         61:e8:d5:c5:b3:a3:3a:f8:59:8d:fd:82:ae:9e:f9:4d:78:16:
         e6:8f:06:24:87:a7:80:7a:25:90:26:b8:b0:0a:63:cf:57:79:
         5a:8f:b8:1f:02:82:e1:85:45:b9:cd:76:49:61:3c:35:18:eb:
         30:04:e4:64:78:24:e6:2a:db:cb:65:c2:16:6f:c4:7b:7b:d9:
         ee:9b:7f:3c:c0:83:07:d8:ed:bc:8b:31:16:d6:e8:bf:7b:19:
         6b:8c:d0:3c:6c:bc:06:5a:4f:a3:71:df:c3:23:01:9a:22:22:
         ec:d3:14:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:03 2026 by rpki-client