Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
File:                     ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft (raw, json)
Hash identifier:          5s37LTZoZr+5mHH0Rm4iU6WZ3OCFahCufCIEF5nfYPM=
Subject key identifier:   33:86:41:51:61:53:75:D0:C5:82:F1:0F:0F:1A:C1:A5:55:55:28:95
Authority key identifier: C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6
Certificate issuer:       /CN=A9199656/serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
Manifest number:          9E
Signing time:             Sun 01 Mar 2026 08:36:26 +0000
Manifest this update:     Sun 01 Mar 2026 08:36:25 +0000
Manifest next update:     Sun 08 Mar 2026 08:36:25 +0000
Files and hashes:         1: ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl (hash: ZYrCk/UKikKilGnY1FBzSmmHfz9TKaJu4mUMbofXkIU=)
                          2: 45D237A423E211F0A5DCED27C4F9AE02.roa (hash: KYNpwowTPF1wR7KTk50JO1GxjKATo9B/T8x/blAJYNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl
                          rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199656, serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
        Validity
            Not Before: Mar  1 08:36:25 2026 GMT
            Not After : Mar  8 08:36:25 2026 GMT
        Subject: CN=69a3fa89-c8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8f:9d:b2:ed:d2:08:85:4e:04:d8:2d:67:3b:
                    ad:d3:a3:05:cf:c2:78:8b:51:1a:17:82:6b:c8:46:
                    7a:82:4e:33:39:84:54:75:e2:cb:f1:24:b9:a4:ab:
                    0f:c6:7b:8f:fa:d7:22:9c:e3:22:ee:68:35:ee:d1:
                    9c:25:71:e9:78:e3:0a:38:37:46:b1:10:51:c6:18:
                    3e:27:c8:45:2c:b8:9f:20:ae:b0:36:9c:ff:c5:5a:
                    dc:39:bf:53:e4:e6:d9:b0:3e:03:9f:96:92:fe:6b:
                    5a:78:0f:84:30:79:b3:9e:d2:a0:04:cb:33:d4:c0:
                    28:fb:8d:64:0e:d6:1c:88:ac:d3:48:cd:06:ec:eb:
                    4d:51:d9:ba:b2:05:36:58:5e:5e:83:c3:29:8f:a6:
                    05:03:05:85:40:97:87:a2:a1:a8:05:ca:68:06:8a:
                    a7:60:f9:f0:6b:a1:03:83:82:f4:c8:4e:b1:b3:21:
                    af:e1:38:be:da:f6:f6:90:09:9c:a8:ed:f8:41:be:
                    d6:b8:24:27:e0:22:1b:fb:7a:87:a4:3b:6d:d0:fa:
                    f9:0b:e5:74:a8:83:75:23:2d:9d:88:76:6e:0c:ee:
                    ab:8f:c2:1b:f3:86:3a:da:05:ed:f9:13:5b:b7:3e:
                    72:33:ec:35:44:6a:11:7e:22:bc:b5:be:2e:27:e5:
                    fd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:86:41:51:61:53:75:D0:C5:82:F1:0F:0F:1A:C1:A5:55:55:28:95
            X509v3 Authority Key Identifier:
                keyid:C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7e:86:ed:a6:c0:d3:63:38:5e:ef:3a:12:73:8c:b8:77:56:
         73:0e:62:23:3f:9e:f7:e4:e8:7b:33:2e:ca:43:5c:6f:dd:cc:
         89:34:bf:74:55:2b:af:88:d4:de:ca:a2:63:aa:a1:8a:9f:2b:
         4a:9d:b9:e8:8e:1c:63:b0:14:12:c0:2c:54:dd:a7:07:35:b5:
         22:35:23:24:71:5f:ac:99:b2:9e:4b:f5:29:5d:8a:d2:91:34:
         7c:31:e5:ab:44:a3:92:aa:80:71:77:a7:3c:97:48:72:70:be:
         88:32:5d:10:bd:6c:8c:4d:09:47:6f:40:74:47:19:dd:90:6e:
         bf:02:dc:58:9d:c4:3a:3e:96:01:60:e0:5d:46:fa:b4:07:c7:
         c4:ea:f0:44:7e:87:9e:a1:2a:0b:cc:3e:20:ce:b1:53:ee:1b:
         58:fe:81:01:25:9d:06:07:ea:65:9b:c9:c0:04:7a:2c:34:b4:
         32:87:bf:bc:38:67:0b:ae:9e:7f:6c:45:a6:d5:36:29:16:8d:
         ce:54:dc:d0:f4:a2:e1:14:de:28:bd:f6:36:57:e5:e1:12:5f:
         07:9d:6e:8d:61:d6:8f:8a:10:2d:7d:e4:87:1c:4b:82:02:6d:
         c2:11:40:37:15:67:6a:6a:e6:bf:61:e0:94:0e:6e:c0:71:db:
         a3:3a:ff:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:49:55 2026 by rpki-client