Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft
File:                     ycf7MVXuXrRUGnY3mYlwgGpG878.mft (raw, json)
Hash identifier:          2cCNy2qpxuqAHIX9m1hijRldMAFkJMCI3suIFUWkwuk=
Subject key identifier:   96:DD:FE:D7:BC:EB:6B:F5:07:85:6B:AD:F9:2E:25:89:C7:4B:08:D4
Authority key identifier: C9:C7:FB:31:55:EE:5E:B4:54:1A:76:37:99:89:70:80:6A:46:F3:BF
Certificate issuer:       /CN=A919AB96/serialNumber=C9C7FB3155EE5EB4541A7637998970806A46F3BF
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft
Manifest number:          65
Signing time:             Sun 01 Mar 2026 09:22:01 +0000
Manifest this update:     Sun 01 Mar 2026 09:22:01 +0000
Manifest next update:     Sun 08 Mar 2026 09:22:01 +0000
Files and hashes:         1: ycf7MVXuXrRUGnY3mYlwgGpG878.crl (hash: z7avaIx04nmlAY3ipgvA1nC7I3L8ks+fetKHldskttQ=)
                          2: CDD6FA7CAD8511F08C759F59C4F9AE02.roa (hash: yXrHOs4+nJaaVCnnX4/LliEWbcY6OxUiaroiLnewb70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.crl
                          rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AB96, serialNumber=C9C7FB3155EE5EB4541A7637998970806A46F3BF
        Validity
            Not Before: Mar  1 09:22:01 2026 GMT
            Not After : Mar  8 09:22:01 2026 GMT
        Subject: CN=69a40539-2281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:d4:22:6f:74:e8:1b:2f:c9:78:df:8b:3b:
                    06:67:6e:57:db:86:ca:35:cf:4b:10:a6:4c:90:c5:
                    d5:fe:80:ec:71:9d:5e:50:e4:c7:ce:d3:51:cc:ee:
                    e3:0b:8c:17:5b:ea:af:8c:97:13:f6:89:d4:e7:2e:
                    6a:6a:5d:e2:05:75:c2:7c:ac:57:2c:0f:f9:a0:d7:
                    cf:de:92:77:6d:ae:ed:52:95:5c:c9:0d:cf:12:49:
                    af:ab:b4:51:cc:46:9f:f1:1d:8d:d6:b4:14:06:e0:
                    d0:85:26:a5:79:39:1e:21:37:4a:cb:71:a3:67:84:
                    22:7d:1e:21:c3:53:7e:52:14:68:7a:3d:f6:9d:9f:
                    5d:32:6f:4b:1c:c0:70:50:b0:93:df:39:d3:f0:2a:
                    6e:5d:4b:1f:8b:58:10:ca:85:0a:fe:44:53:e7:41:
                    fc:3d:0b:5f:29:93:ad:ac:7a:71:e1:89:3e:cc:76:
                    89:2c:02:49:e2:f5:57:fb:cf:d9:bb:09:fa:be:d9:
                    3b:20:49:02:17:be:c9:33:89:c5:dd:09:9f:fa:88:
                    4b:73:ec:3b:e5:ae:3f:3d:00:dc:05:54:26:43:b5:
                    10:83:d7:a2:90:d3:40:27:31:94:1b:34:e1:ea:d0:
                    cf:c4:a1:e8:7c:f2:05:77:79:78:16:9e:b6:5a:a3:
                    23:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DD:FE:D7:BC:EB:6B:F5:07:85:6B:AD:F9:2E:25:89:C7:4B:08:D4
            X509v3 Authority Key Identifier:
                keyid:C9:C7:FB:31:55:EE:5E:B4:54:1A:76:37:99:89:70:80:6A:46:F3:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:bc:1d:8e:83:1b:10:73:4e:01:ab:db:53:72:00:81:65:b9:
         d6:55:a7:64:d1:0d:6d:72:41:33:2f:30:c7:cd:cb:65:50:04:
         6d:fa:73:94:83:e2:93:2c:33:7f:da:44:3d:14:c5:c1:65:b0:
         33:e2:00:2d:18:16:34:5e:15:3f:3e:72:a7:9f:98:9b:f1:2f:
         57:c9:68:db:11:ff:bf:7b:92:23:a1:8a:39:57:60:aa:c6:08:
         a3:c2:8d:b7:ea:a1:e4:ad:7b:42:2b:71:47:30:36:dc:c8:1d:
         70:01:ef:62:75:29:68:dc:17:4b:b1:b1:0c:d6:08:dc:a6:cb:
         50:9f:83:df:ff:ac:33:df:b6:f7:3b:2a:bd:84:1f:22:47:b9:
         8e:b9:53:07:c2:10:83:fe:20:33:b0:3f:10:bf:13:02:c5:3c:
         10:b8:9d:b2:37:69:e4:b3:4b:6a:12:f3:a8:f4:02:de:d8:8c:
         de:39:10:88:91:da:93:7a:e4:85:3b:68:85:53:fd:57:79:2e:
         0d:ad:ca:bd:37:fe:61:f1:21:8e:7b:bb:cc:8a:dc:a8:25:e4:
         ed:1c:09:40:95:ef:80:3b:33:a9:68:b6:94:90:01:a2:a0:1e:
         3b:32:c4:34:ed:18:d2:15:71:47:37:a7:b2:cf:b5:ef:b0:3d:
         15:38:9c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:58:30 2026 by rpki-client