Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
File:                     YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft (raw, json)
Hash identifier:          WUBT4Sq6tPg3MQoTKj8lAuJyDQOH/YRiAytin4L0FH4=
Subject key identifier:   AC:AA:8E:AD:0B:DD:18:12:D1:C9:B2:BD:17:26:0F:0B:53:89:B1:47
Authority key identifier: 61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79
Certificate issuer:       /CN=A91A0277/serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779
Certificate serial:       072C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
Manifest number:          071A
Signing time:             Sun 01 Mar 2026 23:25:27 +0000
Manifest this update:     Sun 01 Mar 2026 23:25:26 +0000
Manifest next update:     Sun 08 Mar 2026 23:25:26 +0000
Files and hashes:         1: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl (hash: KG3/qG/60P71t8gy2Q7LekX8+cSTi5BA0LAODieabb4=)
                          2: 56A937F2360411EF8AA77687C4F9AE02.roa (hash: eOWnmeWFjNcjikfJr9Z/coDy1OJu7Wy5b5BQiJf8sxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl
                          rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1836 (0x72c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0277, serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779
        Validity
            Not Before: Mar  1 23:25:26 2026 GMT
            Not After : Mar  8 23:25:26 2026 GMT
        Subject: CN=69a4cae7-bdff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:16:18:1b:31:bc:c8:08:05:02:45:fa:cf:
                    c2:3a:94:ee:7f:3a:85:bc:c5:a5:a4:2e:f9:90:4c:
                    28:da:ed:2d:d0:94:ad:23:02:d5:f8:9d:ce:ae:1b:
                    16:75:13:e8:55:9d:76:1e:3e:4d:2b:d2:96:ff:37:
                    5a:44:87:55:45:61:5b:38:84:40:34:84:14:70:2a:
                    dc:35:a1:65:c1:77:95:ea:13:d9:cf:75:13:b1:66:
                    d0:ba:a8:2e:ae:10:56:20:f4:ca:de:12:b9:b5:fa:
                    b9:ad:00:ac:76:54:a5:85:d7:90:0c:34:d5:4b:cd:
                    f5:0e:77:08:21:b1:ee:1d:da:46:be:46:bc:54:d8:
                    ad:1f:cf:19:e5:e4:ed:93:b2:51:d7:87:fc:cd:a4:
                    c2:33:d4:54:10:ac:9c:0f:df:da:b0:cb:6f:20:7a:
                    1e:1f:8d:f9:51:00:59:27:f6:83:9f:28:4d:5e:78:
                    52:db:5a:dd:4f:55:11:0c:f5:dc:48:06:92:0a:c3:
                    15:48:1b:57:b2:3e:a9:fa:c0:8c:a6:84:35:90:b2:
                    91:e8:2f:05:d3:94:74:f4:7c:29:5e:bb:08:df:81:
                    44:14:04:a2:6a:5c:29:14:bf:d0:a4:f7:9d:d8:c7:
                    73:96:7c:79:62:36:51:d7:fa:aa:07:c1:6f:3c:cd:
                    26:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AA:8E:AD:0B:DD:18:12:D1:C9:B2:BD:17:26:0F:0B:53:89:B1:47
            X509v3 Authority Key Identifier:
                keyid:61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2e:ae:e4:85:d5:8f:23:f1:54:46:c7:47:06:37:e7:32:04:
         3d:33:29:ac:3b:c6:38:49:0f:84:ff:1b:ba:3c:e5:96:28:07:
         8f:0a:0e:fa:ef:b2:c8:68:6c:f7:4e:17:12:57:83:85:3a:ca:
         a3:c2:d3:64:5c:08:8b:d6:3e:72:a5:f1:3e:fa:a6:c3:34:a5:
         51:14:7a:9d:5d:9c:a8:c6:3e:0d:95:91:00:41:5a:25:78:5b:
         09:9d:3b:e9:85:95:c2:4b:d6:cb:1f:1c:73:2c:1a:89:fc:0b:
         14:3f:0b:40:33:45:60:b6:62:1b:6e:e0:9b:ac:d7:48:91:30:
         ff:b2:04:29:bd:17:c4:3c:4d:38:af:64:22:d1:a3:43:80:55:
         2d:fa:fb:3f:f3:e4:92:07:d8:c3:95:d9:f1:a8:03:1c:c8:4c:
         83:4d:39:12:78:aa:b6:52:e3:80:f8:99:6e:f9:90:1d:66:f0:
         4e:88:4b:1a:b8:5a:3f:64:53:eb:39:96:5d:85:ad:83:69:d9:
         7f:93:b0:d4:49:36:04:29:f1:6b:a2:73:1b:4f:62:c6:3e:cb:
         4a:7c:88:2b:52:15:f8:74:82:e6:d5:ea:3b:6f:b4:68:13:4b:
         5d:7c:34:b1:f7:32:fd:c8:40:35:07:0f:9e:ea:e3:20:55:b8:
         4b:19:85:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:10:32 2026 by rpki-client