Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
File:                     yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft (raw, json)
Hash identifier:          I9hiM4Gse5w9BSPaoNk0N+wsOFUy57HiVxVYPgAfSbg=
Subject key identifier:   1B:A8:C5:4B:85:3E:9E:DA:4E:A6:7C:4F:45:DB:E1:85:98:A2:C3:91
Authority key identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
Certificate issuer:       /CN=A91A2946/serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
Manifest number:          31
Signing time:             Sun 01 Mar 2026 10:13:44 +0000
Manifest this update:     Sun 01 Mar 2026 10:13:44 +0000
Manifest next update:     Sun 08 Mar 2026 10:13:44 +0000
Files and hashes:         1: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl (hash: ZVpGjET71AXTLslHzuICYUZSR67sCV1SLy1NQHxu/Go=)
                          2: 26CABD66DB4011F0B92C4C778FD3641D.roa (hash: 77vlGPsTBdhPDBopo52mzOrA60Cg+50amZ8+PMCNaP0=)
                          3: 32A734F4DB3411F095EFF1788DD3641D.roa (hash: ZJFUNJfKnHjBTAeh2a4+XncnrcDN+/EtwP1+QA3vw0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
                          rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2946, serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
        Validity
            Not Before: Mar  1 10:13:44 2026 GMT
            Not After : Mar  8 10:13:44 2026 GMT
        Subject: CN=69a41158-c3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:02:d9:2b:78:66:d7:9b:ef:44:72:d1:10:cc:
                    4e:d0:29:2b:33:5f:87:e2:dc:a7:14:79:6f:0e:0c:
                    1c:03:57:66:1d:1d:27:8a:d3:82:86:31:48:0e:0a:
                    3c:14:2f:d6:97:18:26:94:47:b9:49:98:e1:62:5c:
                    e9:d7:b3:fd:e6:4f:66:dc:17:3d:22:ad:e0:03:61:
                    87:4d:b7:7f:3b:33:5e:25:8c:05:0d:bc:aa:62:4b:
                    6d:d0:12:27:52:c9:78:f7:fe:6a:8a:6c:86:10:53:
                    16:4d:3e:c2:64:47:d6:bf:ee:e6:46:fe:fd:15:f8:
                    a6:c3:5a:5a:5d:72:08:42:46:f4:b2:2f:8c:79:4e:
                    97:70:bc:f8:a9:7d:45:53:7e:5d:9a:80:d0:07:bf:
                    06:d3:45:92:f5:1e:08:c6:65:e3:81:2d:e7:f1:9e:
                    86:5b:44:bc:30:01:41:8d:4b:ea:c7:cf:9d:7c:cd:
                    27:51:ae:09:28:20:91:d5:14:a4:78:26:24:53:02:
                    2b:97:b7:a2:5c:a8:52:b3:2c:d6:3c:98:2b:dd:1c:
                    18:21:78:fb:26:f1:ea:ad:e2:e3:fc:c8:a4:f7:9d:
                    f1:11:99:0d:11:77:11:50:84:e1:93:9d:87:eb:89:
                    f7:c1:c9:95:3e:75:41:13:61:19:33:c1:74:ca:6e:
                    ec:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A8:C5:4B:85:3E:9E:DA:4E:A6:7C:4F:45:DB:E1:85:98:A2:C3:91
            X509v3 Authority Key Identifier:
                keyid:C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5a:7e:3e:95:4d:f3:bf:3d:8c:db:31:19:95:c1:27:d1:83:
         33:aa:d2:ff:ce:82:c1:34:c2:9f:8f:be:0a:25:9f:54:7f:2f:
         09:ff:80:06:5c:b1:d3:0e:e3:6e:74:0d:8a:5b:6c:69:11:89:
         0d:37:36:b1:dd:c5:5f:94:63:2c:63:f3:3a:56:78:cb:e6:90:
         54:56:45:a7:a0:4c:41:bb:47:7b:95:5e:95:a6:00:3d:83:d7:
         8d:1c:f6:ff:19:00:06:6c:eb:03:3d:b2:8a:9c:ea:a2:d0:42:
         f9:b8:ca:70:14:6a:97:5d:b8:cb:94:8f:e6:6a:64:c1:5b:b9:
         a8:a7:eb:fc:0e:da:29:fe:3f:42:bf:c4:a3:cd:16:3e:69:69:
         cf:5a:7c:75:66:fb:82:d6:fc:d5:e4:1d:ca:52:5f:99:76:c4:
         4b:d1:1e:69:d9:6e:2b:c3:e0:2c:7a:f0:b2:7c:64:f9:39:2b:
         c7:f3:0b:fa:33:cd:7a:50:9d:76:dd:7c:5a:48:e7:da:ed:17:
         0e:56:c6:1f:21:3e:bc:54:83:46:e1:ee:ee:34:52:ee:b4:a0:
         e4:87:36:f5:17:15:26:a3:16:b4:04:b0:6f:27:41:f6:c4:80:
         fc:1e:4e:f2:36:fd:e9:b6:10:a4:6f:82:be:4d:9b:f8:57:bf:
         cd:ed:d1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:32 2026 by rpki-client