Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
File:                     ybbzh3rMoIEu_42KP1wESgwwvIA.mft (raw, json)
Hash identifier:          GR0x9TwVd/alBEIazUU05TSdjnSEXd8XoUW6MLaDS3k=
Subject key identifier:   85:64:63:66:6D:C8:F1:88:48:62:9C:87:E8:7C:D2:B2:05:AC:EA:50
Authority key identifier: C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80
Certificate issuer:       /CN=A91A77C2/serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
Certificate serial:       064A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
Manifest number:          0644
Signing time:             Sat 28 Feb 2026 23:14:18 +0000
Manifest this update:     Sat 28 Feb 2026 23:14:17 +0000
Manifest next update:     Sat 07 Mar 2026 23:14:17 +0000
Files and hashes:         1: ybbzh3rMoIEu_42KP1wESgwwvIA.crl (hash: srbHnHzX0YwgC8UGprN3vpVOtOin464GAySHU+qk6Ig=)
                          2: E5692882C63411EB9E5F5F30C4F9AE02.roa (hash: NtEKqe9K8qVaWm1bTRQ0N6CeN9vSLJhLoVuJfNIm9AY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl
                          rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1610 (0x64a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A77C2, serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
        Validity
            Not Before: Feb 28 23:14:17 2026 GMT
            Not After : Mar  7 23:14:17 2026 GMT
        Subject: CN=69a376c9-a897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:61:8f:10:9b:90:92:d1:33:99:aa:34:6d:
                    6f:f3:5b:ab:45:64:2b:c0:0d:53:1e:09:1d:1a:17:
                    b6:f6:46:7b:9a:d3:ef:eb:33:3d:70:ca:ee:f8:26:
                    26:57:75:41:84:cf:fe:50:3a:72:b0:15:54:80:d9:
                    06:99:ca:24:0f:c4:ae:ff:f6:47:f9:ca:5e:ee:ff:
                    32:7a:cf:bc:f1:00:a0:b4:fd:35:9a:04:83:1b:39:
                    91:f2:44:0f:39:5f:93:4e:3f:e3:33:72:10:a3:a5:
                    fe:d7:a7:c0:e8:45:94:9d:42:df:82:84:b4:47:58:
                    67:25:9e:d7:72:20:9e:f5:7c:f6:f3:ce:be:df:89:
                    f5:f7:bc:4e:44:82:7f:91:74:56:d1:f1:03:76:a1:
                    ee:53:0b:d0:4f:0e:7f:fe:27:b4:9c:9f:67:6e:ef:
                    72:68:e0:6c:4f:dd:b9:a4:9f:31:71:05:cb:ba:53:
                    ed:31:82:ba:b6:30:14:07:4d:ed:2a:33:41:c6:8d:
                    4e:18:8e:99:ce:2c:0a:54:21:67:3f:46:eb:bd:28:
                    00:dd:65:0e:b4:54:b3:6d:5d:94:94:6c:4a:70:fa:
                    ab:74:ba:fe:27:f9:e8:47:04:8b:ec:5e:23:42:0f:
                    a0:04:1c:f1:bb:ac:16:6c:49:d3:bd:f8:00:d6:0f:
                    cd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:64:63:66:6D:C8:F1:88:48:62:9C:87:E8:7C:D2:B2:05:AC:EA:50
            X509v3 Authority Key Identifier:
                keyid:C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:69:41:5e:45:9f:ad:fc:68:e8:97:1e:52:e6:c7:c3:e4:d3:
         7f:1e:09:87:18:e0:7d:b2:81:f6:c5:81:dc:db:8d:a0:fb:0e:
         2d:82:0b:c0:da:03:1c:c4:6c:53:ce:c0:d8:bc:b3:df:05:45:
         55:bc:7d:3d:af:c4:b0:7c:a7:a8:57:7c:53:76:1c:49:b1:3c:
         b5:ed:9d:88:f1:26:c2:6f:5c:a8:df:6b:34:95:ae:f2:17:1e:
         68:38:b0:ef:64:08:0e:ac:2e:d4:f3:29:26:1f:da:b7:20:0f:
         74:77:a3:a4:3e:c4:84:1a:f2:cf:f5:ce:7b:75:2c:87:b9:ff:
         19:68:30:5a:0f:09:f2:bb:8b:df:b5:31:32:60:97:05:9b:04:
         7f:5b:c4:4f:0d:01:41:4d:3d:e3:aa:8f:a6:21:29:ce:b2:7e:
         31:75:bf:20:91:99:11:f9:d6:69:66:22:fa:a7:3f:21:2c:f9:
         58:69:5b:79:b0:88:11:fa:69:52:e6:15:5d:25:54:5a:8e:70:
         1d:e3:27:48:29:62:2d:aa:3b:b6:62:41:57:fa:10:a6:88:8d:
         5d:85:d9:c4:6b:b5:bb:5d:60:1e:5d:8d:4c:f2:e0:8a:43:76:
         8a:6c:13:0d:ea:b1:20:22:4f:50:dd:60:7d:76:5e:c1:1b:6a:
         10:42:4d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:04 2026 by rpki-client