Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
File:                     yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json)
Hash identifier:          kqJYh6larTB/cPXahNiwsMUFcwCvTvJjCcs9UJlju28=
Subject key identifier:   45:A6:8D:61:FD:33:8B:B3:88:B7:EE:08:DC:21:B5:81:41:BC:A7:F6
Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B
Certificate issuer:       /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B
Certificate serial:       0221
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
Manifest number:          021C
Signing time:             Sun 01 Mar 2026 03:36:12 +0000
Manifest this update:     Sun 01 Mar 2026 03:36:12 +0000
Manifest next update:     Sun 08 Mar 2026 03:36:12 +0000
Files and hashes:         1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: m6CUuAbad7iWy1bNkQRBm3Az1ah6aErPPh9YK+e1GbI=)
                          2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: F7qGiUSXmfTHkG4rLsiz9f3fhRuXMOAIShVR1Seg7DE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl
                          rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B
        Validity
            Not Before: Mar  1 03:36:12 2026 GMT
            Not After : Mar  8 03:36:12 2026 GMT
        Subject: CN=69a3b42c-21df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c6:a1:e2:5a:07:e2:6e:4e:26:f1:9e:da:12:
                    26:54:df:7f:31:82:52:49:19:d5:d9:69:f9:0f:cb:
                    b3:45:ad:a5:1b:59:ff:aa:65:99:76:c5:e6:7d:73:
                    2b:a7:02:b8:ae:86:06:db:08:19:85:77:d6:c0:02:
                    5f:5b:8d:c4:c3:8d:3d:c7:f5:6d:c7:14:4f:fb:f6:
                    4f:4f:e0:40:91:92:ec:c2:75:3e:0d:f8:46:da:f4:
                    b4:38:72:88:7f:22:7c:14:ad:10:35:73:1f:88:14:
                    cc:b6:48:46:43:a6:50:2a:74:a3:d8:23:e7:5b:44:
                    fd:a8:e5:c6:d9:33:16:65:e8:95:6c:20:7f:a1:57:
                    ad:37:c2:f3:45:46:73:25:d1:53:79:ec:b7:34:f4:
                    9f:0e:34:dc:f0:3b:68:f3:23:b0:30:29:c0:40:c3:
                    c2:8a:74:99:97:90:18:e3:53:d8:aa:1d:2f:9b:09:
                    6f:0b:c2:cb:60:43:9f:6a:e2:f3:2b:bd:c5:0a:20:
                    98:74:67:49:2e:09:fc:d9:7b:f8:4b:60:b2:04:b7:
                    fc:08:7c:83:cf:3b:2f:60:55:ae:ac:4a:f5:28:b4:
                    3b:33:f9:02:fa:08:17:38:54:40:6f:fe:bb:25:ff:
                    05:22:95:ae:ff:9d:f8:3c:50:20:74:24:9c:31:d4:
                    1e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A6:8D:61:FD:33:8B:B3:88:B7:EE:08:DC:21:B5:81:41:BC:A7:F6
            X509v3 Authority Key Identifier:
                keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d3:95:2a:c3:48:6e:62:e7:64:97:6e:1f:2e:c2:40:3f:b8:
         59:74:98:5a:12:ab:4d:d9:0f:62:31:bc:60:f5:c6:8e:3f:20:
         f0:49:a6:24:88:e6:b0:33:3d:8d:7e:67:40:f7:41:17:e8:ea:
         df:ae:37:df:3b:04:28:ef:40:4d:6a:9d:da:da:1a:57:a2:d9:
         f9:13:9f:ec:64:b0:04:8a:2a:0e:da:eb:a0:99:12:e1:49:e0:
         34:c2:e5:99:24:97:0c:ba:52:ae:1c:3d:75:56:87:b8:6f:20:
         04:dd:ce:f6:e0:51:92:9b:2c:52:87:db:84:9b:e0:ce:44:ee:
         41:3b:4b:42:c2:f1:f4:7d:32:9f:9b:47:0f:68:ca:eb:2e:99:
         8f:29:75:ed:0d:76:5d:0d:ff:08:67:40:c3:0d:ef:99:20:73:
         16:9c:4f:e5:f6:01:d3:cf:89:34:65:60:c0:5f:ed:8c:ed:d6:
         35:cc:c0:b0:a5:1d:bf:6a:09:01:b5:35:10:24:ec:42:1c:19:
         52:ea:8a:0d:08:44:e3:ab:50:1f:27:bf:5c:cb:60:43:c2:74:
         6d:b1:cf:0f:91:e5:d4:b8:9e:fb:3a:05:fd:2f:ff:3b:f7:8a:
         3c:65:8d:d1:d6:cc:b1:93:7f:af:1b:40:f3:9b:e8:a8:0e:07:
         cf:6a:7c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:56 2026 by rpki-client