Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
File:                     YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json)
Hash identifier:          MO2ZBESLySAm2snWUiAxusVWoEADZriWirJGPfN3z00=
Subject key identifier:   32:C5:2E:37:24:65:63:CA:F8:E2:6A:16:57:4C:41:D0:16:92:16:4A
Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80
Certificate issuer:       /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
Manifest number:          0109
Signing time:             Sun 01 Mar 2026 07:02:53 +0000
Manifest this update:     Sun 01 Mar 2026 07:02:53 +0000
Manifest next update:     Sun 08 Mar 2026 07:02:53 +0000
Files and hashes:         1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: mP3rp99wuibqekuPZPGMRdpYGPtHcZQYqmiNYoSRRR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl
                          rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9CD5, serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180
        Validity
            Not Before: Mar  1 07:02:53 2026 GMT
            Not After : Mar  8 07:02:53 2026 GMT
        Subject: CN=69a3e49d-3f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:97:33:ba:35:e9:e6:d9:34:9d:95:d2:5c:7e:
                    1d:fc:eb:a1:53:94:94:c0:16:55:a2:69:c2:33:94:
                    14:49:b5:32:a0:a8:a3:4c:e0:b1:49:4a:48:8f:7f:
                    a1:c8:10:bd:81:30:9e:75:14:73:43:32:ff:7a:eb:
                    54:3a:08:9d:cf:4b:21:a0:29:ca:f2:57:08:62:b8:
                    4b:d0:c6:cc:03:28:30:6a:e6:ff:84:bc:52:c1:a9:
                    2f:37:d7:1f:d3:84:d4:82:b2:25:bf:74:0a:78:57:
                    04:7a:f4:ae:a3:2f:f5:46:a7:58:05:6f:7a:d4:d0:
                    53:e6:12:51:d1:61:c3:d5:59:5f:4f:7e:dd:c9:55:
                    d7:a6:2e:45:6a:79:26:24:0b:54:99:94:ec:a0:c8:
                    e1:93:0d:b9:1d:e0:38:50:7f:64:84:87:b7:70:34:
                    62:59:96:53:24:be:d4:58:82:7c:c2:e7:f2:17:b6:
                    2a:3d:29:3d:f9:47:4c:16:18:32:a1:52:a7:62:41:
                    bc:b8:c7:f6:e6:80:5c:50:76:ac:88:47:1e:89:af:
                    24:36:de:36:9c:4f:54:26:0e:1e:0f:32:38:04:89:
                    b7:2d:61:4c:39:06:0e:e9:57:17:eb:47:5a:f3:01:
                    37:e3:fa:79:a7:6a:54:bf:7b:96:ea:8f:80:41:2a:
                    2d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C5:2E:37:24:65:63:CA:F8:E2:6A:16:57:4C:41:D0:16:92:16:4A
            X509v3 Authority Key Identifier:
                keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:cc:36:d5:dd:fa:95:19:29:ab:29:56:23:1c:68:fd:c1:9b:
         aa:a0:cc:96:c3:19:74:36:73:61:fa:fc:cf:d0:47:39:6c:eb:
         af:0c:0a:71:28:20:ef:38:f0:e4:89:87:9e:9f:8c:ee:f8:ce:
         42:16:93:cb:4d:cd:26:75:89:a2:4c:20:13:f5:e2:92:87:f7:
         44:ce:96:6a:13:89:f9:e3:c8:09:4a:30:3b:31:be:15:f2:42:
         68:92:2a:90:19:6b:a4:59:88:ed:9d:60:7b:27:f9:11:44:07:
         1d:b7:01:d1:15:c5:8d:5d:ee:4a:f5:6a:5a:33:26:c5:1f:e7:
         dd:34:77:46:08:bc:ed:22:c5:90:18:84:8e:dc:69:a8:99:41:
         a6:d4:98:8d:f8:06:04:32:20:28:8c:6c:e7:a8:f8:a0:b0:aa:
         e5:d2:db:60:6b:13:b6:29:24:dd:1c:ec:33:92:7e:5c:0f:df:
         73:42:d0:ed:53:95:b7:32:a1:5a:2e:88:c1:c8:a4:95:77:d7:
         53:5b:e0:ae:b2:24:22:7e:75:c4:6f:06:6a:36:f0:ff:7d:c1:
         ad:d5:4e:1a:6c:2f:9f:18:7f:f4:a1:64:b1:d3:97:fc:5d:09:
         ee:9d:8c:4d:f2:47:23:cc:fe:cb:63:da:2e:ff:d3:c5:ac:da:
         e3:a1:36:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:09 2026 by rpki-client