Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
File:                     ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json)
Hash identifier:          kaLzqsuwXidaNiJdnUiL1s3NA75MOyMFzsON3bqd5/4=
Subject key identifier:   D7:63:99:08:D2:59:F1:A9:50:5B:3A:7D:D5:0F:5F:0F:49:84:E7:76
Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3
Certificate issuer:       /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
Certificate serial:       0C00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
Manifest number:          0BE1
Signing time:             Sun 01 Mar 2026 22:25:54 +0000
Manifest this update:     Sun 01 Mar 2026 22:25:53 +0000
Manifest next update:     Sun 08 Mar 2026 22:25:53 +0000
Files and hashes:         1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: mEKbov/1uldDuHk6Htc9B5Xna8cMEoVnr+9VfCau7y8=)
                          2: 6AC5AB5CEAB811F088FEC0005D6F56BC.roa (hash: GCpn4gmc0QpPSz7cXybRJq63rDVbixPSMbZl0hH07Xg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl
                          rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3072 (0xc00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2C43, serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
        Validity
            Not Before: Mar  1 22:25:53 2026 GMT
            Not After : Mar  8 22:25:53 2026 GMT
        Subject: CN=69a4bcf1-edb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fe:14:ab:ee:08:6a:1e:1a:6f:34:71:40:14:
                    50:56:8c:c3:8b:9d:ea:95:85:48:49:4e:b0:74:17:
                    73:d1:df:c9:b7:27:9c:31:ce:9f:bd:d5:90:3a:04:
                    76:5d:7b:4a:c4:28:94:15:a3:ea:c7:3f:db:d9:76:
                    d4:48:be:8e:6f:6b:d6:8c:21:b1:84:b9:3d:fc:f9:
                    b5:98:ab:2a:b3:73:29:4a:f0:eb:00:1f:79:33:92:
                    eb:d7:31:50:f2:28:17:d4:44:60:1d:f1:1f:82:69:
                    54:b5:22:fb:98:73:d5:d9:85:73:0d:18:97:49:80:
                    a2:e2:4f:b1:db:2b:17:80:cd:d0:42:7b:dc:f9:ac:
                    89:d1:64:56:0a:9d:b2:5f:e9:ac:54:13:00:84:6a:
                    a8:7e:c8:f7:24:f0:8d:9b:a4:2b:dc:ab:9f:70:3a:
                    f4:06:c6:27:56:be:60:40:79:24:44:bc:7d:49:94:
                    1d:29:25:93:0f:27:72:7c:2f:77:1c:50:c6:19:52:
                    50:63:ce:4d:d1:24:af:45:1a:4c:3d:9a:96:c7:9a:
                    27:89:42:da:a4:37:af:0e:f7:87:24:f9:ba:98:2d:
                    af:da:b2:05:e3:e9:76:ac:8b:35:be:ff:ae:84:41:
                    1a:ae:6c:0d:b0:a4:47:47:d5:ac:97:7c:6b:7a:69:
                    62:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:63:99:08:D2:59:F1:A9:50:5B:3A:7D:D5:0F:5F:0F:49:84:E7:76
            X509v3 Authority Key Identifier:
                keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:fd:00:87:a4:fe:9d:22:f2:59:ca:89:e5:58:3c:bb:63:7b:
         9a:75:f2:d0:42:cb:d9:61:73:26:b7:b0:57:b7:4f:90:1f:8a:
         63:67:9b:51:96:67:c2:73:88:bd:a7:00:16:b1:50:24:88:04:
         0e:c9:f3:75:8a:6a:dd:41:46:d1:ad:41:c0:b2:61:95:08:7b:
         4b:5a:1e:ae:27:ab:d9:c8:a9:18:47:28:99:4e:7b:b4:5b:e5:
         3c:7f:da:90:60:57:29:67:ee:68:09:39:95:e2:48:d0:3e:50:
         a7:eb:3b:5d:56:b9:95:5e:60:10:f9:16:07:5b:44:bd:8b:5f:
         b4:9b:66:12:62:71:82:2c:d5:c3:cc:b2:13:f6:63:9c:a9:c5:
         b9:b5:50:3d:d4:ed:5c:85:7f:aa:d9:c8:de:14:b9:b6:a9:68:
         2e:43:81:f0:60:61:a0:ee:93:2f:dc:1f:3e:9b:9e:7c:0f:4c:
         e6:cb:83:74:30:a3:be:9a:e5:13:a5:d0:36:58:d1:9e:7a:80:
         79:c3:ac:37:26:33:92:73:ee:ca:2d:06:e1:61:0f:fb:c3:1d:
         64:0f:a3:56:42:7e:eb:59:53:5d:68:da:c1:3a:74:e1:c7:7d:
         b0:62:82:70:96:37:09:b0:44:18:19:4e:3b:9b:01:ed:30:93:
         73:d3:15:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJDNDMxMTAvBgNVBAUTKENBMENFMkNCQTk5Q0RFMEQ5MDI3RkNFNDg2NEYyNkM5
MTNENDE5RTMwHhcNMjYwMzAxMjIyNTUzWhcNMjYwMzA4MjIyNTUzWjAYMRYwFAYD
VQQDEw02OWE0YmNmMS1lZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr/4Uq+4Iah4abzRxQBRQVozDi53qlYVISU6wdBdz0d/JtyecMc6fvdWQOgR2
XXtKxCiUFaPqxz/b2XbUSL6Ob2vWjCGxhLk9/Pm1mKsqs3MpSvDrAB95M5Lr1zFQ
8igX1ERgHfEfgmlUtSL7mHPV2YVzDRiXSYCi4k+x2ysXgM3QQnvc+ayJ0WRWCp2y
X+msVBMAhGqofsj3JPCNm6Qr3KufcDr0BsYnVr5gQHkkRLx9SZQdKSWTDydyfC93
HFDGGVJQY85N0SSvRRpMPZqWx5oniULapDevDveHJPm6mC2v2rIF4+l2rIs1vv+u
hEEarmwNsKRHR9Wsl3xremlivQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdjmQjS
WfGpUFs6fdUPXw9JhOd2MB8GA1UdIwQYMBaAFMoM4supnN4NkCf85IZPJskT1Bnj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM0My9EQzJGNTQ2ODM5
RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNnMlFKX3praGs4bXlSUFVH
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lneml5Nm1jM2cyUUpfemtoazhteVJQVUdlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkM0My9EQzJGNTQ2ODM5RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNn
MlFKX3praGs4bXlSUFVHZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFv0Ah6T+nSLyWcqJ5Vg8u2N7mnXy0ELL2WFzJrewV7dPkB+KY2ebUZZnwnOI
vacAFrFQJIgEDsnzdYpq3UFG0a1BwLJhlQh7S1oerier2cipGEcomU57tFvlPH/a
kGBXKWfuaAk5leJI0D5Qp+s7XVa5lV5gEPkWB1tEvYtftJtmEmJxgizVw8yyE/Zj
nKnFubVQPdTtXIV/qtnI3hS5tqloLkOB8GBhoO6TL9wfPpuefA9M5suDdDCjvprl
E6XQNljRnnqAecOsNyYzknPuyi0G4WEP+8MdZA+jVkJ+61lTXWjawTp04cd9sGKC
cJY3CbBEGBlOO5sB7TCTc9MVNA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:23 2026 by rpki-client