Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
File:                     y2yF51LVad_PHekEycvnHkg-9fI.mft (raw, json)
Hash identifier:          m/TIN9GGOSTL1iwq1vDGLW/0iF61kIuUskjZF8dBFDk=
Subject key identifier:   FA:9E:7A:80:DB:91:A1:24:8E:F5:08:3B:5D:63:13:5B:CC:CE:90:29
Authority key identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2
Certificate issuer:       /CN=A91BC039/serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
Certificate serial:       0568
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
Manifest number:          055F
Signing time:             Sun 01 Mar 2026 23:09:44 +0000
Manifest this update:     Sun 01 Mar 2026 23:09:43 +0000
Manifest next update:     Sun 08 Mar 2026 23:09:43 +0000
Files and hashes:         1: y2yF51LVad_PHekEycvnHkg-9fI.crl (hash: 2HiHsqo/52Kq+bnk8lx7xjJ7JmK/iejUuQdm1gA3WPE=)
                          2: 004A745EDBB011F0904A453A4D641951.roa (hash: 0TWkmfJVbCOLiU1v9M8I2M82G17YACYNARPjaSNnjI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl
                          rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1384 (0x568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC039, serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
        Validity
            Not Before: Mar  1 23:09:43 2026 GMT
            Not After : Mar  8 23:09:43 2026 GMT
        Subject: CN=69a4c737-2af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:43:cc:0b:90:0e:2b:af:c6:a0:59:39:7b:
                    14:6e:3b:25:1e:70:89:76:03:c0:49:c4:9d:72:18:
                    dc:80:24:24:f5:5b:98:da:2d:8a:38:d4:c8:8a:32:
                    c0:19:98:08:df:d3:9b:f9:39:18:ef:89:bb:80:c1:
                    c5:22:98:3b:b5:82:3a:a3:d4:f8:bd:9a:26:61:84:
                    36:84:ac:e6:36:64:34:d0:96:8a:d2:44:e7:af:df:
                    91:86:14:b4:d0:8f:f7:ff:23:71:5b:2b:77:4e:32:
                    6e:37:82:8f:15:fa:4d:ff:a1:d1:ce:20:0c:ca:ce:
                    27:58:6a:98:0f:3f:8e:e2:b5:04:3d:8a:11:7c:e7:
                    9a:a5:48:3a:da:6e:32:05:17:35:ec:b2:70:93:bf:
                    e1:51:c9:3d:2d:b7:9b:96:5a:12:cc:61:6c:27:7c:
                    30:74:7b:ab:14:09:2c:99:ed:44:a9:be:64:2a:e0:
                    47:2e:ab:76:5a:28:f4:db:bc:70:5e:34:f5:73:11:
                    34:46:a3:d5:a8:e9:08:d1:5c:52:51:35:b3:13:09:
                    26:b8:2b:8e:24:8f:83:46:c7:b5:06:0a:ee:46:8c:
                    05:77:e6:9a:30:90:71:b5:65:94:52:3e:d1:b7:6e:
                    65:f1:1e:d7:76:0f:60:07:c8:75:6c:4b:39:04:80:
                    26:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9E:7A:80:DB:91:A1:24:8E:F5:08:3B:5D:63:13:5B:CC:CE:90:29
            X509v3 Authority Key Identifier:
                keyid:CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:72:30:81:d9:76:b8:20:f9:98:4e:16:dc:db:be:b9:e8:0e:
         b0:02:5f:d5:59:f5:0b:ea:cc:a7:a3:95:1d:06:af:ce:55:61:
         39:10:4d:92:72:fd:90:fd:48:80:b9:d4:9e:c8:28:6c:32:e7:
         9d:dc:7f:c1:d8:8b:9d:40:be:14:f7:b8:64:ae:48:54:da:b6:
         3e:cc:18:2f:ee:a1:47:c1:5b:cf:19:03:5f:41:2c:84:c6:5c:
         1d:0b:05:9b:fa:8c:c7:5a:a2:ac:20:88:96:b6:1a:b7:bd:23:
         ee:ca:28:d6:94:ea:39:df:60:3d:f9:45:10:76:b2:ac:7c:7a:
         c1:a7:ab:d6:26:c5:b4:35:df:20:a9:fc:e6:bd:f8:f6:53:5b:
         54:40:0d:16:f4:53:30:0e:30:0c:5d:10:91:e9:8b:7a:32:31:
         42:96:dd:9a:cf:8b:2d:5f:e0:42:a0:72:14:1d:df:b8:07:6c:
         68:0e:fd:87:93:62:c1:c7:20:48:d8:c3:eb:cb:99:47:07:75:
         a1:d5:61:3f:6a:1f:19:ec:3f:11:46:30:ba:b9:3c:e9:50:3e:
         ca:ad:cd:40:14:e5:17:83:a8:01:86:fa:f0:b5:32:eb:30:a2:
         e3:f8:03:2e:c4:39:73:90:eb:fe:94:a0:aa:4e:7a:bc:be:d0:
         da:51:a7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:21 2026 by rpki-client