Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
File:                     YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft (raw, json)
Hash identifier:          Xp0Lvua98T2iwsuKT1wvVr0YpQlgX6PEl2/cHosB9kM=
Subject key identifier:   E7:71:86:C3:D2:F9:48:D8:49:65:05:B7:E1:22:11:F7:D2:42:44:F8
Authority key identifier: 61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00
Certificate issuer:       /CN=A91C2F8C/serialNumber=611E1C149528F17A0EC799C39D562619C9A15100
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
Manifest number:          0105
Signing time:             Sun 01 Mar 2026 07:07:55 +0000
Manifest this update:     Sun 01 Mar 2026 07:07:54 +0000
Manifest next update:     Sun 08 Mar 2026 07:07:54 +0000
Files and hashes:         1: YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl (hash: wYqx9R8V0dflPCQE7E+fUIZHI5mjU8TvhqDFoJy4XQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl
                          rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2F8C, serialNumber=611E1C149528F17A0EC799C39D562619C9A15100
        Validity
            Not Before: Mar  1 07:07:54 2026 GMT
            Not After : Mar  8 07:07:54 2026 GMT
        Subject: CN=69a3e5cb-5948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:43:bb:0e:81:64:6e:21:40:52:26:19:a3:93:
                    42:88:43:9a:d0:56:9a:31:55:39:48:dc:8a:95:57:
                    c0:6d:2a:9d:a1:1d:9e:4c:89:44:b5:46:07:6e:4e:
                    81:05:47:df:65:96:45:b3:97:7b:c8:e5:c1:60:9e:
                    c1:d8:6d:72:9c:ef:da:a1:f4:d6:55:6f:6e:7e:21:
                    6b:4c:0a:03:a4:10:c7:af:05:e6:6c:22:09:f3:c9:
                    5b:57:b3:00:f3:ee:43:b7:2a:28:56:5a:06:21:41:
                    0c:27:a4:fb:24:d9:cc:fd:43:0a:f0:71:d5:e5:87:
                    55:08:65:84:35:09:d7:6b:50:c6:8e:30:3f:2b:f8:
                    c2:3a:d1:66:7c:6a:ec:b5:5c:f7:b5:06:f9:d2:c5:
                    3e:05:ee:ff:1f:b5:ea:21:8b:2f:d2:87:f6:56:4c:
                    e3:16:58:91:95:24:ca:a8:34:a4:94:dc:bc:ce:42:
                    0c:a2:72:dc:98:d8:19:85:d2:13:c7:97:1e:3d:3f:
                    f5:79:fc:b0:7c:28:d0:af:b4:50:98:4a:b8:3b:a5:
                    ce:05:13:53:ff:56:0e:e3:f7:2c:94:24:80:60:b3:
                    bb:b7:bd:3d:6f:c2:45:4b:2a:e7:b3:d6:4b:a2:3f:
                    d5:03:5e:a5:a3:d4:ef:f7:89:7b:30:68:fb:b8:8d:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:71:86:C3:D2:F9:48:D8:49:65:05:B7:E1:22:11:F7:D2:42:44:F8
            X509v3 Authority Key Identifier:
                keyid:61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8a:e8:46:44:ac:48:0d:bd:fd:30:24:94:db:fd:0b:42:cf:
         0a:17:bf:f7:84:d3:5c:19:8b:4b:64:02:8e:40:82:e5:5c:ff:
         46:17:2b:4a:77:8f:44:76:62:98:fc:27:58:48:ca:e0:bc:ee:
         18:a9:07:d6:d6:5e:d0:2c:ea:19:c2:30:9b:fb:cc:9b:95:03:
         87:d7:0f:e5:44:63:ea:a8:68:49:7e:b8:67:16:2e:66:ec:8b:
         c4:d4:97:3e:23:d9:89:6e:59:b9:a9:1f:a0:9d:b4:61:01:1d:
         cf:6e:ca:7d:ca:73:38:f3:71:ce:0a:6f:98:b0:84:7c:68:fb:
         07:a2:e8:72:6d:37:75:f5:15:a2:e1:ce:3d:af:27:a2:10:fd:
         d6:fa:b9:5d:99:77:4b:9b:f6:50:14:cc:e5:07:ac:1e:e3:d3:
         05:9d:e2:7c:e8:53:6f:d9:56:f3:c0:ec:32:c2:cd:d5:f0:dc:
         bc:38:0b:20:c3:45:a4:eb:bb:7d:d8:76:1d:83:b4:21:a4:78:
         50:86:c1:60:37:2b:07:8a:28:ad:a2:7e:93:64:3b:4a:b4:58:
         ec:40:f6:45:5c:23:4a:02:63:48:f8:67:f0:24:42:1c:44:b9:
         2b:43:8e:90:26:1a:6c:2e:6e:ee:a4:c9:05:5f:6a:6f:b3:71:
         68:c2:51:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:38 2026 by rpki-client