Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
File:                     ysNNxbjd0zsX7HVcldRdD3YlD6g.mft (raw, json)
Hash identifier:          TnOPVi1aT4Z0U9kXChCPogs33jTOiULvS1F9/BQL2+Y=
Subject key identifier:   B0:F5:A9:B4:56:65:DA:75:39:28:15:B6:38:43:2E:65:5B:77:A2:E3
Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
Certificate issuer:       /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Certificate serial:       0261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
Manifest number:          025B
Signing time:             Mon 02 Mar 2026 02:13:34 +0000
Manifest this update:     Mon 02 Mar 2026 02:13:33 +0000
Manifest next update:     Mon 09 Mar 2026 02:13:33 +0000
Files and hashes:         1: ysNNxbjd0zsX7HVcldRdD3YlD6g.crl (hash: vDu8BkHZbwhvEcrMQCiuZ7/xqEciqwQLvkn2clV9z6U=)
                          2: E21DEF607B5E11ED98247D60C4F9AE02.roa (hash: R3KADOtwsyG/v2+mGTP92tv9io+mPYskKwwNor02wSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
        Validity
            Not Before: Mar  2 02:13:33 2026 GMT
            Not After : Mar  9 02:13:33 2026 GMT
        Subject: CN=69a4f24e-a893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:78:b6:1e:d4:01:3c:17:3b:dd:ac:21:fe:
                    a9:e6:35:30:c0:85:f9:cf:5b:08:1d:df:20:2f:82:
                    7a:59:36:15:b5:62:99:43:96:1c:8c:b4:ac:79:29:
                    6e:65:22:01:7e:68:5c:66:d2:87:e1:00:71:93:6a:
                    ec:89:f1:71:35:04:64:a1:a6:a7:4e:e3:d8:6d:0f:
                    54:fc:04:42:7d:98:a3:69:f5:04:f7:8e:96:49:d1:
                    bb:2c:a5:94:ce:f0:e4:ed:e0:5e:1d:f2:17:6a:2f:
                    72:1e:7c:0d:b6:56:80:76:95:99:c2:8a:8b:e3:af:
                    3b:04:97:d9:36:c6:cd:16:e9:0a:b3:24:30:13:3d:
                    0b:fd:ca:6a:89:40:a2:7b:34:85:e9:28:57:a8:1a:
                    0f:9c:6b:47:f3:db:71:5d:85:dc:3e:2a:4b:6f:96:
                    b5:f1:94:d8:a9:8b:dd:fc:a2:18:9a:b2:7c:f0:c1:
                    25:4c:86:58:ea:68:85:20:66:e4:05:a0:5b:fd:f6:
                    49:d9:ce:c9:f7:af:3d:d5:b5:4b:d0:4d:9c:ad:06:
                    2e:2e:5d:6c:69:74:b0:fb:21:00:92:41:b4:46:8a:
                    21:26:55:6a:4d:10:10:cc:4c:37:cb:07:18:93:16:
                    62:7a:6f:35:40:a5:ae:61:14:45:2d:3e:d5:87:fb:
                    92:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F5:A9:B4:56:65:DA:75:39:28:15:B6:38:43:2E:65:5B:77:A2:E3
            X509v3 Authority Key Identifier:
                keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:56:56:2b:9b:d6:7a:c8:6b:36:78:53:33:b6:21:d8:e2:0c:
         10:f4:86:00:d6:d4:41:84:44:13:b1:62:ea:c3:22:ea:42:92:
         fc:89:c5:41:fc:f4:01:4a:5d:28:e9:00:78:a5:22:df:c8:44:
         74:e2:cb:c5:4a:1d:39:54:46:c8:cd:a5:50:1a:c4:82:a0:5b:
         b1:d4:01:ea:f2:4e:b1:ae:90:f3:d4:23:43:dd:7f:89:2e:7f:
         72:a3:0a:cd:a1:23:c0:2a:87:15:e5:54:ac:fe:af:c1:8c:ac:
         0d:2a:9e:cc:09:af:be:3a:48:5b:1f:e1:78:a2:f1:99:35:c1:
         83:e6:4e:f8:5f:27:e6:ab:51:a6:d8:e8:f8:3d:ee:13:5a:23:
         e6:1a:ef:b4:c8:d9:74:79:8e:25:0a:73:c7:6b:53:36:82:2e:
         e4:8a:ea:ef:27:19:1b:da:02:17:38:6e:4c:43:af:60:f2:73:
         cd:04:70:88:63:3f:af:7d:47:a5:7c:c4:85:43:fa:9f:80:21:
         70:6a:d2:2b:ad:be:a8:db:62:b2:d2:7a:65:fd:e4:c3:27:3c:
         e9:a4:ae:3f:77:3d:5f:14:47:08:04:51:41:de:c0:82:df:83:
         f5:d1:c2:0a:36:8b:20:de:70:4f:c2:4b:ea:cf:43:28:6c:b0:
         44:f0:77:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlCMzkxMTAvBgNVBAUTKENBQzM0REM1QjhEREQzM0IxN0VDNzU1Qzk1RDQ1RDBG
NzYyNTBGQTgwHhcNMjYwMzAyMDIxMzMzWhcNMjYwMzA5MDIxMzMzWjAYMRYwFAYD
VQQDEw02OWE0ZjI0ZS1hODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoIR4th7UATwXO92sIf6p5jUwwIX5z1sIHd8gL4J6WTYVtWKZQ5YcjLSseSlu
ZSIBfmhcZtKH4QBxk2rsifFxNQRkoaanTuPYbQ9U/ARCfZijafUE946WSdG7LKWU
zvDk7eBeHfIXai9yHnwNtlaAdpWZwoqL4687BJfZNsbNFukKsyQwEz0L/cpqiUCi
ezSF6ShXqBoPnGtH89txXYXcPipLb5a18ZTYqYvd/KIYmrJ88MElTIZY6miFIGbk
BaBb/fZJ2c7J96891bVL0E2crQYuLl1saXSw+yEAkkG0RoohJlVqTRAQzEw3ywcY
kxZiem81QKWuYRRFLT7Vh/uScQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLD1qbRW
Zdp1OSgVtjhDLmVbd6LjMB8GA1UdIwQYMBaAFMrDTcW43dM7F+x1XJXUXQ92JQ+o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIzOS9CNjE1RDBCQzdC
NUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6c1g3SFZjbGRSZEQzWWxE
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lzTk54YmpkMHpzWDdIVmNsZFJkRDNZbEQ2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUIzOS9CNjE1RDBCQzdCNUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6
c1g3SFZjbGRSZEQzWWxENmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG1ZWK5vWeshrNnhTM7Yh2OIMEPSGANbUQYREE7Fi6sMi6kKS/InFQfz0AUpd
KOkAeKUi38hEdOLLxUodOVRGyM2lUBrEgqBbsdQB6vJOsa6Q89QjQ91/iS5/cqMK
zaEjwCqHFeVUrP6vwYysDSqezAmvvjpIWx/heKLxmTXBg+ZO+F8n5qtRptjo+D3u
E1oj5hrvtMjZdHmOJQpzx2tTNoIu5Irq7ycZG9oCFzhuTEOvYPJzzQRwiGM/r31H
pXzEhUP6n4AhcGrSK62+qNtistJ6Zf3kwyc86aSuP3c9XxRHCARRQd7Agt+D9dHC
CjaLIN5wT8JL6s9DKGywRPB32A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:28 2026 by rpki-client