Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
File:                     u99YzWESke9boarLayzE7VCwEVc.mft (raw, json)
Hash identifier:          6pr8XGvhaufrfIvG6EqMxog5hPfSSNyQOj2ahjvt07g=
Subject key identifier:   0D:72:B3:25:18:25:E8:8F:68:94:CB:E2:0F:C0:7C:44:F8:7A:5E:E9
Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
Certificate issuer:       /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Certificate serial:       04C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
Manifest number:          04A6
Signing time:             Sun 01 Mar 2026 01:21:30 +0000
Manifest this update:     Sun 01 Mar 2026 01:21:29 +0000
Manifest next update:     Sun 08 Mar 2026 01:21:29 +0000
Files and hashes:         1: u99YzWESke9boarLayzE7VCwEVc.crl (hash: dTPzDuSU39DRzIjiqDS98r8DKaj4r3IZcs6tf8hOVq0=)
                          2: 08241A166B1111EE99759439C4F9AE02.roa (hash: jApYfEkxqzrLpiNSHraaXIyjxev3VpmOcKrSC2HXyCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl
                          rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1216 (0x4c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D46FD, serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
        Validity
            Not Before: Mar  1 01:21:29 2026 GMT
            Not After : Mar  8 01:21:29 2026 GMT
        Subject: CN=69a39499-0439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:2c:ae:5f:95:ea:80:0f:32:eb:33:25:af:
                    60:26:2e:43:5a:cb:5e:0a:d8:15:e5:6f:db:d3:76:
                    bf:65:4d:93:b6:84:cb:6b:bc:2d:4b:78:99:14:26:
                    1f:4c:1a:a1:b2:a1:53:cf:c2:35:4b:b4:47:24:67:
                    4f:9b:43:c9:e7:a0:03:ee:2d:a0:3b:db:73:48:78:
                    35:b1:19:a8:c6:27:13:4c:3b:f2:7b:a2:2d:c1:74:
                    54:f2:6b:2d:a9:f9:07:b6:41:6d:1f:6c:38:c3:7b:
                    96:42:94:ff:1f:15:88:84:4d:76:98:37:9c:5c:fc:
                    cd:5f:79:cd:cf:3f:3d:45:1f:4b:b9:23:b0:44:10:
                    66:5c:ce:09:d8:c8:27:d1:82:43:c7:4b:c4:ce:2c:
                    da:f0:2d:7b:7f:75:fc:3a:f7:84:12:a6:7d:59:50:
                    0a:da:0e:f1:c5:74:14:a6:1b:57:15:ed:8e:cc:95:
                    fb:b8:b1:42:78:8b:97:d8:d3:98:13:5d:2b:05:df:
                    12:0a:4c:31:80:c1:6d:80:52:11:c8:77:fc:c1:a0:
                    c3:aa:2a:2e:3e:34:9f:d8:9e:04:a2:4a:b9:ed:86:
                    9e:af:03:1a:27:b8:bc:5f:2d:fc:8c:4d:8d:87:ee:
                    9e:f7:7e:ef:dc:60:20:5b:94:9c:06:7c:e3:fb:1c:
                    b0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:72:B3:25:18:25:E8:8F:68:94:CB:E2:0F:C0:7C:44:F8:7A:5E:E9
            X509v3 Authority Key Identifier:
                keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:98:38:2a:d7:77:fa:3a:49:42:27:c2:d8:c6:94:30:61:85:
         ed:ab:a9:66:4e:24:b1:2f:0f:3c:d1:12:be:90:77:8e:a1:fb:
         55:55:85:f3:3d:32:ec:dc:4a:4b:73:39:32:81:1e:73:99:ba:
         b6:ff:2f:16:41:88:8e:dc:4b:f0:31:a7:32:3e:30:6a:83:7e:
         d4:ac:c3:8a:9f:22:f6:8e:40:dc:83:79:6e:a4:ba:25:15:b5:
         1e:04:d2:9c:08:b1:50:64:e2:9d:de:9b:dd:0c:06:9f:9f:8c:
         f0:e9:63:38:2a:70:2a:01:0f:bf:d5:47:9d:74:b9:19:ef:ba:
         69:0b:75:5c:de:20:97:41:2c:0c:b4:e9:4e:c7:61:3d:ed:55:
         a8:19:62:7c:3f:f3:08:ca:aa:1b:49:4e:d7:00:3c:1d:88:0b:
         5e:cf:f9:19:a4:23:0f:af:c5:a1:59:65:ce:36:66:1d:55:30:
         2b:4b:b3:14:40:12:aa:ff:75:a1:19:10:8b:ef:6c:15:bb:0b:
         06:db:07:48:cb:a1:a3:74:7b:a4:af:6b:36:33:e2:62:f5:2c:
         44:27:28:76:85:d7:d4:af:4d:28:fc:7e:0f:2b:ad:c0:78:2b:
         f5:0e:39:30:62:0d:90:bd:6c:41:9f:e5:1a:c7:70:41:9b:68:
         5d:82:9b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:29:53 2026 by rpki-client