Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
File:                     2Y9v2wB__4PhEwj61Voer6g4dM4.mft (raw, json)
Hash identifier:          YKF8VIH2CJ30aeSsWrybwLPM0K/cjFtY853+UOo8C20=
Subject key identifier:   E7:65:3B:00:A1:CB:DA:7A:AA:E4:C2:99:BB:D1:5D:02:EE:F9:35:7D
Authority key identifier: D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
Certificate issuer:       /CN=A91D8601/serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
Manifest number:          18
Signing time:             Sun 01 Mar 2026 10:28:08 +0000
Manifest this update:     Sun 01 Mar 2026 10:28:06 +0000
Manifest next update:     Sun 08 Mar 2026 10:28:06 +0000
Files and hashes:         1: 2Y9v2wB__4PhEwj61Voer6g4dM4.crl (hash: G971KuiKTaI9dUKrJpDs/x6lwZZQuf+/4ZHpVfX6rfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
                          rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8601, serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
        Validity
            Not Before: Mar  1 10:28:06 2026 GMT
            Not After : Mar  8 10:28:06 2026 GMT
        Subject: CN=69a414b7-ea0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:f9:dd:06:14:88:30:b4:ea:1e:3a:a1:d3:
                    1a:64:4a:d7:93:f8:c8:a5:2d:dd:ca:a6:bf:26:73:
                    01:5d:e8:49:0e:5d:bd:3c:2a:75:dc:1d:83:04:de:
                    4c:ec:eb:a0:93:44:08:f9:50:71:8e:6d:b0:4f:bc:
                    4b:e9:6f:c8:87:12:70:4d:15:34:40:83:be:b2:a8:
                    eb:b4:a0:44:0a:c2:a7:83:eb:26:9a:da:10:3c:28:
                    d4:c1:0d:52:7f:79:ab:de:28:25:2b:89:e2:04:c9:
                    95:d9:4b:7d:16:8b:28:37:c5:26:92:11:94:af:ae:
                    a2:5c:ac:9f:69:80:4b:fa:57:ad:fe:33:bb:f6:8f:
                    0f:89:56:f8:2f:1b:a6:aa:ca:c3:68:60:82:0f:de:
                    86:5c:14:64:7c:6a:56:0c:b1:1c:1d:e5:56:a6:67:
                    3d:a6:78:8f:79:d8:bf:c8:ab:9a:7f:c4:be:92:d8:
                    31:45:db:f2:e3:5a:77:10:aa:5e:36:95:ee:fa:93:
                    7c:7d:55:d6:fb:4e:23:d0:ed:c4:04:20:47:79:eb:
                    38:60:56:94:fd:c3:d6:f8:64:b5:c5:28:ef:0d:22:
                    ed:fd:3b:d4:fe:12:b7:8e:56:97:6e:64:30:4e:0b:
                    5f:ff:90:25:7b:b6:87:5a:57:fe:09:08:d4:84:da:
                    c7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:65:3B:00:A1:CB:DA:7A:AA:E4:C2:99:BB:D1:5D:02:EE:F9:35:7D
            X509v3 Authority Key Identifier:
                keyid:D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f0:43:70:99:be:b8:ad:0a:32:30:c8:51:97:56:51:17:d5:
         4b:70:b7:fe:cd:6c:2e:e5:14:5e:73:64:e0:59:9a:48:27:ad:
         e2:0a:57:43:e1:c1:1a:3c:f5:4e:17:1e:85:e0:81:6d:2b:33:
         8f:65:2a:ac:c5:11:3b:81:11:7d:b8:76:3b:b4:92:65:bc:de:
         69:e5:5d:5b:dd:1b:d3:d3:1d:35:6d:54:09:dc:37:2a:87:19:
         14:32:c0:15:b0:c3:d5:ae:ba:08:d8:d2:d6:ff:2e:c8:bf:3a:
         ce:ce:10:69:59:54:6e:d8:9f:a3:ad:d2:09:54:49:eb:08:14:
         23:4a:26:95:ac:18:82:19:af:31:b8:df:bb:f2:bb:1a:84:13:
         57:10:25:aa:57:ff:a2:33:67:28:80:24:d0:71:b4:82:88:45:
         d0:7f:9d:a8:98:a1:31:ad:f0:13:c7:17:bf:3f:16:8a:20:8f:
         ce:8b:c2:1a:5c:79:3a:78:e6:8c:ce:7f:b6:64:03:ea:b8:d7:
         3f:3d:13:7a:68:4a:7d:33:63:37:9f:d7:23:dd:08:62:d3:c5:
         d2:b1:d4:e4:43:b0:99:1a:ff:cb:85:06:8a:23:3e:d8:9a:f2:
         16:12:5b:01:7c:55:ee:8d:0d:d3:b8:8a:04:1e:e4:3f:63:18:
         d6:d5:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:37:51 2026 by rpki-client