Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
File:                     yq3LrMUbKkZS3XMHTygsM00BAnc.mft (raw, json)
Hash identifier:          LBpB38r47T3PRRghmuTTXzI820H6YIQ0N8ZGmUtxEOs=
Subject key identifier:   FD:AE:E0:12:D5:84:31:89:BF:5C:EF:7E:D6:FA:1F:D1:0D:E3:FF:6E
Authority key identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
Certificate issuer:       /CN=A91DCCB3/serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Certificate serial:       0A2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
Manifest number:          0A28
Signing time:             Sat 28 Feb 2026 20:00:24 +0000
Manifest this update:     Sat 28 Feb 2026 20:00:23 +0000
Manifest next update:     Sat 07 Mar 2026 20:00:23 +0000
Files and hashes:         1: yq3LrMUbKkZS3XMHTygsM00BAnc.crl (hash: 7xYL5+JDNSEHi+t0hvZlt9f/vXSu2yCIbIeYWA2yUBQ=)
                          2: 57EE11D0895D11EA81B43245C4F9AE02.roa (hash: 2eavA5MnM8j9MsEorxYmL8jVbA9inLFPJYXoSo6cKDw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
                          rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2607 (0xa2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCCB3, serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
        Validity
            Not Before: Feb 28 20:00:23 2026 GMT
            Not After : Mar  7 20:00:23 2026 GMT
        Subject: CN=69a34958-352c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f0:ad:2c:50:bd:08:32:8f:b5:90:2e:52:62:
                    92:5a:fd:02:f1:28:c5:ca:5d:75:04:da:b5:28:ed:
                    1e:7e:15:d2:50:82:26:1e:aa:5d:a8:5f:89:e3:5b:
                    b4:44:77:6b:1a:25:77:e1:4e:87:35:98:64:34:8d:
                    78:34:7e:8e:a9:38:dc:62:6b:9c:d7:57:5f:7b:f5:
                    30:50:70:20:ec:f8:84:f1:5e:62:2c:9e:16:be:93:
                    4a:09:1c:5d:24:84:95:5d:13:35:a6:d0:e6:12:3e:
                    40:f6:94:57:e3:7d:b6:4c:31:07:16:cb:72:f1:c3:
                    8d:68:c2:03:4a:4b:d9:cd:1c:59:be:4f:ec:3d:14:
                    1e:bb:95:a5:d3:22:21:d1:4d:3a:55:e4:df:5f:fb:
                    fa:1b:a9:ca:ce:e6:07:03:62:54:57:94:bd:63:4c:
                    f4:1b:ee:68:bd:ae:8b:08:c3:05:f1:8e:f7:0b:ec:
                    ed:21:2c:af:16:39:14:51:24:26:68:41:72:81:50:
                    95:66:21:e5:5a:b1:18:9e:52:06:a1:7a:b9:3e:2f:
                    0b:a0:d0:0c:05:9b:e9:63:0d:2f:f0:95:88:b7:82:
                    79:a6:c1:98:65:6c:e5:24:30:47:be:02:8a:37:7f:
                    47:43:e6:1b:9a:51:12:e3:f1:6a:39:58:ff:c7:a2:
                    68:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AE:E0:12:D5:84:31:89:BF:5C:EF:7E:D6:FA:1F:D1:0D:E3:FF:6E
            X509v3 Authority Key Identifier:
                keyid:CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d3:eb:85:1a:d9:dd:6c:6a:de:47:39:a0:73:0a:9e:a5:46:
         8b:7e:76:8d:59:1c:85:54:19:53:9f:ba:42:2d:c7:97:eb:80:
         f0:32:ad:0c:33:f2:65:00:c4:47:6a:f7:a0:17:57:42:77:b7:
         7b:72:39:20:2a:d7:c8:c1:f2:11:6a:c5:f9:68:0f:5d:8d:0b:
         6b:ab:12:e7:82:78:88:1d:29:d5:94:40:ac:8f:34:3f:02:11:
         dc:8e:a5:2d:d6:a3:46:79:81:01:4c:ce:18:83:cb:df:c2:7e:
         d1:fa:6d:88:a2:c3:04:cd:a0:40:d5:7b:b5:a4:55:92:03:7b:
         2a:42:00:26:66:b2:b1:c8:f6:7a:9c:30:e7:fc:65:37:97:29:
         73:83:19:2d:a2:17:e0:c9:2d:5b:25:32:d5:27:6e:75:5a:78:
         16:54:31:8d:af:0b:61:af:e9:61:2f:78:0c:fb:ae:a5:43:58:
         f4:a4:ce:e7:32:83:b0:f1:cf:7f:c8:0e:0f:c8:7c:a8:7f:ce:
         bd:c3:7e:fb:76:67:c8:aa:b1:14:9b:53:f6:9f:a5:0d:69:99:
         cc:b3:f7:a1:f7:cc:08:c9:5e:09:40:bd:8f:3e:53:4e:8d:96:
         8f:8c:2e:74:47:9c:75:83:2b:66:c9:c2:9c:12:9b:4f:32:ff:
         8e:20:f6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:39 2026 by rpki-client