Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
File:                     yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json)
Hash identifier:          N9Vn9hsMDz9yhW0Vd+lmCjnCkI4uXACGFBcZeifL4/w=
Subject key identifier:   26:82:59:23:6F:40:7E:44:88:A5:9B:1C:BD:08:7F:F2:41:31:C3:64
Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05
Certificate issuer:       /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
Certificate serial:       0754
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
Manifest number:          173D
Signing time:             Mon 02 Mar 2026 01:05:55 +0000
Manifest this update:     Mon 02 Mar 2026 01:05:54 +0000
Manifest next update:     Mon 09 Mar 2026 01:05:54 +0000
Files and hashes:         1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: PsFU2wWYZE2rGQLR85+B46qR1v+Av5biUlp2JwyLe3g=)
                          2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: hwOf7SRKK2ExdUeCLcvf4HAC8wZaCK5Ulx58N9GVET8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1876 (0x754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C5F, serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
        Validity
            Not Before: Mar  2 01:05:54 2026 GMT
            Not After : Mar  9 01:05:54 2026 GMT
        Subject: CN=69a4e273-a082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ab:4f:8f:34:74:c5:cb:d3:27:06:ec:fc:36:
                    f5:c2:0a:8c:db:67:a0:8d:86:6b:56:1b:98:e9:83:
                    cb:e9:c9:94:38:dd:98:cc:11:b2:1b:13:31:7e:b4:
                    39:4b:8c:0b:f1:8d:95:3d:6a:bf:a7:ab:42:8c:4a:
                    fa:a8:8c:6d:b1:0f:32:80:f5:c4:38:e9:fb:87:af:
                    08:9e:cb:f0:bc:de:bd:40:de:f1:10:ae:67:2a:06:
                    e9:eb:95:27:3a:da:30:81:7a:75:53:7b:43:6e:e9:
                    74:8c:aa:ba:28:ef:e9:3b:ef:f4:b6:29:6c:59:ba:
                    ae:ea:fc:b1:9a:60:20:ee:af:6f:15:eb:e2:bf:d2:
                    9e:2a:11:ec:b7:06:e6:6c:5f:d7:50:70:c3:88:ad:
                    f0:98:e9:a5:c6:32:0b:33:48:a4:5b:19:3f:c2:93:
                    37:23:17:2f:d6:90:a0:c7:4a:f6:f6:28:0b:a1:37:
                    e9:7e:20:67:3e:11:c1:17:ad:ae:ad:45:9b:3f:b9:
                    81:98:18:4f:4d:72:75:ed:23:b8:7b:7b:9e:ba:eb:
                    50:21:f6:9e:9d:15:0f:40:b2:dd:9a:34:6a:6e:8a:
                    1b:1a:a8:d9:13:c6:5e:c8:a1:06:f5:da:93:19:8b:
                    d1:3e:4d:dc:c1:12:b6:1e:da:06:11:a4:f6:6c:b9:
                    cd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:82:59:23:6F:40:7E:44:88:A5:9B:1C:BD:08:7F:F2:41:31:C3:64
            X509v3 Authority Key Identifier:
                keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:9a:29:7b:38:90:a9:f9:26:91:69:3b:2c:28:5f:07:b0:2e:
         c3:3f:04:88:f8:04:35:4a:5c:c9:5e:8d:fa:bc:1e:43:c8:39:
         5f:34:3b:29:ca:cb:26:48:76:78:ba:db:1f:77:0f:08:1e:44:
         7b:b4:1a:7b:2b:7a:11:6c:61:38:8f:13:e8:67:60:4e:82:9f:
         92:82:1f:b9:94:ed:3c:cc:06:c0:a8:e8:59:6a:99:e5:71:bb:
         0b:a6:76:e7:68:68:6d:40:6b:8f:de:10:9a:90:08:bc:28:30:
         6e:df:f4:0c:6a:95:7e:21:e3:b8:16:d8:21:57:9b:95:09:b4:
         5f:4a:a6:ad:f6:45:48:7d:a3:55:1d:5d:77:3a:55:1e:f5:ac:
         06:e7:54:77:c1:61:93:4f:5e:00:e5:b8:35:33:a6:99:11:db:
         29:14:84:a4:ca:b2:74:0d:a0:54:81:e2:3e:43:9d:ac:ed:74:
         4a:3b:de:06:25:cb:d1:e6:97:31:c2:01:ff:37:f9:b7:84:a7:
         bf:21:5a:3f:3a:4d:64:17:a3:d7:19:fa:8a:52:ee:24:17:d2:
         d1:db:0c:99:e6:ac:52:5d:a9:52:bf:b8:4d:9a:49:3d:5a:36:
         f9:9f:9a:ab:c1:21:2f:44:5a:41:9e:d1:c2:8f:d7:61:6b:e0:
         52:4d:c8:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBDNUYxMTAvBgNVBAUTKEM5OTA1REU1MjQ4NkI5RUM0RUY4NzlBMDI2NDQ1Qzcw
QjBGRDk1MDUwHhcNMjYwMzAyMDEwNTU0WhcNMjYwMzA5MDEwNTU0WjAYMRYwFAYD
VQQDEw02OWE0ZTI3My1hMDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApKtPjzR0xcvTJwbs/Db1wgqM22egjYZrVhuY6YPL6cmUON2YzBGyGxMxfrQ5
S4wL8Y2VPWq/p6tCjEr6qIxtsQ8ygPXEOOn7h68InsvwvN69QN7xEK5nKgbp65Un
OtowgXp1U3tDbul0jKq6KO/pO+/0tilsWbqu6vyxmmAg7q9vFeviv9KeKhHstwbm
bF/XUHDDiK3wmOmlxjILM0ikWxk/wpM3Ixcv1pCgx0r29igLoTfpfiBnPhHBF62u
rUWbP7mBmBhPTXJ17SO4e3ueuutQIfaenRUPQLLdmjRqboobGqjZE8ZeyKEG9dqT
GYvRPk3cwRK2HtoGEaT2bLnNfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCaCWSNv
QH5EiKWbHL0If/JBMcNkMB8GA1UdIwQYMBaAFMmQXeUkhrnsTvh5oCZEXHCw/ZUF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEM1Ri84QjU0N0E3MjY2
NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3VleE8tSG1nSmtSY2NMRDls
UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3laQmQ1U1NHdWV4Ty1IbWdKa1JjY0xEOWxRVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEM1Ri84QjU0N0E3MjY2NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3Vl
eE8tSG1nSmtSY2NMRDlsUVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANJopeziQqfkmkWk7LChfB7Auwz8EiPgENUpcyV6N+rweQ8g5XzQ7KcrLJkh2
eLrbH3cPCB5Ee7Qaeyt6EWxhOI8T6GdgToKfkoIfuZTtPMwGwKjoWWqZ5XG7C6Z2
52hobUBrj94QmpAIvCgwbt/0DGqVfiHjuBbYIVeblQm0X0qmrfZFSH2jVR1ddzpV
HvWsBudUd8Fhk09eAOW4NTOmmRHbKRSEpMqydA2gVIHiPkOdrO10SjveBiXL0eaX
McIB/zf5t4SnvyFaPzpNZBej1xn6ilLuJBfS0dsMmeasUl2pUr+4TZpJPVo2+Z+a
q8EhL0RaQZ7Rwo/XYWvgUk3ILQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:01 2026 by rpki-client