Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
File:                     yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json)
Hash identifier:          z2dhNde5b45Ts+bSPqA/qObtUmbKepcVI3g55MAzRuA=
Subject key identifier:   29:9B:82:EF:BE:4D:A1:F4:7B:30:9C:22:0E:0A:F2:5D:87:C3:16:3E
Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05
Certificate issuer:       /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
Certificate serial:       0755
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
Manifest number:          173F
Signing time:             Mon 02 Mar 2026 17:27:35 +0000
Manifest this update:     Mon 02 Mar 2026 17:27:35 +0000
Manifest next update:     Mon 09 Mar 2026 17:27:35 +0000
Files and hashes:         1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: bg30TUOEvH0I273hYUoJ28BZsq6vmL0VzN/ID+Hta5A=)
                          2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: hwOf7SRKK2ExdUeCLcvf4HAC8wZaCK5Ulx58N9GVET8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 17:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1877 (0x755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C5F, serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
        Validity
            Not Before: Mar  2 17:27:35 2026 GMT
            Not After : Mar  9 17:27:35 2026 GMT
        Subject: CN=69a5c887-2c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:a9:65:de:99:fa:40:46:1c:1e:f4:4a:6e:
                    0d:24:31:3b:db:e6:0c:33:bd:4f:e3:f7:7a:6b:4e:
                    66:1a:e7:e6:12:31:ef:2f:60:da:66:26:e7:d8:8a:
                    be:ab:16:18:d2:b7:45:ba:c3:e7:6c:ec:8e:80:c6:
                    eb:73:11:9c:a2:00:ed:4f:c5:99:14:18:bb:dc:df:
                    8a:f3:29:09:f4:4d:91:fe:85:37:0d:82:44:f0:7e:
                    9a:3b:4c:48:d8:4f:91:b4:ef:fe:15:87:e0:03:58:
                    04:8f:42:bf:82:01:65:da:64:8c:f9:4c:e5:30:6e:
                    2b:a9:20:27:74:77:2f:a1:9a:c8:a4:42:4c:b8:bb:
                    2b:6a:22:19:71:6e:02:ef:3e:33:93:e8:91:e5:00:
                    20:e9:7f:c0:8b:ba:14:c9:7a:1f:3d:ec:c8:8d:8a:
                    37:a4:14:04:8f:f7:2d:1c:16:c1:44:04:21:98:07:
                    23:04:f0:ef:68:51:b1:61:0c:63:1a:1a:13:a9:7c:
                    63:89:d0:b1:74:54:42:fe:fb:63:f1:05:0e:9e:09:
                    6b:89:c2:7f:7d:e9:44:ea:9a:52:c6:d7:c9:21:f5:
                    ab:bf:e0:ad:4c:b9:33:7d:d6:23:29:34:89:74:3a:
                    e4:25:d4:24:80:aa:bc:ac:71:1b:73:af:60:d5:25:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9B:82:EF:BE:4D:A1:F4:7B:30:9C:22:0E:0A:F2:5D:87:C3:16:3E
            X509v3 Authority Key Identifier:
                keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:30:d3:40:e9:75:aa:c4:d4:38:7c:41:a3:7c:e3:8a:33:0f:
         96:10:e2:1f:0f:9c:36:85:5d:a5:b9:d1:e6:b1:58:e6:fd:07:
         3c:d7:48:bb:bb:2c:eb:c7:66:2b:e6:36:2b:a2:51:23:b6:b1:
         85:b3:eb:35:6a:c3:12:03:7f:5c:7a:ce:58:cc:cf:8e:60:2c:
         e8:27:79:ef:a0:36:b6:94:0e:ca:b0:93:23:02:ac:db:77:e6:
         c2:03:20:ee:04:97:d9:ac:f5:cb:cc:16:10:bc:46:75:74:65:
         38:b7:5a:24:8e:9e:15:d2:8b:8d:c2:59:2d:6f:75:4c:8f:0e:
         f1:7d:8b:4e:2f:50:3e:50:dd:2d:f9:2c:6f:29:c1:20:a5:0c:
         46:d8:df:ce:16:02:6c:6b:c4:1f:17:55:25:83:8d:66:c8:4e:
         33:55:40:3e:61:ee:4a:bd:17:e3:a6:85:96:a4:28:ca:94:5c:
         71:90:15:0a:08:55:6f:e8:62:b0:b1:5e:25:2c:49:8e:34:bf:
         e8:32:51:d2:86:5f:1d:e4:08:7f:53:1b:9f:cd:f8:a4:e9:69:
         4b:c7:3a:70:55:54:12:b3:bf:59:0e:60:e8:50:ad:3e:62:31:
         a0:33:06:43:66:9e:24:aa:cc:9a:06:96:86:fa:56:4e:e7:39:
         60:3b:b0:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBDNUYxMTAvBgNVBAUTKEM5OTA1REU1MjQ4NkI5RUM0RUY4NzlBMDI2NDQ1Qzcw
QjBGRDk1MDUwHhcNMjYwMzAyMTcyNzM1WhcNMjYwMzA5MTcyNzM1WjAYMRYwFAYD
VQQDEw02OWE1Yzg4Ny0yYzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApjKpZd6Z+kBGHB70Sm4NJDE72+YMM71P4/d6a05mGufmEjHvL2DaZibn2Iq+
qxYY0rdFusPnbOyOgMbrcxGcogDtT8WZFBi73N+K8ykJ9E2R/oU3DYJE8H6aO0xI
2E+RtO/+FYfgA1gEj0K/ggFl2mSM+UzlMG4rqSAndHcvoZrIpEJMuLsraiIZcW4C
7z4zk+iR5QAg6X/Ai7oUyXofPezIjYo3pBQEj/ctHBbBRAQhmAcjBPDvaFGxYQxj
GhoTqXxjidCxdFRC/vtj8QUOnglricJ/felE6ppSxtfJIfWrv+CtTLkzfdYjKTSJ
dDrkJdQkgKq8rHEbc69g1SVyeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmbgu++
TaH0ezCcIg4K8l2HwxY+MB8GA1UdIwQYMBaAFMmQXeUkhrnsTvh5oCZEXHCw/ZUF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEM1Ri84QjU0N0E3MjY2
NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3VleE8tSG1nSmtSY2NMRDls
UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3laQmQ1U1NHdWV4Ty1IbWdKa1JjY0xEOWxRVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEM1Ri84QjU0N0E3MjY2NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3Vl
eE8tSG1nSmtSY2NMRDlsUVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAITDTQOl1qsTUOHxBo3zjijMPlhDiHw+cNoVdpbnR5rFY5v0HPNdIu7ss68dm
K+Y2K6JRI7axhbPrNWrDEgN/XHrOWMzPjmAs6Cd576A2tpQOyrCTIwKs23fmwgMg
7gSX2az1y8wWELxGdXRlOLdaJI6eFdKLjcJZLW91TI8O8X2LTi9QPlDdLfksbynB
IKUMRtjfzhYCbGvEHxdVJYONZshOM1VAPmHuSr0X46aFlqQoypRccZAVCghVb+hi
sLFeJSxJjjS/6DJR0oZfHeQIf1Mbn834pOlpS8c6cFVUErO/WQ5g6FCtPmIxoDMG
Q2aeJKrMmgaWhvpWTuc5YDuwbA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:15:06 2026 by rpki-client