Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
File:                     yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json)
Hash identifier:          PpzU8Itglr5sDiVsQ32Y/0yip+IfW4LVLelShyZiw+A=
Subject key identifier:   88:50:22:BD:4D:7C:2B:50:90:C4:90:E5:23:50:6A:57:27:F4:66:99
Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44
Certificate issuer:       /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644
Certificate serial:       0AF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
Manifest number:          1264
Signing time:             Sun 01 Mar 2026 23:29:41 +0000
Manifest this update:     Sun 01 Mar 2026 23:29:39 +0000
Manifest next update:     Sun 08 Mar 2026 23:29:39 +0000
Files and hashes:         1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: Wa02Xk0XfEgRG7dh8KvX26uj3FS2bDZjSUaevYZdfEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2801 (0xaf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644
        Validity
            Not Before: Mar  1 23:29:39 2026 GMT
            Not After : Mar  8 23:29:39 2026 GMT
        Subject: CN=69a4cbe5-c566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:8a:ba:59:6e:99:d1:0e:e1:1f:30:2a:c9:
                    c8:f2:f4:8a:da:96:1a:59:2a:5f:e8:b0:8b:76:95:
                    d7:81:a9:d7:a4:b9:cb:1d:5c:86:bc:1c:4c:f4:8e:
                    dd:42:da:87:87:ff:5c:88:a9:2d:5e:27:b6:d3:00:
                    98:bb:1b:5b:f1:ae:3b:da:67:59:e7:36:23:a2:13:
                    22:fb:3f:7b:a9:8b:11:33:29:e5:87:ba:78:85:d2:
                    77:a1:5c:f0:f2:bc:f0:2a:48:58:ff:90:79:9b:7b:
                    6d:72:5e:1a:d7:0b:bc:68:09:dd:04:fc:9e:d4:01:
                    52:38:64:03:eb:3c:e4:70:40:ef:77:75:14:f3:92:
                    aa:76:4a:47:9d:07:43:00:4e:5f:7d:81:61:e5:da:
                    ba:c9:21:31:35:20:32:71:83:56:0d:38:ca:61:8f:
                    37:95:3d:25:16:48:c5:65:36:ee:c7:3c:e3:d0:73:
                    b2:f5:cb:41:20:f5:81:86:03:28:fb:3d:f2:99:6d:
                    06:3b:01:49:7c:41:c9:9f:92:23:62:78:7b:17:de:
                    3b:86:85:fc:62:45:1d:d2:1f:43:b6:1a:c2:87:7a:
                    30:b0:b1:9f:61:fe:f9:5d:04:e1:29:3a:3b:a6:93:
                    d4:07:1d:5b:2b:e5:7d:12:ea:37:cb:7d:38:78:32:
                    58:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:50:22:BD:4D:7C:2B:50:90:C4:90:E5:23:50:6A:57:27:F4:66:99
            X509v3 Authority Key Identifier:
                keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:8a:3b:d6:87:13:7b:f1:a1:41:5f:81:e1:7d:8a:9e:ef:9a:
         b2:1e:94:3e:ab:ea:fb:0f:bf:be:9f:de:82:65:24:e3:2b:e9:
         e0:09:55:28:0c:1c:18:9c:32:b7:67:d6:00:f8:a7:10:50:6c:
         d5:ef:b7:08:d6:2d:17:f5:63:e7:9c:6c:df:23:41:99:20:2c:
         26:42:3e:20:cd:f6:82:51:cb:7c:27:55:d8:2c:e4:54:b2:90:
         da:72:1c:db:65:e5:af:61:7f:ed:16:77:69:93:96:c5:c5:14:
         77:7d:12:10:7e:7b:a2:85:8c:4f:8e:15:7a:82:58:05:51:0a:
         e1:9e:83:12:4c:85:65:55:03:92:a9:48:8f:bd:79:fc:8a:d6:
         d4:27:76:b2:9a:cd:51:78:47:3d:f0:b6:eb:c7:77:a4:56:5a:
         f3:57:27:27:84:c6:47:b3:6e:dc:06:67:4b:92:17:04:b2:fb:
         6f:7e:eb:1b:27:41:7a:d8:0a:e7:be:19:9c:c3:75:b2:37:19:
         85:b2:88:04:75:73:6f:f1:db:34:dd:57:ed:0c:e4:30:0c:cd:
         6f:d8:be:3a:d7:4f:04:6d:47:5e:29:3d:1c:c7:fb:07:61:1f:
         5f:a5:a8:ac:64:20:8f:55:3d:d1:d6:9b:83:00:88:78:36:97:
         ba:7b:51:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:36 2026 by rpki-client