Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
File:                     yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json)
Hash identifier:          9R2EwmRkdVhiDWBtGtxvegapLNysZ676BKsCIPw13bw=
Subject key identifier:   0A:4B:08:BD:90:51:28:5C:A1:79:B5:30:DF:C8:9E:82:9E:BA:4D:B0
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Certificate issuer:       /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
Manifest number:          013C
Signing time:             Mon 02 Mar 2026 01:42:03 +0000
Manifest this update:     Mon 02 Mar 2026 01:42:01 +0000
Manifest next update:     Mon 09 Mar 2026 01:42:01 +0000
Files and hashes:         1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: k/ul+czyrOWAgOiqUgtjY78IoysweARMt4NBJ3gyRf0=)
                          2: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: iZo2C57Z9aeJt224wtweP1I+ZMSYFsBAndFJeCnjn1U=)
                          3: 09F2AE3EF36811F0BB995E0C666F56BC.roa (hash: 3qyXQf9X9ypzRtr6ed01ZGzQMiK+H459JYw687uWAE4=)
                          4: 09799D96F36811F0BB995E0C666F56BC.roa (hash: k3tbTsuNd/0VaZo35U6WBx+uMYBIhVnOPOnYzqjLUfs=)
                          5: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: QjR9A/HMp05od+zO3VCnyHZYpiHXbBVwXb61oJSOZeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
        Validity
            Not Before: Mar  2 01:42:01 2026 GMT
            Not After : Mar  9 01:42:01 2026 GMT
        Subject: CN=69a4eaeb-394e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:21:d0:7a:46:da:1e:2f:50:0f:60:65:9a:e5:
                    a4:b7:43:fa:58:f8:5d:10:94:72:a1:e3:ae:c0:5c:
                    09:9b:1d:c1:2c:08:fb:11:2b:ea:82:63:39:8e:51:
                    4e:bf:a3:32:35:e6:3c:14:37:d9:1c:b0:1a:80:8a:
                    cd:bc:7e:04:81:05:84:74:4d:c9:f9:87:e2:cf:5f:
                    cb:32:fd:ae:b9:01:b2:08:27:af:31:c2:56:13:b3:
                    e7:e4:43:a1:ce:fd:d4:90:ca:62:20:c7:34:a3:e6:
                    e0:fa:48:63:ef:b2:a5:eb:dc:14:e5:a6:c5:60:20:
                    6c:ce:da:ce:a7:77:75:b8:bb:7a:93:3f:27:08:22:
                    9b:52:9b:28:8d:0c:f9:1b:90:f8:41:a5:a8:8f:c0:
                    9a:5f:aa:30:dd:c2:cd:d6:0e:fe:db:cf:45:65:53:
                    bc:76:76:ba:8a:cd:10:5e:10:aa:00:17:c8:3a:93:
                    04:c0:28:ef:dd:cf:4c:40:f6:bc:c6:a8:f8:4b:d9:
                    c4:27:b5:e8:5f:52:b7:27:9c:3c:de:1c:ad:85:c2:
                    af:3a:28:53:d1:72:8e:05:e1:86:e2:21:2e:96:0c:
                    d6:3b:78:06:64:cc:0f:88:08:7c:6b:57:4b:8d:e7:
                    d2:eb:f0:ff:78:3d:3e:f1:76:25:a4:43:85:a2:15:
                    57:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4B:08:BD:90:51:28:5C:A1:79:B5:30:DF:C8:9E:82:9E:BA:4D:B0
            X509v3 Authority Key Identifier:
                keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c8:74:40:72:73:41:28:1b:b6:72:aa:d0:7c:d8:62:2d:cb:
         3f:57:49:5f:11:6e:e7:d5:94:5d:5c:89:a4:0d:31:7e:2d:39:
         9d:33:36:a9:b6:e5:b6:5a:d5:de:1c:47:4e:00:72:40:ab:21:
         c1:e1:54:5f:8e:55:3f:dd:6b:10:47:ca:06:bd:01:bb:10:8d:
         48:8b:cc:29:bb:46:4c:aa:af:21:97:a6:86:09:09:4e:f9:1f:
         68:43:63:41:8c:72:7e:b4:7f:41:be:dd:96:c7:5b:02:26:1a:
         92:df:27:a2:ec:39:cf:a2:c4:51:a8:99:67:57:6a:92:1c:3a:
         c9:bb:de:dd:f8:9f:21:0c:bc:ae:70:dc:cf:9d:22:55:6d:3a:
         3d:e3:27:40:28:3f:d2:07:8e:ad:99:b4:92:e2:96:7d:79:dc:
         4f:c5:08:31:71:8b:cc:ca:7a:d7:68:b5:1f:ba:df:80:da:7c:
         3d:92:bb:04:d9:66:44:e7:b4:e8:8f:d7:89:e6:84:b0:d1:1b:
         84:38:1d:bb:de:1e:8e:84:8d:a5:12:2c:0a:2a:53:67:5e:02:
         82:33:de:e5:b4:d3:9a:ae:37:4c:82:40:d6:15:4b:42:8b:64:
         66:5a:d7:f7:fd:22:9b:2b:9b:30:7a:26:23:54:af:35:7c:58:
         c8:26:ae:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:09 2026 by rpki-client