Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
File:                     Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json)
Hash identifier:          h23H17lpTktWUbr/IRTZGtWJ3Hcs/KhurDJ3iyNjrHo=
Subject key identifier:   F4:9F:8B:8C:0F:9C:8E:35:65:D2:8B:1D:91:B3:AE:87:74:7C:7D:99
Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
Certificate issuer:       /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Certificate serial:       0E8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
Manifest number:          0E85
Signing time:             Mon 02 Mar 2026 02:22:48 +0000
Manifest this update:     Mon 02 Mar 2026 02:22:46 +0000
Manifest next update:     Mon 09 Mar 2026 02:22:46 +0000
Files and hashes:         1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: H4ZCPYib8gvZILtt7qu15Z/5YqyxHtDED8OCpWz/N9U=)
                          2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: AKm1JqCczG2DSLc1nVeyEHprQmVWftF9AF7IXyfGtOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
                          rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3726 (0xe8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
        Validity
            Not Before: Mar  2 02:22:46 2026 GMT
            Not After : Mar  9 02:22:46 2026 GMT
        Subject: CN=69a4f477-cf8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:dd:0d:08:5c:c4:b1:7e:e8:ac:c7:52:cb:
                    a9:fe:bf:8c:c3:b1:cb:be:f4:0f:89:c8:49:2c:db:
                    03:cb:97:7c:00:ed:0d:2e:20:e2:b7:87:2d:4a:ad:
                    a9:ff:dd:b6:be:48:b2:85:be:2e:d2:72:c1:49:03:
                    ae:b2:60:1b:1d:1e:57:bb:37:e9:91:3b:99:13:eb:
                    9e:ad:78:03:de:d6:34:d8:64:80:91:c7:f3:f8:51:
                    c4:dd:62:e1:0e:53:c0:5d:81:07:0b:64:0f:ee:58:
                    56:36:f5:86:64:81:e5:66:59:f6:a0:ee:1f:8f:30:
                    6d:31:a7:63:9d:58:96:40:c8:87:04:cf:17:77:28:
                    49:5c:5e:1f:f5:37:7b:7a:75:ea:7e:00:56:37:84:
                    57:d2:74:17:21:e3:bb:e6:80:b5:b8:f4:4c:86:82:
                    9a:63:0c:5e:26:76:a9:5b:17:37:52:fc:74:3e:49:
                    96:80:2e:0b:79:ad:6a:1e:05:2d:26:44:3d:be:b6:
                    63:7b:6c:50:5f:90:cf:b9:9b:73:7e:4f:c2:d3:6c:
                    64:f2:8d:cd:86:4d:a4:94:49:26:5e:e0:f3:ed:2b:
                    d3:8a:21:eb:d2:89:35:4c:90:31:63:f6:13:5e:12:
                    27:ed:79:c7:a7:ec:d4:4c:99:de:7f:c6:46:e3:f7:
                    f6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9F:8B:8C:0F:9C:8E:35:65:D2:8B:1D:91:B3:AE:87:74:7C:7D:99
            X509v3 Authority Key Identifier:
                keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:36:5c:3b:d0:46:62:77:33:f7:25:e4:32:96:fd:4c:13:e8:
         bd:d8:5d:30:9e:16:a0:85:3d:23:55:d5:e4:61:a5:bd:ca:c7:
         82:cb:04:5e:fe:39:1b:04:08:eb:ce:8a:8a:89:b5:50:05:d7:
         3d:2e:ad:1e:ea:d9:08:de:f6:6e:bd:c4:b6:57:1d:a6:a1:1f:
         59:21:ff:23:fb:c1:6a:25:67:c1:1e:fb:d5:5a:9d:1b:0a:3a:
         22:12:cf:52:27:ec:1f:7d:e1:28:7a:3c:1e:b2:62:c0:e1:b5:
         ff:6e:a3:8e:79:94:1e:f6:a7:51:5c:50:75:de:63:97:1e:7f:
         56:c0:1c:2b:cf:3a:22:82:2c:35:38:be:d7:b4:a9:90:9e:26:
         a8:96:2e:35:08:a2:a9:08:52:30:a3:92:8f:86:6c:40:7b:10:
         dd:7d:34:81:bd:4c:73:85:49:4d:10:9a:05:ec:b8:41:d0:bf:
         d1:32:22:71:1f:94:bb:fc:35:08:a3:e3:8c:6e:dc:75:4e:cf:
         b2:26:05:5a:65:b2:8a:bc:2d:ea:5b:7e:3e:bd:0d:74:bb:49:
         90:40:c1:32:4f:9c:91:a4:e6:d0:d8:a7:34:06:10:d7:d1:8a:
         e0:17:de:ca:e3:ab:58:4c:f1:0a:95:d2:fa:84:74:f9:78:d2:
         7f:93:7e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:22 2026 by rpki-client