Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
File:                     YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft (raw, json)
Hash identifier:          PLEuAUOhiOuMJHsFEzur+7uUJfgUBLNxaM/yq0mfkGI=
Subject key identifier:   D1:6D:A9:A7:C4:1C:58:AC:9F:F2:DD:4C:C1:F8:6C:5F:5C:B6:8E:88
Authority key identifier: 60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D
Certificate issuer:       /CN=A91FC01A/serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D
Certificate serial:       03A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
Manifest number:          03A0
Signing time:             Sun 01 Mar 2026 01:36:00 +0000
Manifest this update:     Sun 01 Mar 2026 01:36:00 +0000
Manifest next update:     Sun 08 Mar 2026 01:36:00 +0000
Files and hashes:         1: YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl (hash: zEoZpXCaLdE5BVN0EbMBGFGgUds6c20tPO5ST5MkGto=)
                          2: 426D5CEAD12111ECBBAC1B7DC4F9AE02.roa (hash: MfmWivPKSaiC6+cXAfiuCrZ3V4kipieIUewchk+y7l0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:35:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933 (0x3a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC01A, serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D
        Validity
            Not Before: Mar  1 01:36:00 2026 GMT
            Not After : Mar  8 01:36:00 2026 GMT
        Subject: CN=69a39800-4245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f1:f6:7b:46:d7:65:14:10:40:50:fe:a9:92:
                    da:a2:eb:85:f9:85:59:56:bc:9c:97:91:50:95:c5:
                    ca:94:23:27:8d:ed:50:f6:5b:35:e6:dc:c8:8c:46:
                    54:9e:9a:d9:19:23:5f:b3:56:28:d1:19:bd:37:34:
                    e3:29:80:31:a2:b3:fc:dc:e2:51:65:d7:1f:b1:80:
                    3e:73:20:c3:69:be:b5:36:cf:5b:a4:9b:74:cc:ea:
                    13:9e:9b:68:70:61:15:e8:6e:7b:a2:fc:b9:fa:c6:
                    1e:b4:c8:b7:bf:77:55:32:13:94:7d:f1:a6:0b:f4:
                    2d:e6:35:f1:79:10:e4:41:48:24:2a:7a:d2:37:3f:
                    54:63:fa:e3:bf:12:0e:bd:94:65:dd:f9:91:fb:36:
                    57:cd:b6:5c:5d:7c:ab:d3:bb:6e:1f:c6:13:88:99:
                    9c:51:16:39:52:46:a8:dc:94:1f:62:6e:ef:97:8f:
                    d5:ec:73:ee:20:ff:c0:56:40:e8:ab:ee:c6:1d:6d:
                    24:b0:15:d3:a8:47:99:52:5a:32:ed:a4:28:49:a0:
                    1f:5d:0a:3f:8f:da:50:89:7d:c2:d0:77:04:9a:93:
                    21:56:ae:38:24:dd:d0:95:dc:11:1c:7c:ab:04:4c:
                    bf:f9:4d:06:84:f0:bf:27:69:93:15:cf:ba:f8:70:
                    c2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6D:A9:A7:C4:1C:58:AC:9F:F2:DD:4C:C1:F8:6C:5F:5C:B6:8E:88
            X509v3 Authority Key Identifier:
                keyid:60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:70:8f:92:b8:e1:67:a1:7b:53:83:94:90:f5:a0:52:d1:f9:
         08:53:bc:da:3c:c6:56:db:0e:23:44:bc:f1:5f:1b:ec:84:13:
         11:ff:07:2a:25:c6:10:ae:ea:33:84:57:aa:aa:d6:56:d8:73:
         4c:3a:70:f6:10:c8:78:95:d3:08:5e:ba:ca:38:1c:35:0d:b4:
         fd:5e:57:15:17:79:f8:09:ef:fb:b5:2d:97:c3:7c:66:1f:5c:
         28:63:1f:26:4d:6b:26:b0:a1:2a:9e:39:dc:ab:28:0a:51:eb:
         f0:d8:bf:ea:66:88:f7:3b:51:9e:37:6c:1c:12:3b:f7:ce:ea:
         2d:c5:21:74:0b:a8:55:83:c9:13:af:a3:19:41:17:0e:76:18:
         d0:b0:d9:e7:7b:f0:56:c7:5d:4f:7d:7c:c8:b3:aa:8f:14:68:
         5b:9d:ed:26:26:96:8c:81:0e:87:61:80:a1:95:20:e0:f3:36:
         4f:23:8a:69:01:c7:d3:76:7a:7b:c8:82:c6:2e:ec:32:d6:2b:
         9b:f6:38:06:de:5e:e3:60:e2:60:4c:7a:51:8a:5a:4e:80:6c:
         8f:aa:49:21:c6:1f:7d:0e:d6:0c:ed:24:d2:d9:58:01:59:94:
         82:d9:34:95:01:c9:47:c5:da:ce:96:8b:57:72:cc:79:c0:8b:
         31:bd:d0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:22:57 2026 by rpki-client