Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
File:                     03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json)
Hash identifier:          BbZic64gL++hZ5crAshurpYI7+lpTnGQVcqFaDx3lh4=
Subject key identifier:   7B:BA:02:33:6D:05:2A:07:B0:68:C2:D8:F1:EF:52:A6:C7:66:76:88
Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B
Certificate issuer:       /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
Certificate serial:       0569
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
Manifest number:          055E
Signing time:             Sat 04 Apr 2026 23:11:06 +0000
Manifest this update:     Sat 04 Apr 2026 23:11:06 +0000
Manifest next update:     Sat 11 Apr 2026 23:11:06 +0000
Files and hashes:         1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: G0OCJSFoH8uWzj8hlq60DkmAtLFbLPGgcVys0/oTN+E=)
                          2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: ekGdq5XwvQSiFAECeI1yOoTTSMBYmajgvzc3Dt6ibs8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl
                          rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1385 (0x569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153C50, serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
        Validity
            Not Before: Apr  4 23:11:06 2026 GMT
            Not After : Apr 11 23:11:06 2026 GMT
        Subject: CN=69d19a8a-e16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:b1:38:33:a4:4c:61:80:17:7f:5d:a1:e8:
                    90:cc:9c:01:2c:bf:ae:e0:dc:97:8f:4d:fa:10:0f:
                    84:3a:a8:f5:65:54:12:f6:80:11:a9:9b:e5:c3:19:
                    a6:f4:97:35:5c:b0:90:81:d5:2a:d6:39:d9:e3:46:
                    2d:c1:dc:d3:7b:b0:e5:3f:f1:13:6b:03:11:40:d5:
                    3b:2e:db:fd:3d:9f:f2:bd:af:fe:1a:fd:75:a2:7f:
                    43:a8:ab:d8:42:45:a5:5d:36:33:fe:d1:13:c7:5c:
                    bc:92:6e:f9:80:28:82:2d:f4:f6:48:35:3a:89:f1:
                    dd:71:89:2d:d5:f1:49:b7:b6:f0:00:79:32:2e:c4:
                    a6:87:5b:fc:0a:cd:8b:d7:f6:f1:fd:62:a6:45:90:
                    d9:3d:5a:45:f4:97:f0:32:d0:cf:38:ea:8d:f2:e5:
                    86:89:4f:51:bd:31:2d:45:5e:6f:92:32:b6:43:e3:
                    a1:fc:fb:64:bf:04:79:50:1f:db:49:2a:72:03:04:
                    1a:b0:56:5f:3f:b4:a9:59:e8:ce:c2:b2:2e:5d:32:
                    d7:a6:b5:ed:6e:45:86:bb:6d:cc:b6:02:23:b6:53:
                    5c:40:75:28:94:b0:79:60:37:92:de:57:ce:55:d3:
                    0a:fe:35:e6:b9:7b:66:58:1d:97:c4:dc:3a:d2:7a:
                    e7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BA:02:33:6D:05:2A:07:B0:68:C2:D8:F1:EF:52:A6:C7:66:76:88
            X509v3 Authority Key Identifier:
                keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4b:7b:73:5e:ff:f0:e3:75:43:c7:68:44:24:07:ae:69:1f:
         d1:36:56:9e:c7:09:74:66:12:0f:1b:0b:62:b7:31:59:8b:bd:
         eb:81:01:4b:58:1d:93:87:42:33:fc:7c:68:63:d5:e3:4e:5b:
         72:b5:6c:d9:3c:cc:a8:f8:36:cf:a7:b2:57:37:c6:1d:64:1c:
         36:73:b4:90:8f:b5:9a:69:37:b4:85:02:66:16:0c:f4:39:61:
         e6:ce:fe:c1:cc:d8:bf:5d:98:ea:1f:fd:fa:d0:a1:c3:d0:97:
         73:b5:c4:94:bf:79:7b:e7:b0:bb:7b:19:6b:84:f3:85:6d:76:
         4b:5d:57:e5:3d:d4:90:a2:5b:eb:c0:3e:65:0b:86:4a:06:75:
         61:a8:1e:4f:c0:08:26:3e:07:93:94:3c:e5:5c:96:c6:4d:c3:
         ae:82:fa:99:db:95:25:3f:e4:4f:96:88:49:fe:0a:8a:27:c3:
         ff:a0:cd:3d:bd:83:b9:c6:48:9c:17:7e:5a:5c:34:7d:e5:8c:
         6c:bb:ac:0b:68:81:4e:7a:59:8d:70:63:f8:7b:a6:52:b6:09:
         b1:87:70:c9:b6:e6:fb:86:8a:a0:a9:08:69:e9:1b:2f:96:8e:
         f5:bf:a7:5b:c4:eb:33:17:5f:8f:83:75:9d:73:e4:25:01:c3:
         39:61:53:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:59 2026 by rpki-client