Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
File:                     yvC3hLE-FADutCJboi1vmDiCTsM.mft (raw, json)
Hash identifier:          x/s05Y6WpnWzuCcAyYQMq0bx9wWS7IesJ8Q5gX5MhRE=
Subject key identifier:   AB:F0:3A:65:06:3B:47:30:B3:21:42:ED:1C:5E:09:51:BC:56:E5:C1
Authority key identifier: CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3
Certificate issuer:       /CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
Certificate serial:       1601
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
Manifest number:          15D5
Signing time:             Mon 30 Mar 2026 16:44:47 +0000
Manifest this update:     Mon 30 Mar 2026 16:44:47 +0000
Manifest next update:     Mon 06 Apr 2026 16:44:47 +0000
Files and hashes:         1: yvC3hLE-FADutCJboi1vmDiCTsM.crl (hash: xjFGy0i/6b2nqApgq6J0P4CfTnAvND2SdC8QXwo5d14=)
                          2: DD147B54CDC411F0AA804C7EC4F9AE02.roa (hash: 049gA/7/CLzDNLWh8FISAONtll7J9UoSyFVKISl9SGk=)
                          3: 0A668418C9EB11F091DA0157C4F9AE02.roa (hash: OdDt3YJdVn1VoA0SayaN+6OIhoTeZLGhCdW0FWt8A2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl
                          rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5633 (0x1601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D99E, serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
        Validity
            Not Before: Mar 30 16:44:47 2026 GMT
            Not After : Apr  6 16:44:47 2026 GMT
        Subject: CN=69caa87f-f5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:b8:05:3e:5b:49:0a:86:03:c4:8c:47:82:
                    6c:95:54:c3:70:97:4c:7a:b1:04:b6:18:6a:22:0a:
                    92:14:55:6c:3b:1e:73:c6:34:41:63:cd:9c:27:ae:
                    a3:cb:2a:fa:e7:96:08:d6:70:7c:99:3e:96:52:f6:
                    d9:f1:53:2a:e9:3d:0c:aa:23:3b:b0:fe:50:f2:69:
                    00:94:b5:23:27:6c:e1:e0:0f:fc:7c:5c:96:87:90:
                    30:9b:cd:7b:25:ef:e2:07:4d:f8:5b:d9:dd:e6:89:
                    52:1a:05:86:31:51:af:58:e3:a8:60:85:ff:e7:da:
                    44:ca:f9:28:d8:19:92:04:3f:6a:66:b8:2e:06:01:
                    34:45:fd:df:2c:08:3a:5a:86:54:52:1b:54:3c:8e:
                    82:3e:3f:69:1e:cd:2a:3b:a5:00:a5:db:6c:86:b3:
                    b2:e1:11:69:82:0d:5d:16:47:42:1b:1b:51:cd:e3:
                    8a:a7:f3:81:59:af:dd:fc:c4:3d:cb:0e:08:0a:73:
                    0a:9a:0e:9d:34:73:f1:59:7a:72:ca:37:e9:12:b3:
                    77:c2:0e:a4:ad:ad:cf:96:58:e1:53:92:5d:4a:98:
                    89:ce:e1:6f:5a:8f:0d:9f:2d:1a:40:f5:a1:33:ea:
                    6a:d1:f0:b8:a2:b5:05:f7:d8:3f:64:0f:be:27:18:
                    d5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F0:3A:65:06:3B:47:30:B3:21:42:ED:1C:5E:09:51:BC:56:E5:C1
            X509v3 Authority Key Identifier:
                keyid:CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:6d:42:c7:ed:8b:76:02:08:e0:bc:f3:87:a5:42:bc:c8:8e:
         db:db:ff:2c:2e:f9:92:ce:18:66:30:35:d9:d4:95:34:f9:7b:
         83:c5:ea:57:22:9d:6a:00:3c:41:c0:1e:d8:8d:66:a7:92:33:
         b6:ff:eb:d3:1d:cb:e3:36:17:49:73:9f:31:a2:5d:bd:06:d1:
         55:9a:8b:3b:d6:fd:af:db:83:d7:b3:4b:bf:0d:d6:9a:5d:41:
         15:4b:cc:97:d2:60:d1:e3:f1:94:13:cb:18:e2:dc:cd:5d:65:
         e9:ea:7c:d3:86:39:1f:90:bd:c4:88:a3:ad:e6:be:07:e5:b2:
         32:b4:15:da:81:39:ba:39:de:79:44:27:d0:5e:47:5d:36:05:
         34:30:6e:1d:26:29:c4:c2:aa:95:68:e7:63:9b:d5:17:61:56:
         a3:d1:18:d1:f6:d1:fb:ba:b7:0d:de:23:6b:e9:31:e8:f6:72:
         98:ec:12:f2:7e:cf:64:7d:62:65:69:6c:22:e6:48:ed:13:e9:
         77:18:7a:30:86:6a:05:51:bf:44:ca:77:8a:7f:c0:2e:7c:d2:
         7a:b6:00:fd:27:a9:85:89:9f:12:52:85:07:90:0b:7e:8b:84:
         a1:ba:f6:93:0c:30:de:c3:ec:b4:25:a7:21:de:85:91:bd:73:
         e6:ba:48:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 22:55:44 2026 by rpki-client