Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
File:                     YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft (raw, json)
Hash identifier:          u/VHNK8uPvDrfUrDYrltBVt1TJKRJJeFx4e8p0rZ1VU=
Subject key identifier:   78:DD:1A:FD:EF:43:60:41:4C:2A:AA:6C:94:3F:8A:90:3F:FB:3B:3B
Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44
Certificate issuer:       /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
Certificate serial:       0A5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
Manifest number:          0A56
Signing time:             Sat 28 Mar 2026 19:33:53 +0000
Manifest this update:     Sat 28 Mar 2026 19:33:52 +0000
Manifest next update:     Sat 04 Apr 2026 19:33:52 +0000
Files and hashes:         1: YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl (hash: 5IdXyg6k+iqdSe0k1rlp9R4a+sQZHBQJhR55VPRBc/Q=)
                          2: 5C8929C8839011EAB5B82263C4F9AE02.roa (hash: gzbpBLHjuyIbIn1f9T7JlFlrPpRUrvtd4lxp7A9hka0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl
                          rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 19:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2654 (0xa5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148488, serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
        Validity
            Not Before: Mar 28 19:33:52 2026 GMT
            Not After : Apr  4 19:33:52 2026 GMT
        Subject: CN=69c82d21-9b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7e:05:fc:c7:38:e6:fb:18:1e:02:c5:93:36:
                    eb:39:58:e6:51:7a:33:59:bf:9c:01:f2:24:83:eb:
                    fd:4e:7a:1b:30:00:d9:ba:e1:20:ea:04:5c:0b:19:
                    e9:47:42:9f:48:f8:f3:2c:c5:3e:65:32:e6:d9:7d:
                    9e:6c:4e:45:99:f7:dc:e6:ca:da:ea:ba:0f:cf:b5:
                    d5:39:0a:ac:5c:22:4f:58:12:e1:71:b7:9a:20:e3:
                    75:d0:1c:43:2c:14:50:86:6b:d9:8e:5b:8d:b5:d0:
                    14:ad:13:5c:84:3c:6c:30:22:1e:17:53:ef:f5:c2:
                    ac:2c:12:a8:69:37:bc:4d:1b:09:71:9e:ff:c3:26:
                    46:57:90:0a:55:31:c8:20:a2:40:5d:6e:4f:c9:86:
                    13:75:10:b1:4d:3a:01:b6:40:0a:e4:98:7b:1f:46:
                    6b:39:b5:08:54:8f:53:e9:5b:4f:55:8f:1d:95:54:
                    fa:01:cd:6c:fd:98:18:ce:4d:ae:07:b4:4b:13:12:
                    91:c0:cc:e3:9f:f2:b0:4e:a0:ac:84:45:88:c4:a3:
                    d3:bc:1b:59:3f:0d:b6:50:f1:80:46:aa:93:3b:ed:
                    6b:55:d8:5a:e2:6a:19:10:e3:2c:4d:60:b1:dd:bd:
                    d5:00:6c:19:67:d1:5a:d3:26:a5:84:9a:23:a9:0b:
                    a0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DD:1A:FD:EF:43:60:41:4C:2A:AA:6C:94:3F:8A:90:3F:FB:3B:3B
            X509v3 Authority Key Identifier:
                keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:69:56:60:4a:bd:05:94:09:fb:31:fc:49:63:66:95:dc:3f:
         b1:e0:02:e2:22:f3:a0:d9:58:8b:25:81:0e:6c:a6:29:64:27:
         27:36:f2:95:55:e0:80:2a:ba:fa:4a:4d:0e:a1:83:31:6e:8b:
         a1:c0:3b:16:96:e4:e5:25:55:78:11:db:80:91:e3:8b:5b:53:
         c1:f6:b7:2d:39:af:aa:19:7c:4c:f9:d4:cb:e4:da:eb:62:1a:
         30:c8:6f:f1:18:bc:36:f2:bd:c5:62:cf:3b:21:5c:c5:59:76:
         aa:57:89:e2:95:c0:bc:90:51:40:a4:df:e0:98:7b:01:f2:cd:
         7b:d6:f7:f8:ac:92:d5:af:bd:b2:bd:8f:f4:00:78:0f:f3:64:
         75:90:25:54:6b:53:10:52:2d:61:2c:3f:a2:b7:c2:56:b2:3d:
         d1:cb:b6:c3:92:0f:29:1b:35:59:68:54:24:a5:d7:08:c0:b0:
         c7:c8:fc:2c:e7:00:cf:02:43:48:74:6e:ff:66:da:8c:e9:03:
         94:b6:bb:66:e8:9f:c0:3f:cb:62:ec:7e:9e:80:fa:08:c3:c4:
         d4:75:c8:af:fa:a6:9c:92:fe:99:e5:c3:45:65:bc:fb:cd:d1:
         34:8f:e0:9a:03:52:65:09:6e:6e:11:06:ea:54:20:39:d3:49:
         b6:eb:e1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:39:46 2026 by rpki-client