Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
File:                     YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json)
Hash identifier:          HirUezfZGPv/Al4POGR91CeLE3wfmF+5mnXalFS00zM=
Subject key identifier:   AE:38:37:2A:9D:8D:C2:7F:B7:03:DA:28:C4:68:35:D3:24:0E:E9:DC
Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
Certificate issuer:       /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
Manifest number:          016B
Signing time:             Mon 09 Mar 2026 03:48:16 +0000
Manifest this update:     Mon 09 Mar 2026 03:48:15 +0000
Manifest next update:     Mon 16 Mar 2026 03:48:15 +0000
Files and hashes:         1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: nYUL1haImhj1KYmlQG1YcMQf3xSiCZSfLjPwGthjFKY=)
                          2: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: tA6KyYClQuKpmTCG003TYGNS9iE1VeJyAErBmU+o/q0=)
                          3: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: 5qMeOFMw+telNy4pVO5jzzwVA6F9perTz9fF4DHQO1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl
                          rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Mar 2026 03:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
        Validity
            Not Before: Mar  9 03:48:15 2026 GMT
            Not After : Mar 16 03:48:15 2026 GMT
        Subject: CN=69ae4300-fcd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5c:15:60:30:bf:fe:4b:9a:31:23:e6:13:4b:
                    5f:69:e1:93:31:3a:8e:a4:57:e7:e7:d3:cb:06:9e:
                    86:ce:0b:a5:fc:4b:5c:fe:4b:f6:83:7d:5e:ff:91:
                    82:9a:67:45:74:d3:10:89:e7:b9:b6:88:1d:9b:6d:
                    8d:06:bc:28:3c:15:58:f9:02:40:5c:1e:89:f1:f3:
                    1d:da:63:9c:e4:91:57:c8:be:66:61:7b:b5:6c:6e:
                    37:a8:1a:15:6c:c6:de:c0:44:71:a4:b1:cf:d5:06:
                    86:cc:7b:ff:89:03:e5:e2:e0:91:1b:ab:0a:2c:d1:
                    08:84:75:c2:5d:2a:08:e2:de:93:fe:87:90:1b:b9:
                    e2:ef:6a:da:24:a0:6b:e2:70:cc:3f:38:8f:c1:71:
                    96:95:5a:86:3d:bf:dd:ab:01:60:c7:88:59:4d:49:
                    b8:fe:3a:31:f6:d2:b7:24:ad:f6:f4:2f:ef:7f:b6:
                    7e:32:97:6f:25:8f:25:35:85:e5:b8:33:a7:f5:93:
                    49:0c:a4:87:c1:10:16:cc:dc:ec:c0:59:9b:c4:54:
                    c6:01:03:e8:43:b1:5e:5c:7f:34:ea:2a:68:16:61:
                    f0:0c:d7:ee:ae:b7:88:64:4d:b0:53:bb:56:26:98:
                    68:d3:3a:c0:7b:ca:77:cb:47:b7:23:5c:28:8f:33:
                    12:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:38:37:2A:9D:8D:C2:7F:B7:03:DA:28:C4:68:35:D3:24:0E:E9:DC
            X509v3 Authority Key Identifier:
                keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:fb:27:8f:7a:e0:6e:a7:39:5a:51:8a:62:83:4c:ef:f9:4b:
         61:b4:dc:68:31:90:b9:18:53:09:1b:db:fa:1f:02:b0:10:04:
         a9:71:c5:81:3f:32:a7:f9:43:0c:5b:ae:14:ab:b3:69:62:23:
         84:a0:7d:79:64:e5:72:be:52:d0:fd:8a:ee:7c:50:9d:e4:dd:
         f7:7a:b6:89:14:51:91:db:44:35:ca:c9:62:6b:e8:20:f2:99:
         39:a9:a8:8c:19:92:50:01:b7:c1:bf:9b:5e:ce:3a:84:9d:29:
         54:b0:6a:8d:69:4b:55:98:de:14:26:64:c4:15:7b:3c:17:3b:
         53:7d:1b:3a:31:ba:fb:5d:cd:d3:43:56:78:23:dd:b5:97:fe:
         4e:3b:e9:4f:4a:6c:20:48:8b:bd:f1:e5:0e:c0:e9:ff:b0:06:
         e4:46:55:34:41:13:58:4b:87:03:3c:18:ff:db:fc:1c:00:6f:
         aa:38:dd:27:48:a6:57:36:63:27:cc:da:50:bb:e6:75:5f:0d:
         41:61:5f:e4:4b:71:f5:88:af:6d:e8:82:1b:f6:77:63:91:04:
         0f:d0:85:e6:9e:57:a4:79:5e:f5:f8:0f:7d:dc:ec:62:e0:d6:
         20:fb:5e:9b:40:41:96:bd:2b:55:97:1f:ed:b5:08:ea:1b:6a:
         e3:1f:1d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 05:04:50 2026 by rpki-client