Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
File:                     y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json)
Hash identifier:          WVj/ZLchfZC1LkfGxdtmww9kV/b+ZUDezwG22FMmGho=
Subject key identifier:   1F:31:85:6D:1C:22:25:A6:85:F5:B5:CC:2D:67:EC:CD:E8:15:F2:6D
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Certificate issuer:       /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
Manifest number:          015F
Signing time:             Wed 11 Mar 2026 03:59:59 +0000
Manifest this update:     Wed 11 Mar 2026 03:59:58 +0000
Manifest next update:     Wed 18 Mar 2026 03:59:58 +0000
Files and hashes:         1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: dii1kdVQJOhtYELA9P20yZsCjOvN/N0sVr+zLVSbwF0=)
                          2: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: 4hSO5GJztFmc2Bjlelb4M86yndIsa9VSTZjFpa5DDCg=)
                          3: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: W/2vjJp/ag3H7mSzG2Tr/h0kvrzsLkkzvWHa8WaLTtU=)
                          4: AF27640226FA11F0B0383240C4F9AE02.roa (hash: vpOc+3kPV6Pm6+6TDvDUsWTnZWPzQSBq8LombYK9VIY=)
                          5: 24D519F226FA11F0B737393FC4F9AE02.roa (hash: YOuhg57dpyAHyHYCyC+N5mtXIsEkAz+fzXjtzYd+ceI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
                          rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 03:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
        Validity
            Not Before: Mar 11 03:59:58 2026 GMT
            Not After : Mar 18 03:59:58 2026 GMT
        Subject: CN=69b0e8bf-200f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:af:24:e6:5c:35:be:a1:84:ca:00:bc:27:
                    87:e0:be:f9:dd:72:3f:5d:b8:47:4e:fc:71:43:ed:
                    af:6f:75:82:41:01:73:74:fa:9a:91:7f:dc:28:04:
                    39:50:16:13:8f:12:95:51:22:e0:f7:ae:48:68:93:
                    b9:70:40:8f:21:2e:80:b3:61:b9:a1:43:38:5b:fc:
                    13:e8:05:06:39:e5:30:e8:2c:0e:28:ea:a6:08:d2:
                    76:48:b9:92:a2:aa:e2:34:87:32:94:e2:f3:34:e8:
                    a9:fb:f0:9d:31:cc:3c:c1:08:33:e5:64:17:f8:4b:
                    e5:e5:ab:12:6f:4e:a5:57:0f:f3:38:2b:b5:39:ef:
                    2e:ef:e5:7e:fd:a4:be:5a:9e:fa:43:e9:f1:e0:e2:
                    c8:b4:21:de:63:18:8c:ce:d0:e3:e0:43:00:aa:13:
                    f6:e0:79:30:21:3f:fb:61:01:b1:fb:9d:fc:6a:94:
                    1f:17:f4:a6:02:70:8a:41:55:52:d9:fd:ac:ab:40:
                    e4:16:fd:27:57:ec:e2:bc:be:a2:45:3c:cf:8e:24:
                    a6:70:9f:6f:07:5d:88:fb:0d:9f:b3:17:b0:83:02:
                    39:5c:96:16:21:f3:8d:47:1b:43:78:11:b0:c6:e9:
                    4b:01:c4:53:b7:e5:da:92:b3:70:65:ce:b7:60:7c:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:31:85:6D:1C:22:25:A6:85:F5:B5:CC:2D:67:EC:CD:E8:15:F2:6D
            X509v3 Authority Key Identifier:
                keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e1:c1:2e:0f:31:ca:0d:f3:9e:e2:a5:3e:f7:ae:12:23:ab:
         6d:68:d7:96:d2:3a:bd:f8:b0:73:1a:07:22:46:6f:5a:7e:44:
         d3:50:ee:16:95:97:f4:fd:b8:a3:8c:56:ea:c9:78:c9:4e:c4:
         19:c2:0a:3c:9d:41:da:15:90:15:d5:09:2e:f9:6f:29:dd:72:
         9d:48:0b:cb:8e:e7:7d:27:cc:4a:31:e8:81:db:70:96:97:43:
         01:5f:af:e7:93:99:ce:10:14:fc:f9:f0:ba:73:fe:e8:d6:07:
         55:5b:ab:10:bd:82:26:8d:4d:37:ea:ae:e9:05:6b:ba:89:7c:
         48:8b:51:3a:d4:57:04:20:6f:81:95:1e:b2:f4:53:d3:ea:37:
         18:45:3e:15:4d:5d:d9:bd:0e:28:00:bf:88:62:98:00:97:e7:
         4c:d4:90:6d:73:28:ce:aa:ee:68:63:30:7c:35:48:c4:22:c1:
         02:f9:b0:24:cd:ce:d2:b7:3a:c6:3d:4d:d1:6d:ec:a5:13:86:
         36:4d:71:1b:e8:3e:1b:04:2f:82:a5:82:84:6b:79:58:cf:0d:
         07:bc:bf:9f:bd:72:ff:33:96:26:bf:7e:64:8c:2f:8a:62:ec:
         30:bb:97:26:9d:44:a0:8f:e8:19:f0:76:a8:a6:e9:c0:d7:ff:
         96:af:7a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:51:37 2026 by rpki-client