Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/Yewaa4pOxxLD0XuRX-mFLyhkFnk.mft
File:                     Yewaa4pOxxLD0XuRX-mFLyhkFnk.mft (raw, json)
Hash identifier:          EX4tr+v9riyAhQIqjQzyawLkTmTj9vu2sZfYwBko5nI=
Subject key identifier:   81:3C:A3:D6:40:2D:34:3D:F9:0F:5F:95:E3:19:05:62:A2:5C:49:C7
Authority key identifier: 61:EC:1A:6B:8A:4E:C7:12:C3:D1:7B:91:5F:E9:85:2F:28:64:16:79
Certificate issuer:       /CN=A9181375/serialNumber=61EC1A6B8A4EC712C3D17B915FE9852F28641679
Certificate serial:       02
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Yewaa4pOxxLD0XuRX-mFLyhkFnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/Yewaa4pOxxLD0XuRX-mFLyhkFnk.mft
Manifest number:          02
Signing time:             Sat 07 Mar 2026 04:24:39 +0000
Manifest this update:     Sat 07 Mar 2026 04:24:39 +0000
Manifest next update:     Sat 14 Mar 2026 04:24:39 +0000
Files and hashes:         1: Yewaa4pOxxLD0XuRX-mFLyhkFnk.crl (hash: gJSCqkis69hXxiywfXaTOo90XZJ/BZsZBTNHMOGLZLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/Yewaa4pOxxLD0XuRX-mFLyhkFnk.crl
                          rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/Yewaa4pOxxLD0XuRX-mFLyhkFnk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Yewaa4pOxxLD0XuRX-mFLyhkFnk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181375, serialNumber=61EC1A6B8A4EC712C3D17B915FE9852F28641679
        Validity
            Not Before: Mar  7 04:24:39 2026 GMT
            Not After : Mar 14 04:24:39 2026 GMT
        Subject: CN=69aba887-5711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:b2:3d:23:9e:d5:26:bf:62:ce:fc:38:de:
                    41:73:e7:7a:ec:13:c8:67:1f:69:86:ac:49:5b:69:
                    77:81:d6:54:0c:e8:f3:b0:bd:1c:21:3b:ac:d0:a7:
                    46:c1:de:5c:fc:7c:dd:50:2f:fb:04:92:bd:57:b5:
                    32:1a:15:b0:50:73:85:30:46:df:61:b9:15:42:99:
                    8f:c7:4b:1d:da:bf:b3:70:66:fe:78:55:f7:a7:6d:
                    91:b5:75:0f:f7:65:bc:68:a6:37:ed:f3:f7:5e:bf:
                    d8:a9:5f:15:80:44:b5:59:c1:14:21:bc:72:46:3a:
                    16:10:f3:66:83:4b:83:08:83:06:d1:0f:44:5d:49:
                    4e:e7:bb:c2:7b:85:33:7b:40:fb:48:60:a7:a0:00:
                    0a:ba:36:62:89:b2:a9:0a:d8:d9:96:80:c0:6c:58:
                    74:b7:20:bf:7d:55:58:8e:85:61:f6:dd:cc:16:b3:
                    7f:94:db:59:6f:a7:f6:df:8d:de:39:45:b3:fd:aa:
                    43:72:12:99:88:4c:0f:9d:ec:aa:ae:24:64:dd:e6:
                    7f:41:38:d6:6c:90:4a:71:26:5b:be:5d:80:02:d2:
                    82:cf:5d:6e:84:42:4d:e8:99:23:d4:a3:40:15:12:
                    c7:84:63:a0:19:86:66:b7:80:f4:25:78:40:15:72:
                    f6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3C:A3:D6:40:2D:34:3D:F9:0F:5F:95:E3:19:05:62:A2:5C:49:C7
            X509v3 Authority Key Identifier:
                keyid:61:EC:1A:6B:8A:4E:C7:12:C3:D1:7B:91:5F:E9:85:2F:28:64:16:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/Yewaa4pOxxLD0XuRX-mFLyhkFnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Yewaa4pOxxLD0XuRX-mFLyhkFnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/Yewaa4pOxxLD0XuRX-mFLyhkFnk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:28:8d:6b:be:5e:3a:db:55:36:39:21:05:fe:a4:f8:4e:bc:
         69:cf:1f:60:3d:af:f9:89:48:71:fb:db:f0:4a:fa:d9:d1:20:
         bd:6a:a9:81:c9:70:18:7f:6d:5e:83:0a:11:5a:bd:fa:6f:f4:
         8f:92:a7:2d:ad:8e:7e:1d:18:32:6b:b9:87:e5:e2:d0:26:e8:
         af:38:db:77:57:46:77:86:5c:9f:42:f5:ee:47:5b:da:8d:d4:
         08:ff:93:be:be:7d:19:f2:69:d2:59:43:e9:7f:20:8b:2d:eb:
         01:51:d2:93:6d:3d:52:9c:74:e5:c9:95:f5:9a:0a:11:41:eb:
         35:00:d9:1d:06:0c:53:8d:ea:74:0c:e3:8c:7a:ea:1f:28:c6:
         59:71:52:f4:f8:08:36:e3:00:c9:ae:38:26:45:bf:ec:94:b4:
         5f:6c:a6:5d:b3:12:18:1e:5c:58:f1:12:24:85:27:21:b4:4b:
         5f:29:a8:7d:33:0c:ff:e0:a5:a1:f3:6d:cc:2d:3e:8e:fa:20:
         f4:a0:84:15:e2:ae:29:ce:65:8b:d0:32:5f:d7:0f:ee:1a:a6:
         1e:ce:70:ab:fd:b9:ae:54:b5:2c:f8:f7:ad:89:f7:e5:71:5c:
         c9:52:54:b7:c8:4d:1c:60:95:90:3b:22:aa:7b:c4:2a:38:4b:
         0d:89:c6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:31:40 2026 by rpki-client