Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
File:                     Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft (raw, json)
Hash identifier:          es9j4zpCNsBY4GnOzs0vr7sW33E0ToR5+aDWdWuUhFI=
Subject key identifier:   1C:17:CA:48:53:EE:7E:7B:26:FF:51:B8:B8:E3:C6:5A:53:29:60:30
Authority key identifier: 63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
Certificate issuer:       /CN=A91AFB4C/serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Certificate serial:       0248
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
Manifest number:          0242
Signing time:             Fri 13 Mar 2026 01:41:53 +0000
Manifest this update:     Fri 13 Mar 2026 01:41:53 +0000
Manifest next update:     Fri 20 Mar 2026 01:41:53 +0000
Files and hashes:         1: Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl (hash: kVS9/2nCllhbs3YpoTga52KRR5y5Pf6Rj7U9++pvz+8=)
                          2: AD286018B29C11EDB216812EC4F9AE02.roa (hash: YsWaPmtg5tmHB4YVZTYxNVoG50IpCI5IiT+MeSWq6Eg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
                          rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 01:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFB4C, serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
        Validity
            Not Before: Mar 13 01:41:53 2026 GMT
            Not After : Mar 20 01:41:53 2026 GMT
        Subject: CN=69b36b61-6032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:e9:7a:70:e1:6a:e9:aa:e4:ea:79:55:62:
                    b8:23:d6:4a:e3:4b:a1:89:6f:dc:16:65:e6:8b:e1:
                    01:4c:6f:d8:63:4b:a0:55:3f:7c:b6:15:fa:37:84:
                    04:38:36:cc:a4:4b:c3:87:eb:31:20:d7:d4:6e:c2:
                    2d:71:37:c4:3e:be:b0:af:90:f7:3c:08:b3:bb:aa:
                    34:02:f5:d5:6e:3d:9c:d0:c2:72:b0:a1:c5:58:a3:
                    f9:a5:dd:33:f5:aa:0d:2f:ae:87:95:d5:01:9f:20:
                    d9:35:db:a7:cd:e6:b2:d2:68:c7:a6:80:e2:81:20:
                    88:7b:b1:47:b0:27:60:68:eb:6e:08:75:c4:ef:c8:
                    97:1e:40:97:70:c9:e0:44:9f:ae:68:e0:00:8a:c0:
                    8c:5e:82:f1:83:35:a8:2e:9a:46:fb:ae:40:e7:5e:
                    99:dd:f3:b2:a4:c7:c9:d9:ba:64:d1:df:1a:56:95:
                    66:01:98:6e:e4:12:e6:38:1d:ae:4e:71:57:06:40:
                    ab:d4:48:86:c7:55:15:52:9f:bc:31:e5:84:e5:fe:
                    e3:13:e5:76:dc:64:06:39:3e:b5:6a:c9:64:66:1b:
                    89:98:09:19:87:a5:64:43:a8:29:81:d5:8b:ae:c3:
                    50:00:17:34:71:12:20:94:8e:96:6a:f0:a0:52:d1:
                    1a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:17:CA:48:53:EE:7E:7B:26:FF:51:B8:B8:E3:C6:5A:53:29:60:30
            X509v3 Authority Key Identifier:
                keyid:63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:bd:89:9c:e5:70:46:1a:06:7e:6e:26:6d:2d:99:37:71:1d:
         e3:5b:8e:2d:b6:7c:f3:bf:8a:ff:2e:14:f1:b0:6e:fd:c2:32:
         0f:2c:6c:af:60:4b:08:fb:c6:9f:58:e6:39:c9:b8:49:74:59:
         8d:4c:5a:5b:fc:c7:22:62:0f:7b:c6:2f:f7:66:d2:eb:4e:32:
         c9:5f:f1:21:77:52:2c:e4:12:dc:25:2f:e4:9f:08:d5:36:63:
         ed:60:59:97:81:09:66:70:19:45:9f:b0:f0:89:fe:46:d3:c8:
         f7:b0:3a:ad:0b:b3:23:73:28:2a:19:51:ae:62:3b:44:df:b2:
         53:ba:64:b0:fd:43:19:f2:19:bc:8c:5c:a9:8b:3e:31:e7:bc:
         67:0e:fd:15:b7:64:22:ff:7e:9f:6a:74:38:09:85:84:fb:87:
         03:14:14:37:e1:46:d3:54:05:6c:55:29:3e:a9:8d:97:98:72:
         34:81:42:fb:e5:4f:d2:69:a5:a3:2c:13:8e:76:78:4c:e4:b0:
         d8:c8:00:d0:de:3f:69:13:68:d4:1f:fd:72:09:ed:49:3a:5d:
         e4:85:cc:6d:6b:1a:25:74:53:3c:0d:d3:e3:31:25:72:ef:71:
         84:76:46:9e:46:4a:2b:ab:89:f8:93:e1:38:e5:27:8c:a5:35:
         1e:63:7d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:53:58 2026 by rpki-client