Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
File:                     yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json)
Hash identifier:          8g/WWWjabf6FPUoOqNZZcAEEWDk6Vep8e/Z1tdPI9rg=
Subject key identifier:   A3:EF:CC:CD:9F:74:CE:FC:88:7F:B1:EE:CA:8C:5F:39:2B:04:D2:DF
Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4
Certificate issuer:       /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4
Certificate serial:       034C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
Manifest number:          0345
Signing time:             Sun 05 Apr 2026 00:44:56 +0000
Manifest this update:     Sun 05 Apr 2026 00:44:56 +0000
Manifest next update:     Sun 12 Apr 2026 00:44:56 +0000
Files and hashes:         1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: p74kuoGnpmJgvqokYllNBWsHyw3tD62QYujohgxmZds=)
                          2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: eTFcd93Ik05dvYU83eyYl+NfNuBY+EuLqHvO4+8nNVQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844 (0x34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D86BA, serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4
        Validity
            Not Before: Apr  5 00:44:56 2026 GMT
            Not After : Apr 12 00:44:56 2026 GMT
        Subject: CN=69d1b088-fc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:37:22:89:5f:71:6e:09:48:13:d1:46:9e:
                    62:61:65:bd:29:c9:2b:1a:74:e0:64:f4:86:74:e9:
                    0f:30:07:ae:10:98:ec:5d:97:d0:30:37:45:f4:b4:
                    17:cb:d2:8e:2e:f6:2d:33:39:1a:83:c9:e1:ad:e5:
                    75:e6:32:f6:6b:1c:50:6e:47:69:e1:30:0a:76:ab:
                    e8:c0:a6:1e:7f:ee:33:a1:59:a7:8f:72:7d:5a:18:
                    ab:23:3b:1b:d8:eb:b4:a9:cf:cb:89:55:2e:d6:8e:
                    b8:c0:4d:9c:b1:35:d0:39:df:09:ea:32:b6:1d:88:
                    93:63:14:34:b2:06:23:a6:a3:b0:ec:e8:9f:7e:42:
                    42:df:34:d5:ed:57:f6:5d:68:a1:d8:23:96:f6:aa:
                    64:f2:6a:fe:94:cb:29:5d:85:5f:b0:5b:2d:71:48:
                    6a:ef:67:11:d6:a4:c5:da:a0:02:f1:75:04:50:31:
                    1b:1c:c1:59:30:a0:ad:a4:02:52:74:a7:2a:0a:16:
                    d4:68:75:b9:56:46:88:b3:d1:2c:7a:b5:7a:dc:a3:
                    f3:de:6b:12:bf:e2:e3:dd:27:8e:2c:98:73:fe:c7:
                    78:60:55:50:cf:04:68:a7:13:56:3b:48:8b:ed:9b:
                    98:9e:ad:87:81:08:ff:b1:e0:95:cc:51:4a:50:a4:
                    5a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EF:CC:CD:9F:74:CE:FC:88:7F:B1:EE:CA:8C:5F:39:2B:04:D2:DF
            X509v3 Authority Key Identifier:
                keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:39:86:93:ee:cd:83:91:bc:69:36:33:51:fb:d5:78:64:d6:
         f2:f8:f6:6f:7d:b4:bf:6e:0d:99:d3:cf:53:14:15:f3:14:91:
         8d:cd:c4:e3:40:21:98:9e:d0:9c:1a:57:a2:f8:f6:6b:04:d8:
         3b:8f:86:11:3a:8d:6e:6c:3d:a2:00:f4:54:e9:e0:3d:c3:41:
         cd:2e:54:8a:7c:94:9e:f6:69:b9:eb:b5:c2:ef:03:99:23:a8:
         30:30:b3:39:34:3c:ca:b4:f8:a4:f1:3c:64:7b:60:01:08:a1:
         da:bd:65:ac:0e:27:d5:d1:09:75:4b:8c:58:56:36:da:39:74:
         01:68:bb:e3:dc:15:8f:b7:76:a2:b7:23:83:64:2e:19:1c:0e:
         ff:7e:0b:c6:34:0f:47:06:02:fc:2e:11:a7:e9:29:60:a5:e4:
         6e:45:4f:44:0d:8b:b7:72:0a:14:b8:6d:86:b5:f6:ee:86:84:
         e9:7b:6c:42:a6:e3:13:8f:0c:c5:30:56:c1:33:f3:13:46:f3:
         af:c8:5f:d6:50:42:c8:e2:e4:c8:57:37:6e:df:67:20:9a:36:
         4c:ac:ba:19:ab:18:2e:3b:db:c7:5a:ec:1a:a1:10:03:bd:fa:
         d7:98:5f:16:1b:6c:b2:2a:d8:7f:f1:fa:93:43:af:61:db:9b:
         42:27:01:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg2QkExMTAvBgNVBAUTKENCMjEwNzMyMEVEQjM5MkMzQjRENkIwNjZENzk5NjZF
NzM1NTNERTQwHhcNMjYwNDA1MDA0NDU2WhcNMjYwNDEyMDA0NDU2WjAYMRYwFAYD
VQQDEw02OWQxYjA4OC1mYzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtso3IolfcW4JSBPRRp5iYWW9KckrGnTgZPSGdOkPMAeuEJjsXZfQMDdF9LQX
y9KOLvYtMzkag8nhreV15jL2axxQbkdp4TAKdqvowKYef+4zoVmnj3J9WhirIzsb
2Ou0qc/LiVUu1o64wE2csTXQOd8J6jK2HYiTYxQ0sgYjpqOw7OiffkJC3zTV7Vf2
XWih2COW9qpk8mr+lMspXYVfsFstcUhq72cR1qTF2qAC8XUEUDEbHMFZMKCtpAJS
dKcqChbUaHW5VkaIs9EserV63KPz3msSv+Lj3SeOLJhz/sd4YFVQzwRopxNWO0iL
7ZuYnq2HgQj/seCVzFFKUKRadQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKPvzM2f
dM78iH+x7sqMXzkrBNLfMB8GA1UdIwQYMBaAFMshBzIO2zksO01rBm15lm5zVT3k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODZCQS9BNTc2MDRDOEZE
MjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9TdzdUV3NHYlhtV2JuTlZQ
ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3l5RUhNZzdiT1N3N1RXc0diWG1XYm5OVlBlUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODZCQS9BNTc2MDRDOEZEMjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9T
dzdUV3NHYlhtV2JuTlZQZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmTmGk+7Ng5G8aTYzUfvVeGTW8vj2b320v24NmdPPUxQV8xSRjc3E40AhmJ7Q
nBpXovj2awTYO4+GETqNbmw9ogD0VOngPcNBzS5UinyUnvZpueu1wu8DmSOoMDCz
OTQ8yrT4pPE8ZHtgAQih2r1lrA4n1dEJdUuMWFY22jl0AWi749wVj7d2orcjg2Qu
GRwO/34LxjQPRwYC/C4Rp+kpYKXkbkVPRA2Lt3IKFLhthrX27oaE6XtsQqbjE48M
xTBWwTPzE0bzr8hf1lBCyOLkyFc3bt9nIJo2TKy6GasYLjvbx1rsGqEQA73615hf
FhtssirYf/H6k0OvYdubQicB/g==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:52:52 2026 by rpki-client