Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
File:                     YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json)
Hash identifier:          QXEA4T/kLZhiFNkwcfc21mCwlz88NP7jvppZuwvPRJU=
Subject key identifier:   B9:1A:E9:C4:43:B5:6A:75:58:96:C3:F2:95:50:0D:29:A9:F1:D9:EA
Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
Certificate issuer:       /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
Manifest number:          DD
Signing time:             Sat 07 Mar 2026 05:59:24 +0000
Manifest this update:     Sat 07 Mar 2026 05:59:23 +0000
Manifest next update:     Sat 14 Mar 2026 05:59:23 +0000
Files and hashes:         1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: AQvnwaDDnIxQE//6B/F7ntRS/zWC1xIL1FnZv8OAtmE=)
                          2: 5CBA651212B211F19AC313AEB5EE528E.roa (hash: OY4Fet8xm/rFRe8wVg+u3YFnbkKRJHlvjCIrVFg7MQ4=)
                          3: 5DB76F8212B211F19AC313AEB5EE528E.roa (hash: 2NaYNjJ6qjcaM0sXuJIClT+/B4+Xci+4D5hsnMlJddw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl
                          rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 05:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
        Validity
            Not Before: Mar  7 05:59:23 2026 GMT
            Not After : Mar 14 05:59:23 2026 GMT
        Subject: CN=69abbebc-0fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:77:d0:b1:46:39:06:c5:f9:2d:10:ba:be:d6:
                    9f:fd:81:04:44:c2:23:36:4b:f4:05:b1:fc:b7:76:
                    cb:50:f5:2a:de:fa:4b:4e:a9:b5:a5:39:93:99:7c:
                    d4:77:84:04:4f:10:3e:23:08:4d:0d:a7:56:1f:00:
                    de:d8:f5:45:5d:a1:6f:8c:56:d2:8c:25:44:d0:0e:
                    e1:74:f7:a4:f2:59:f6:ec:50:07:58:c5:80:34:d7:
                    e8:f0:3e:56:05:3e:c6:97:40:7b:92:4a:73:3f:dc:
                    22:b4:03:cf:19:6d:7b:bb:7b:10:ad:6d:72:ee:7e:
                    1a:c7:31:73:d9:a7:ba:44:38:57:39:95:0a:d2:1b:
                    3a:c8:8c:00:41:8f:62:72:aa:41:9b:08:90:ad:3e:
                    e6:c1:76:41:5b:8b:db:8d:99:53:e3:dc:d2:ba:c6:
                    06:5b:db:c2:db:80:0e:33:82:9e:9a:c1:5a:97:7d:
                    56:fc:25:72:71:0c:75:ef:bb:48:38:91:51:2e:9a:
                    3f:79:6d:ad:73:b5:db:1b:cb:5e:74:04:6e:d9:81:
                    69:f0:58:96:b4:9c:21:13:fa:d4:f2:94:ac:0e:f2:
                    cb:95:cf:5d:ed:fa:86:bc:0a:79:5f:a7:46:ed:00:
                    e2:52:30:21:5c:dc:0e:29:a1:0a:da:df:9c:9e:00:
                    bd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1A:E9:C4:43:B5:6A:75:58:96:C3:F2:95:50:0D:29:A9:F1:D9:EA
            X509v3 Authority Key Identifier:
                keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c9:43:5d:45:08:c3:2c:3a:35:a2:15:74:6c:4c:e0:d1:5a:
         02:f9:d9:9a:e5:1c:38:2b:aa:1d:0b:49:b7:3d:11:3c:54:d2:
         2b:2e:76:f4:83:e2:ce:3f:72:3e:4f:d1:25:17:c9:a4:41:0d:
         da:9f:a3:4c:be:7c:01:f7:de:82:99:c4:83:91:61:2d:ae:aa:
         8e:77:a8:cf:20:f0:5f:fb:f5:60:f2:cf:be:2b:51:40:3c:86:
         3c:a6:27:8a:2e:6d:7e:d5:28:c0:98:dd:d8:e5:22:cc:53:52:
         a7:93:dc:37:b1:e9:26:4c:3d:e3:03:fa:88:2a:d5:68:f1:ae:
         fd:39:73:7f:64:a6:38:ea:a5:fc:8b:74:b7:c1:95:ed:67:b5:
         1e:a9:7f:48:ea:49:33:39:99:dc:7c:e9:ec:42:71:6d:0d:4e:
         fc:84:76:bb:39:2b:57:01:ea:d1:11:7b:f6:53:50:5e:32:fd:
         22:07:c6:e6:97:5d:02:87:44:4d:61:9f:ad:a4:9e:0c:d3:c1:
         7e:e0:ed:99:c0:19:d5:34:ec:68:49:c6:3f:9e:7b:47:65:25:
         cf:a0:86:8c:de:65:64:0c:38:7f:d3:c9:0f:ff:c8:82:77:22:
         b4:d6:e4:37:f4:90:73:7a:9f:41:16:2c:f6:3d:d7:f6:ce:84:
         d9:46:10:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:35:31 2026 by rpki-client