Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft
File:                     3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft (raw, json)
Hash identifier:          A2BbxmUHZtaTDrop0BLkHTPyKcmgvZI47Kb4J66+Dm8=
Subject key identifier:   9E:E5:B6:D1:A8:AC:68:60:DC:6E:8D:D3:17:28:F9:DD:1A:FD:45:F6
Authority key identifier: DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB
Certificate issuer:       /CN=A91116D1/serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB
Certificate serial:       0CE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft
Manifest number:          0CD6
Signing time:             Thu 16 Apr 2026 18:15:41 +0000
Manifest this update:     Thu 16 Apr 2026 18:15:40 +0000
Manifest next update:     Thu 23 Apr 2026 18:15:40 +0000
Files and hashes:         1: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl (hash: gRBwmIug+2CVFAiXXIbE74NGLDVYKvnxXb3P81vte/k=)
                          2: AD532D26090211EAAD8D5786C4F9AE02.roa (hash: k9g8nzceHdPoOK0fhj6CfdrThrPXw9qWDxl/CdnKp0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl
                          rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3299 (0xce3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91116D1, serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB
        Validity
            Not Before: Apr 16 18:15:40 2026 GMT
            Not After : Apr 23 18:15:40 2026 GMT
        Subject: CN=69e1274d-012d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b7:4c:29:6f:92:93:c7:99:f1:d6:61:17:0a:
                    92:69:9e:10:53:1d:05:66:61:c5:3c:92:b9:ce:87:
                    35:9b:14:a2:4d:dc:d1:3d:58:24:ec:a9:91:3a:52:
                    c0:01:f3:67:c1:04:4c:b8:24:6d:28:b2:1f:18:a8:
                    33:13:2a:f6:f3:72:df:ba:0a:42:28:e0:4a:51:53:
                    9b:0c:72:90:a2:27:41:d8:62:50:99:bd:b3:56:96:
                    5b:4f:9c:a5:d0:60:2b:8f:a8:fe:ec:61:42:d6:7a:
                    e9:f4:a5:48:2c:ff:43:7f:3a:d7:39:7c:92:da:db:
                    ad:71:6c:82:ab:a2:23:c5:f7:52:6f:d0:e8:c0:4c:
                    e0:64:2b:4b:38:f1:71:d8:ea:c3:e9:f4:94:69:d1:
                    9a:d4:32:d3:66:03:68:5f:39:f4:a0:27:7a:d5:d6:
                    5d:5c:79:f2:bd:ff:23:95:4b:15:63:e1:92:84:82:
                    7b:18:02:e6:fc:21:97:84:8d:8c:c5:20:20:4f:34:
                    39:fd:19:9b:bf:1a:ba:29:81:98:ff:c3:47:45:e4:
                    7c:ab:53:7c:44:56:93:70:03:29:7e:cb:bf:81:9d:
                    28:01:03:9b:c6:db:9d:0b:dc:e7:6d:47:3c:8a:ec:
                    46:60:ce:a2:1e:21:0d:b7:06:0f:54:aa:1b:40:5c:
                    36:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E5:B6:D1:A8:AC:68:60:DC:6E:8D:D3:17:28:F9:DD:1A:FD:45:F6
            X509v3 Authority Key Identifier:
                keyid:DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:1d:53:15:1c:a1:c4:81:f9:99:fc:87:60:18:20:c4:f0:54:
         8a:e3:63:5c:60:a0:9a:d6:80:e2:ab:83:7e:02:36:ac:0b:41:
         01:4c:07:b4:65:31:80:99:44:55:5c:b0:f7:7b:7f:0e:ea:ef:
         67:27:f3:42:de:86:62:40:aa:06:26:cc:c0:75:fe:41:72:ea:
         cf:5a:0d:13:da:6a:87:03:8b:a1:17:0b:0a:cd:97:b2:0e:33:
         13:b3:cb:df:7b:23:f8:44:b8:1d:86:f0:7b:4b:0c:84:35:0c:
         68:54:1d:8e:8d:b7:60:e6:b2:a6:2d:52:d9:0e:71:99:cd:e7:
         53:4a:40:e4:9d:76:2d:27:7a:04:b7:34:1e:41:23:05:28:75:
         ca:cb:b3:e1:ec:94:33:25:bd:18:01:9f:c2:39:08:49:e7:68:
         27:ac:09:b9:c2:6d:5a:50:af:9b:c4:d8:30:2f:38:9e:cc:20:
         4d:11:64:66:2e:5c:7b:1f:de:a0:4f:85:f3:a3:a2:a3:8c:a5:
         6f:62:2e:cd:0e:83:4b:a7:e8:3d:42:13:3f:ae:73:14:f1:97:
         5b:a4:2a:ab:4d:3a:58:24:a7:2a:b6:78:d3:2a:de:f4:63:e0:
         30:f9:87:21:d8:32:02:9b:26:17:12:89:09:bb:3d:ee:3a:c8:
         75:ac:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:32 2026 by rpki-client