Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.mft
File:                     YDUU_FCDUUDwM--oQ87pOWOWol0.mft (raw, json)
Hash identifier:          ct581gXEtxIZYiH30MyAqCG89a1qC5CUYGNUt+auG18=
Subject key identifier:   06:09:98:6F:C5:BE:A8:2B:CB:93:4E:8C:44:84:16:A2:B7:11:EC:F0
Authority key identifier: 60:35:14:FC:50:83:51:40:F0:33:EF:A8:43:CE:E9:39:63:96:A2:5D
Certificate issuer:       /CN=A91118FA/serialNumber=603514FC50835140F033EFA843CEE9396396A25D
Certificate serial:       0BBF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDUU_FCDUUDwM--oQ87pOWOWol0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.mft
Manifest number:          0BB6
Signing time:             Thu 16 Apr 2026 18:53:34 +0000
Manifest this update:     Thu 16 Apr 2026 18:53:34 +0000
Manifest next update:     Thu 23 Apr 2026 18:53:34 +0000
Files and hashes:         1: YDUU_FCDUUDwM--oQ87pOWOWol0.crl (hash: iQA3PLYzgDcUSc6akHyfuXMOFy3zfHUEJMBKEziv9Ho=)
                          2: 42EE36A240EC11EA875BC545C4F9AE02.roa (hash: gQrDZPWymcXjV4zcyfSy0wB6zarHZABhbBU74ZyT7bM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.crl
                          rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDUU_FCDUUDwM--oQ87pOWOWol0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3007 (0xbbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91118FA, serialNumber=603514FC50835140F033EFA843CEE9396396A25D
        Validity
            Not Before: Apr 16 18:53:34 2026 GMT
            Not After : Apr 23 18:53:34 2026 GMT
        Subject: CN=69e1302e-50de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:d4:e9:e0:f0:45:a2:69:f9:ae:e3:75:53:
                    80:2d:0c:08:f4:35:0c:0d:9a:05:10:7d:06:26:3b:
                    8d:83:15:87:03:3b:af:c8:6d:60:ab:b9:be:73:16:
                    08:2d:62:20:d1:31:08:be:ff:85:d0:8a:5f:81:9b:
                    99:ae:22:6f:e6:73:69:4a:7a:bc:ef:43:71:46:df:
                    f2:06:a6:56:41:ec:3f:3c:cd:cf:f6:3c:f9:c1:ae:
                    d8:66:82:2c:8f:3b:05:26:1f:39:fc:8c:ee:5d:be:
                    0a:1b:5d:03:f8:0a:3d:7a:7f:05:97:78:61:60:cc:
                    7b:54:9d:1d:2d:15:82:74:98:5d:b7:83:bd:71:18:
                    c5:a6:37:6d:43:fb:1c:cf:a1:60:9d:1e:55:c2:b5:
                    e8:1f:bb:bb:68:48:dd:c9:bd:aa:ba:c3:08:92:45:
                    0e:d9:9f:19:c3:02:34:32:b4:4f:36:dc:17:a6:92:
                    9e:fb:5a:ae:1c:07:36:e5:e0:63:32:c6:8f:61:a7:
                    15:76:4b:5f:57:e0:36:2e:b5:4a:db:47:a0:e3:c4:
                    17:c4:21:eb:b1:ce:86:63:b7:bf:b1:9b:14:c3:5a:
                    b7:c1:f2:1f:66:52:c1:3e:7f:80:58:e9:73:29:3a:
                    a1:85:14:88:c5:ae:cd:2e:52:6d:03:28:8e:fb:c7:
                    6f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:09:98:6F:C5:BE:A8:2B:CB:93:4E:8C:44:84:16:A2:B7:11:EC:F0
            X509v3 Authority Key Identifier:
                keyid:60:35:14:FC:50:83:51:40:F0:33:EF:A8:43:CE:E9:39:63:96:A2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDUU_FCDUUDwM--oQ87pOWOWol0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f4:1b:12:bc:e0:88:b6:6c:5f:34:a3:41:d2:1a:a5:92:8d:
         0b:e7:63:15:26:06:0e:3a:02:a9:3d:8c:53:3f:f9:51:47:7e:
         92:17:b0:72:b3:1a:6c:6b:7f:12:d8:29:a0:89:dd:29:9f:fa:
         de:21:28:60:95:64:ca:67:8d:69:7e:3c:9b:18:51:0c:5c:27:
         c2:06:02:cb:9e:fe:2e:94:59:74:91:3b:45:6c:2f:39:66:85:
         6c:db:8b:58:42:4e:26:8f:73:03:e2:e6:a0:af:f8:2f:94:9b:
         c6:21:39:39:84:0e:d9:dd:09:38:6e:41:00:b2:d2:eb:84:6e:
         2e:a7:4c:18:bb:07:89:96:72:65:0f:c6:d8:df:e5:35:70:9e:
         0d:b8:f6:d7:ff:1e:db:3f:51:58:3a:00:58:b9:fe:38:83:01:
         e7:26:b8:35:a2:d9:03:a2:19:4e:50:ce:26:7b:d3:7c:75:11:
         2c:0b:c8:d5:3d:65:85:6d:02:66:fb:a9:fd:42:9d:97:a3:82:
         11:8c:2a:f1:31:97:f9:a9:f8:98:2e:18:07:0d:c4:6a:a4:73:
         c6:8a:0c:e1:d8:6b:5b:9c:8c:c0:6f:5f:e5:4c:56:02:ed:f0:
         25:ec:39:ee:7b:6b:03:8d:c9:4e:d9:9c:20:df:40:6f:48:51:
         2b:e1:45:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:16:50 2026 by rpki-client