Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
File:                     yLK8O4qx665KdD-Q2Mih39HUzhc.mft (raw, json)
Hash identifier:          PocCSibmSNtt+ZfWzy3ahcm0qHFzBVdHXP3pfJL/xHk=
Subject key identifier:   FF:40:C8:E6:BA:1D:3E:61:47:8E:E7:6C:26:CA:B2:8F:C5:D7:63:A4
Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17
Certificate issuer:       /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
Manifest number:          BC
Signing time:             Fri 17 Apr 2026 06:43:37 +0000
Manifest this update:     Fri 17 Apr 2026 06:43:36 +0000
Manifest next update:     Fri 24 Apr 2026 06:43:36 +0000
Files and hashes:         1: yLK8O4qx665KdD-Q2Mih39HUzhc.crl (hash: /1AEG3fHXlmfyxoEVXPXgSEMY58bqJ+nO9C8AvttKNM=)
                          2: 8C19B3A21EFD11F0B822DF56C4F9AE02.roa (hash: TSbzXgPkumBg0cDwPI2XndJNJ0jn2eg2lDv16RkcG74=)
                          3: 758E8E941EFA11F0A6533A31C4F9AE02.roa (hash: 3KZYWiJqZH8n9U/9eCnSUD7SavXQ/Ekzxh7yjVvlx04=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl
                          rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
        Validity
            Not Before: Apr 17 06:43:36 2026 GMT
            Not After : Apr 24 06:43:36 2026 GMT
        Subject: CN=69e1d699-257f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:b3:8e:31:32:fc:24:58:7c:71:8a:de:50:
                    37:9c:53:d8:5c:cc:a3:df:f4:ea:3a:19:2a:7b:e8:
                    3c:2d:dd:25:fe:34:d6:f3:bc:ce:24:80:8d:5f:84:
                    c6:43:69:97:68:7d:29:1d:d4:7e:c8:3f:c5:ac:0a:
                    a4:ff:5a:a5:b8:e1:83:e8:18:9f:87:ee:80:b3:f0:
                    50:0a:2a:47:bd:f8:c7:cf:29:8f:5b:c5:0e:05:7e:
                    63:fe:e0:79:37:90:19:67:7e:dc:da:5a:77:e5:55:
                    ee:ec:e3:10:0d:95:e6:2b:5a:e4:39:9b:6c:66:f4:
                    bd:51:33:63:3a:3a:d2:11:67:77:f9:be:2b:a8:df:
                    79:e8:07:d1:88:0c:37:0d:fe:4b:96:eb:34:ee:1e:
                    4a:72:cc:e7:17:67:87:f5:b9:22:33:5e:95:7b:2a:
                    41:3d:f8:4d:58:d0:b9:01:ae:68:de:f5:3e:13:8c:
                    f8:99:67:42:25:53:82:56:46:d8:b0:90:8f:45:58:
                    9d:a1:c6:e4:28:40:1f:60:6b:e0:2e:63:0a:1b:32:
                    08:29:80:42:00:57:1b:b7:f3:ce:d1:a7:e3:45:52:
                    51:af:bc:ee:e6:9d:21:6f:10:5d:a7:a1:44:a5:35:
                    fb:c7:1c:92:82:5a:16:d3:0d:9e:76:8d:78:08:39:
                    25:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:40:C8:E6:BA:1D:3E:61:47:8E:E7:6C:26:CA:B2:8F:C5:D7:63:A4
            X509v3 Authority Key Identifier:
                keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:cb:4b:f9:ac:de:a7:ed:d7:f6:9f:d0:40:b1:a9:53:b7:b5:
         0d:46:12:47:86:12:41:7b:ef:0d:8f:1a:97:d9:b0:43:b2:ed:
         88:0b:4a:ba:35:5d:28:6e:87:01:ba:36:83:56:27:8a:ae:bf:
         df:7f:0b:5f:b6:25:34:50:ef:a7:38:e6:bf:ba:86:05:a6:90:
         c3:09:c2:59:f1:54:a1:24:b1:de:9c:02:2b:c1:2e:72:d2:9b:
         27:18:aa:fb:1f:60:2e:60:16:8f:61:f7:b4:ed:08:2e:50:f1:
         25:d1:b7:ad:cc:79:59:c1:dd:d1:94:9b:32:53:39:43:7b:c9:
         79:52:0c:9a:5f:59:5c:8d:b0:42:3e:59:f9:5d:6b:7d:b6:ee:
         c2:5c:c4:68:ed:3a:25:8a:d5:db:1d:90:c9:a1:c9:f7:80:f0:
         c9:bb:ef:1e:ef:54:f9:95:b6:4a:d9:bb:4e:39:9d:b8:1d:6d:
         04:cd:2f:c1:2e:bd:f1:59:e7:4c:6e:0a:4e:3f:f2:b9:b9:21:
         6d:5c:91:ac:2f:46:20:8a:d2:d0:70:0a:1c:fa:54:88:b3:13:
         80:44:2d:51:f6:51:70:88:fc:25:8c:a9:ef:2d:8a:4b:78:60:
         d8:52:f8:6e:4e:83:76:0b:ec:52:7a:af:58:48:4f:7b:8c:1a:
         dc:fc:69:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTM0OTMxMTAvBgNVBAUTKEM4QjJCQzNCOEFCMUVCQUU0QTc0M0Y5MEQ4QzhBMURG
RDFENENFMTcwHhcNMjYwNDE3MDY0MzM2WhcNMjYwNDI0MDY0MzM2WjAYMRYwFAYD
VQQDEw02OWUxZDY5OS0yNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuS6zjjEy/CRYfHGK3lA3nFPYXMyj3/TqOhkqe+g8Ld0l/jTW87zOJICNX4TG
Q2mXaH0pHdR+yD/FrAqk/1qluOGD6Bifh+6As/BQCipHvfjHzymPW8UOBX5j/uB5
N5AZZ37c2lp35VXu7OMQDZXmK1rkOZtsZvS9UTNjOjrSEWd3+b4rqN956AfRiAw3
Df5Llus07h5KcsznF2eH9bkiM16VeypBPfhNWNC5Aa5o3vU+E4z4mWdCJVOCVkbY
sJCPRVidocbkKEAfYGvgLmMKGzIIKYBCAFcbt/PO0afjRVJRr7zu5p0hbxBdp6FE
pTX7xxySgloW0w2edo14CDklNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP9AyOa6
HT5hR47nbCbKso/F12OkMB8GA1UdIwQYMBaAFMiyvDuKseuuSnQ/kNjIod/R1M4X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzQ5My8wNUVDMUQxNDFF
RjkxMUYwQjQxMUUzMkVDNEY5QUUwMi95TEs4TzRxeDY2NUtkRC1RMk1paDM5SFV6
aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lMSzhPNHF4NjY1S2RELVEyTWloMzlIVXpoYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MzQ5My8wNUVDMUQxNDFFRjkxMUYwQjQxMUUzMkVDNEY5QUUwMi95TEs4TzRxeDY2
NUtkRC1RMk1paDM5SFV6aGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA08tL+azep+3X9p/QQLGpU7e1DUYSR4YSQXvvDY8al9mwQ7LtiAtKujVdKG6H
Abo2g1Yniq6/338LX7YlNFDvpzjmv7qGBaaQwwnCWfFUoSSx3pwCK8EuctKbJxiq
+x9gLmAWj2H3tO0ILlDxJdG3rcx5WcHd0ZSbMlM5Q3vJeVIMml9ZXI2wQj5Z+V1r
fbbuwlzEaO06JYrV2x2QyaHJ94DwybvvHu9U+ZW2Stm7TjmduB1tBM0vwS698Vnn
TG4KTj/yubkhbVyRrC9GIIrS0HAKHPpUiLMTgEQtUfZRcIj8JYyp7y2KS3hg2FL4
bk6DdgvsUnqvWEhPe4wa3Pxp7w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:33:55 2026 by rpki-client