Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.mft
File:                     YrFUuAkE6pwnkEc1WAKf2XoEc7M.mft (raw, json)
Hash identifier:          u/S0nUAy7WDS+j+UFW/OOLexbNYKiYljt3glWoV56sY=
Subject key identifier:   32:6C:45:89:94:78:38:1C:09:87:55:40:20:DD:28:EF:C7:FD:95:A5
Authority key identifier: 62:B1:54:B8:09:04:EA:9C:27:90:47:35:58:02:9F:D9:7A:04:73:B3
Certificate issuer:       /CN=A9115620/serialNumber=62B154B80904EA9C2790473558029FD97A0473B3
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrFUuAkE6pwnkEc1WAKf2XoEc7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.mft
Manifest number:          0130
Signing time:             Fri 17 Apr 2026 05:14:15 +0000
Manifest this update:     Fri 17 Apr 2026 05:14:14 +0000
Manifest next update:     Fri 24 Apr 2026 05:14:14 +0000
Files and hashes:         1: YrFUuAkE6pwnkEc1WAKf2XoEc7M.crl (hash: XQ2UhDO73cuEmQhd3fWW/Znz6/2OXpyzemujaDT4oL0=)
                          2: 83B2675C6BA911EFADEBED84C4F9AE02.roa (hash: jEbTl1dy3t2akGjkXyIfyFC++X66othj+RdQ2W+UA2E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.crl
                          rsync://rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrFUuAkE6pwnkEc1WAKf2XoEc7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115620, serialNumber=62B154B80904EA9C2790473558029FD97A0473B3
        Validity
            Not Before: Apr 17 05:14:14 2026 GMT
            Not After : Apr 24 05:14:14 2026 GMT
        Subject: CN=69e1c1a6-6caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:42:0f:bc:5b:c5:61:ca:7c:21:76:a6:af:
                    9d:7a:91:80:06:6e:61:55:ed:47:75:87:45:c8:74:
                    96:ba:d6:fa:03:09:bd:d3:c6:25:0a:36:d9:dd:19:
                    25:38:20:67:2e:7b:bd:4c:ae:ac:e8:1d:24:d0:89:
                    5a:d3:1d:b9:e4:34:34:ae:29:49:a2:6c:27:37:96:
                    15:36:9b:39:f6:b4:14:c1:ad:49:b7:24:46:eb:1e:
                    56:ad:bf:05:19:ae:a2:3e:1b:58:e3:63:ff:f4:a2:
                    11:ac:e4:4c:ca:16:7a:22:7c:bf:0e:b3:50:bb:c2:
                    e9:52:ab:0a:ec:67:b0:76:6f:cb:d2:b9:d1:ff:e3:
                    fd:e5:f2:c7:5d:19:30:ec:44:41:0a:18:22:04:5e:
                    9e:c7:f2:36:a0:55:92:14:cc:af:78:f3:f9:5b:78:
                    82:77:ba:a9:fc:7a:39:a6:fd:75:ad:a2:7a:ef:17:
                    c6:b9:ec:6d:fc:2d:f7:08:b8:1a:5a:87:65:fe:33:
                    d0:43:48:0e:66:56:ce:8f:72:ce:72:46:35:ed:1d:
                    7b:72:f9:88:6a:3a:b1:c2:b5:2f:66:05:73:d6:95:
                    7f:69:75:63:ec:ce:cd:c6:d9:5b:e2:27:1e:90:07:
                    6b:30:66:76:e1:37:bf:0a:5e:9b:75:60:2e:1a:45:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6C:45:89:94:78:38:1C:09:87:55:40:20:DD:28:EF:C7:FD:95:A5
            X509v3 Authority Key Identifier:
                keyid:62:B1:54:B8:09:04:EA:9C:27:90:47:35:58:02:9F:D9:7A:04:73:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrFUuAkE6pwnkEc1WAKf2XoEc7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:6d:1c:d9:31:b2:0f:30:84:58:11:17:de:80:93:82:5e:33:
         cb:02:3b:7c:f1:fa:2e:75:f3:6b:c9:21:55:bc:b4:85:09:35:
         da:89:16:7d:e7:9e:03:6e:97:79:b8:06:e2:b5:40:ff:ac:d2:
         8c:63:01:09:92:98:4a:59:3e:25:78:e8:7f:cc:48:9e:9e:ba:
         ea:18:9a:1c:8c:a9:67:86:50:db:9c:c9:a7:7d:b2:f8:37:54:
         17:ba:c8:f4:ff:ed:bd:fa:f7:7e:b8:74:a4:9f:60:77:fa:3c:
         51:5d:a9:a5:7d:be:88:d8:13:9b:98:e3:76:59:71:89:1a:63:
         83:9e:91:94:24:a4:17:e9:28:db:91:ab:67:a2:b7:a2:77:5d:
         13:9f:79:f3:59:44:fd:70:31:39:7c:60:30:2a:a3:e8:b0:4b:
         82:ff:04:ef:fd:f2:d6:9a:48:ce:04:29:d7:7b:67:22:f8:10:
         88:92:55:42:ff:ba:f7:0d:0d:20:88:f8:80:f9:2c:12:76:1e:
         db:3e:af:a7:1a:94:05:4a:6d:a9:29:28:c2:08:34:b1:69:0f:
         ae:fc:a2:98:2a:e6:54:a9:8f:b2:3d:11:14:d8:33:d7:a8:84:
         e6:0f:84:e1:82:5b:9f:38:42:71:db:54:06:8c:12:40:1e:82:
         14:7b:1a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:21 2026 by rpki-client