Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
File:                     YGWA927TklN9X8ollpTPkmFBfEE.mft (raw, json)
Hash identifier:          MgE77Xea+sGsaElkNWSjlx42n6g5/32FyWHcqZX6Ryc=
Subject key identifier:   C0:21:4B:E9:55:38:85:DB:4E:F1:54:91:B5:8A:A4:F9:9F:3A:BA:5A
Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41
Certificate issuer:       /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41
Certificate serial:       0679
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
Manifest number:          0662
Signing time:             Thu 16 Apr 2026 22:36:48 +0000
Manifest this update:     Thu 16 Apr 2026 22:36:47 +0000
Manifest next update:     Thu 23 Apr 2026 22:36:47 +0000
Files and hashes:         1: YGWA927TklN9X8ollpTPkmFBfEE.crl (hash: SDZtVHh2iaA4suvNWsJmw/C4mPQ9dWsCiCZpYoWpfvY=)
                          2: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (hash: oYSfn8Lw7ZTaZnCe3VDuK6B1QgB0S+Rqon8qQPIAWtk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl
                          rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1657 (0x679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41
        Validity
            Not Before: Apr 16 22:36:47 2026 GMT
            Not After : Apr 23 22:36:47 2026 GMT
        Subject: CN=69e16480-7ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e2:95:7a:97:5c:97:09:a6:d8:fe:db:3a:23:
                    ca:0c:78:24:e4:49:83:da:8c:77:05:b3:3d:65:fe:
                    e3:e6:a2:7d:15:f4:20:15:4d:19:b0:67:78:c9:85:
                    e5:03:04:2e:72:99:96:d4:4f:1c:4b:d2:cc:94:ca:
                    1f:71:9f:ec:5d:5d:09:15:fe:92:a6:82:f5:78:14:
                    6c:38:3a:cc:26:f8:ee:09:33:99:f4:31:28:43:3f:
                    49:40:61:b8:7c:43:3e:20:44:82:47:d4:3e:3d:42:
                    c2:fc:58:11:68:98:cf:26:ca:44:79:e5:b5:4f:b0:
                    80:f3:23:87:93:8a:b6:50:f9:b8:7b:9a:d0:d4:88:
                    90:10:60:4c:27:91:0c:4a:86:c2:e2:d8:25:86:15:
                    ae:c9:c6:cf:26:ff:7e:ed:e3:4a:66:55:ce:e9:9c:
                    49:a7:07:b9:bc:4d:44:09:4b:ae:06:c9:b8:2e:f7:
                    66:f0:ce:3e:3d:34:2d:f9:43:01:bd:1f:95:4b:05:
                    0d:c5:80:cb:d7:1b:b0:18:4b:ee:57:76:9c:9c:9a:
                    bc:b3:5d:b0:b9:00:a9:63:2f:0e:e0:b7:b6:b9:1c:
                    9f:5e:ba:28:7a:b0:ed:24:9e:da:b3:d8:8a:0a:37:
                    3d:13:1b:27:5f:99:7a:0c:36:af:41:00:9f:37:51:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:21:4B:E9:55:38:85:DB:4E:F1:54:91:B5:8A:A4:F9:9F:3A:BA:5A
            X509v3 Authority Key Identifier:
                keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:30:4a:0b:3c:56:2e:cb:1b:7a:b4:30:e7:3c:cf:f0:fb:c0:
         37:af:5a:2f:e9:09:72:6d:96:14:43:88:5d:21:78:e4:bb:88:
         eb:9b:07:36:05:29:48:e0:6b:57:70:68:9f:16:38:27:38:cb:
         c5:dd:9e:fe:e1:a6:9c:f4:b0:54:ce:84:c5:8f:7d:8c:9e:be:
         8d:81:f0:eb:e3:f9:e9:5a:6b:3f:7a:49:31:6f:21:d1:9f:41:
         59:6a:a3:34:57:46:96:35:8b:c9:b1:f4:12:3c:bb:12:6a:d5:
         d2:d4:4a:b8:1b:3c:1e:64:f4:dd:8b:d8:31:06:da:0e:5e:ea:
         f0:b8:e4:c5:b4:82:02:4d:d5:98:10:0b:b6:89:a0:d7:55:f5:
         09:2e:f5:9d:51:61:bf:61:96:ad:64:63:25:a6:e6:09:eb:6a:
         74:1a:6d:17:b4:9e:4b:56:9d:96:58:af:2c:ab:f0:a8:e3:3f:
         c4:56:e6:b8:79:33:99:bb:ee:c3:7d:a3:34:05:0b:bd:a8:f8:
         2b:e6:c3:fb:5b:f3:12:5d:1b:48:88:f8:b2:59:5d:24:cd:61:
         64:83:ff:7d:10:65:0a:5b:51:fa:ec:79:15:cd:07:a6:db:12:
         c3:6b:85:d9:1c:a4:96:08:48:44:89:da:07:47:3e:39:44:9b:
         2e:c4:4a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:51 2026 by rpki-client