Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
File:                     yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft (raw, json)
Hash identifier:          b+l04KlKgDf7HN3QJ40RCVLOU/3hTPoLUjTZk3wbpCg=
Subject key identifier:   E5:ED:E9:1C:CD:AF:A4:DC:60:D1:4C:00:F5:94:C9:88:68:7F:C1:8C
Authority key identifier: C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82
Certificate issuer:       /CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
Certificate serial:       1021
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
Manifest number:          100B
Signing time:             Thu 16 Apr 2026 17:23:21 +0000
Manifest this update:     Thu 16 Apr 2026 17:23:21 +0000
Manifest next update:     Thu 23 Apr 2026 17:23:21 +0000
Files and hashes:         1: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl (hash: I0DonoNkt2VHFcVmpCUjHzAEohokvfvIxsZ1tZiXcCk=)
                          2: 05449490E17B11EC93AB7473C4F9AE02.roa (hash: b4RHmMbFBRWJFcnsmHpleiRHLLRNwyJ8lJiARBOoS8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl
                          rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4129 (0x1021)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B2EE, serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
        Validity
            Not Before: Apr 16 17:23:21 2026 GMT
            Not After : Apr 23 17:23:21 2026 GMT
        Subject: CN=69e11b09-9db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:aa:10:35:58:65:18:4d:e1:df:c3:ec:f3:5a:
                    2a:d3:78:de:ca:83:4c:6a:ab:43:99:56:61:a9:0a:
                    dd:a2:ec:6b:28:70:50:70:75:8c:0d:32:28:ae:6a:
                    08:b7:d9:90:cc:52:28:75:2b:56:0e:a1:71:db:b9:
                    bb:83:86:ea:08:ca:7a:6a:bc:c2:19:53:6e:82:95:
                    a1:29:54:30:3d:8b:f8:8b:6a:bd:98:8c:22:7d:99:
                    d4:7a:7a:56:e5:cc:43:a4:25:d5:b7:1b:da:7f:bb:
                    00:16:37:31:41:d9:de:87:24:4f:a8:5f:6a:b6:79:
                    e7:2c:ad:9f:ca:83:fb:f4:31:ec:b1:be:d1:15:de:
                    95:6e:09:12:27:1e:27:77:ae:0a:e0:98:e8:bd:f2:
                    8a:d5:51:8c:28:a2:96:03:c9:5c:3a:cc:7b:5b:fd:
                    2a:34:d2:a5:e8:31:70:90:2e:14:f7:db:bf:28:ed:
                    f9:8f:2b:14:17:a5:e1:3e:53:53:53:d2:e1:df:e0:
                    5c:d7:fe:a4:d7:30:88:15:58:3c:6f:99:88:ec:00:
                    83:e4:53:d2:72:36:71:a8:96:ec:07:0a:e4:c3:4d:
                    a5:35:53:70:fd:ff:da:c2:97:12:e2:1b:34:38:ec:
                    7b:f3:41:e5:0b:db:45:a5:35:00:cc:4e:3e:eb:7e:
                    9e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:ED:E9:1C:CD:AF:A4:DC:60:D1:4C:00:F5:94:C9:88:68:7F:C1:8C
            X509v3 Authority Key Identifier:
                keyid:C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f3:a6:2d:4c:da:04:52:32:16:4a:4a:90:ab:8a:85:3f:42:
         ce:b7:48:55:5b:29:0f:b2:8e:93:ac:07:67:f0:ce:c1:4c:99:
         76:15:60:41:73:7d:0d:7e:e5:5e:5c:47:52:fd:8e:2a:f8:a6:
         ef:5c:61:56:f5:16:24:0c:e1:37:31:5f:a9:3e:ea:17:df:03:
         79:9b:de:44:4a:35:4d:d6:eb:d6:5b:7c:bd:93:94:1e:11:b4:
         60:3b:0d:3a:35:9d:b5:72:a5:be:b2:e1:d3:a9:c0:46:c4:bd:
         5e:c4:2a:98:6e:db:a1:a1:36:f2:04:48:ba:a2:fa:a5:6b:b5:
         96:07:8d:06:9b:97:fa:85:1f:6e:18:f2:c5:a6:bc:59:36:5e:
         4b:ad:03:8c:8e:47:54:29:0e:06:23:56:62:07:ac:af:af:50:
         ca:b0:3b:09:88:77:7d:79:eb:bc:f2:f3:0e:5f:7a:dc:bc:98:
         b2:ed:1f:83:48:2a:23:a5:44:24:ef:23:9c:08:fd:80:f5:22:
         5b:7f:45:3b:93:e7:e9:5d:ac:24:8c:44:15:40:3d:e0:b3:47:
         2e:e8:c5:f3:bd:e3:20:36:33:f4:0d:ad:41:bb:cf:b9:8e:66:
         c8:4e:a9:59:e1:a7:a4:bf:59:d8:0b:9e:5f:af:1b:8b:ea:9a:
         16:59:d0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:46 2026 by rpki-client