Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
File:                     Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json)
Hash identifier:          G8qlHr3+sk8Vca8gF7iEhffCQ4YX4BrAIWs4KKXw+zU=
Subject key identifier:   33:BB:0D:A7:F0:CE:B7:97:0A:77:4E:72:39:C3:99:21:32:E5:B8:4B
Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
Certificate issuer:       /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Certificate serial:       0256
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
Manifest number:          024C
Signing time:             Fri 17 Apr 2026 02:06:37 +0000
Manifest this update:     Fri 17 Apr 2026 02:06:36 +0000
Manifest next update:     Fri 24 Apr 2026 02:06:36 +0000
Files and hashes:         1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: 2/lAtdjMF/b67+w1OmjgLTW/LI7XhIXiaJ3qUWWXUss=)
                          2: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: ZJ1JXD8OMZ1/bFwQ4CUwNfMJD2mA1nTwWCd7m4pPBcY=)
                          3: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: IQ7wQrkp6KFdnuD/CeQ1UB+HAtSyDPflLHSW+K88QUs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl
                          rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91307F0, serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
        Validity
            Not Before: Apr 17 02:06:36 2026 GMT
            Not After : Apr 24 02:06:36 2026 GMT
        Subject: CN=69e195ad-a6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:d6:8d:8e:ff:97:fa:b7:ca:8d:19:d2:e0:
                    4f:1d:bc:4f:ca:c3:97:11:fa:06:9f:a2:0d:6a:05:
                    4a:03:4c:88:5a:83:2a:ac:60:24:58:e1:dc:9b:d4:
                    bc:67:23:9d:86:74:df:af:49:05:f3:ca:86:6b:35:
                    1e:3e:e9:ed:1d:bb:2b:37:64:62:29:9e:53:5c:9c:
                    13:b7:20:b7:5e:85:8a:f1:e9:1b:0e:ce:51:c8:70:
                    de:74:5f:38:c7:14:34:ff:61:fb:e3:c6:a9:f5:a2:
                    03:07:63:39:31:d1:4b:ad:cc:9d:a3:06:d0:14:af:
                    ac:0e:66:43:64:dc:71:70:4b:74:6a:ba:d8:93:67:
                    aa:42:a1:c9:fd:8c:ee:70:62:44:8c:cb:d3:90:42:
                    da:a3:1a:f2:30:f4:e9:fc:62:94:2a:b3:59:bd:74:
                    e9:b7:75:c1:e6:62:e4:9b:33:42:0e:3c:d4:d1:06:
                    f0:a8:50:32:df:fd:60:56:48:d7:49:21:0e:db:20:
                    fb:e3:d4:5a:c3:49:c6:70:5e:d4:94:5f:59:5d:c6:
                    fb:27:65:1f:87:d4:cb:37:38:85:9c:25:ef:d5:c4:
                    df:bb:c4:06:5a:dc:96:fa:55:2f:46:cc:3a:5e:6f:
                    97:7a:b1:d7:67:b5:b9:ff:03:01:e0:ff:6f:fc:98:
                    50:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BB:0D:A7:F0:CE:B7:97:0A:77:4E:72:39:C3:99:21:32:E5:B8:4B
            X509v3 Authority Key Identifier:
                keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5e:97:07:f1:bc:e7:85:cf:53:19:60:72:ac:42:80:1d:25:
         2f:c9:5b:e8:4b:06:ef:6a:d5:29:8a:92:5d:87:13:37:61:cb:
         7c:29:e5:a7:ea:b5:7a:d4:eb:5b:fa:d4:49:01:25:e8:96:05:
         c8:8c:c9:f3:a8:ce:c7:ea:f2:44:cd:72:07:aa:ce:b1:9c:b4:
         da:84:14:ca:12:68:ca:0a:a0:f0:b4:d0:0d:05:21:e6:96:ca:
         3e:a4:ac:4d:e2:85:41:b2:e4:04:c6:fa:6b:f5:f2:12:64:3e:
         4e:dd:0e:f8:20:4c:43:50:4b:38:29:32:49:30:b0:06:e5:e9:
         3d:bc:85:ce:e4:f4:16:79:7e:68:1f:19:4a:39:70:c1:a5:50:
         5b:60:c7:2d:b6:55:db:20:6e:cf:ec:73:fd:a8:53:05:d3:e6:
         b1:a4:ff:f4:67:71:08:10:a1:c1:51:8a:5a:9c:7e:ce:31:b8:
         3f:71:a9:ce:9a:4b:05:a5:d5:08:ab:3d:a7:80:ff:b1:e3:72:
         59:d7:8a:b9:44:6f:ae:5c:79:44:59:c2:35:7a:06:4d:97:5d:
         c3:4e:61:1f:9e:9d:8b:ab:a3:9c:0f:94:8d:4e:25:9f:c1:39:
         ad:4d:e5:56:a4:c4:45:2f:2f:44:b1:24:b9:2c:5d:69:77:f1:
         85:1b:16:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:52 2026 by rpki-client