Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
File:                     y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft (raw, json)
Hash identifier:          QAfBoMJfV28/BrnU2zeM3RGno4U3jBEjdt4WQ/KH/+c=
Subject key identifier:   ED:C5:74:DE:68:5C:38:3C:EC:2D:A8:1A:E4:21:4C:7F:50:25:9C:31
Authority key identifier: CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47
Certificate issuer:       /CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847
Certificate serial:       04A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
Manifest number:          0497
Signing time:             Thu 16 Apr 2026 23:53:05 +0000
Manifest this update:     Thu 16 Apr 2026 23:53:04 +0000
Manifest next update:     Thu 23 Apr 2026 23:53:04 +0000
Files and hashes:         1: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl (hash: MBrYscGv+jbG/DmLEwWSr5lal+wegH3t6RtoIOPb40w=)
                          2: ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa (hash: m8HrRpjyvQWeBhp94E8HFgt5mQuokJM0t43Pm2rxy7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl
                          rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184 (0x4a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913406B, serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847
        Validity
            Not Before: Apr 16 23:53:04 2026 GMT
            Not After : Apr 23 23:53:04 2026 GMT
        Subject: CN=69e17660-b6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:77:3c:70:e6:86:b0:1d:ab:63:a9:4d:98:
                    45:48:c4:d6:08:eb:46:a2:2d:ae:bb:f0:d9:02:23:
                    23:c3:82:76:13:58:e3:8a:29:4e:2d:98:0f:b9:ac:
                    8e:45:05:ac:fa:44:c6:7c:4c:9d:7e:fd:3a:e4:84:
                    da:7e:87:57:da:54:2b:77:02:3c:e5:2d:3f:af:4f:
                    61:92:54:83:eb:81:31:38:46:92:93:a0:64:39:b8:
                    89:a7:5a:82:e1:c0:c7:39:8e:74:b7:f8:7f:0c:30:
                    fa:a4:dc:42:18:f1:83:5d:44:da:8f:0d:2d:6f:6c:
                    5b:80:c9:02:6a:bd:68:db:de:b0:2a:11:2c:11:75:
                    63:07:fc:87:86:09:ad:db:b5:51:55:e4:84:a9:67:
                    75:a7:bf:dc:06:22:db:11:5a:8e:d1:f0:ec:da:68:
                    d2:b1:f0:74:e9:91:66:b5:26:1c:af:5d:50:42:4d:
                    45:65:d0:22:c0:f9:ec:c1:74:fb:3a:4a:43:b1:c2:
                    b4:93:83:f6:a3:fa:dc:d8:4c:c1:49:9b:67:e6:26:
                    ed:c3:8b:b6:9a:29:2e:34:4a:08:c4:36:3b:d7:31:
                    ba:08:e8:51:6f:3e:35:f1:05:1e:ed:59:f7:77:67:
                    65:61:84:b3:4d:70:c2:72:1c:ed:1d:db:82:ac:27:
                    a2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C5:74:DE:68:5C:38:3C:EC:2D:A8:1A:E4:21:4C:7F:50:25:9C:31
            X509v3 Authority Key Identifier:
                keyid:CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:7c:a6:6d:0f:d1:bd:a8:9b:43:de:ad:e6:73:dd:21:22:fb:
         bb:8d:e0:2b:b3:e9:91:34:4b:fd:04:14:85:af:93:95:c8:15:
         77:f3:b4:a7:5f:22:f5:34:3a:12:2f:70:9b:a2:09:2d:1a:d2:
         44:d8:24:5c:27:06:c9:f6:d9:49:c1:39:0e:9d:d1:52:47:b7:
         8b:60:bd:f4:92:28:37:28:71:5a:4a:b4:e1:73:ee:98:ea:1d:
         97:c8:08:f3:76:00:a5:2f:f7:64:03:06:e0:c5:a2:69:a8:53:
         7c:c8:df:c4:aa:cb:84:03:81:97:3d:9f:7d:79:0c:d7:20:89:
         c2:aa:7c:09:f1:b2:65:ec:32:e4:79:45:95:eb:88:4a:89:0b:
         9c:44:ef:fb:ec:8a:2f:57:ec:84:08:39:2d:42:06:0c:28:60:
         01:c7:cd:fa:5a:b5:62:39:b5:8b:2b:9e:8b:a3:ee:8d:d7:23:
         c8:45:bf:63:c4:71:b2:be:9f:4b:f6:36:68:c6:f5:c3:c7:be:
         e8:de:01:10:2f:22:81:97:38:de:06:0d:a6:f3:a8:86:3a:93:
         c7:5a:b8:18:dd:4b:6c:0d:a8:56:bd:93:0f:ba:cd:2e:de:a1:
         7a:63:ae:ee:3f:c8:03:85:36:73:a7:16:d7:9d:2d:63:d0:cf:
         a1:ce:1c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:24 2026 by rpki-client