Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
File:                     yoPUPlpeWcd1mxubL72YqUff07w.mft (raw, json)
Hash identifier:          Y2ZIsEYhv+MD6TbKWJHyEEhNo3JxJ+9Cuv6dsy0uKVc=
Subject key identifier:   89:0A:FE:E4:1C:6F:FE:FF:7D:C5:E8:E3:A8:66:AC:A5:FA:B4:AE:1A
Authority key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC
Certificate issuer:       /CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
Certificate serial:       1141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
Manifest number:          1110
Signing time:             Thu 16 Apr 2026 17:14:10 +0000
Manifest this update:     Thu 16 Apr 2026 17:14:10 +0000
Manifest next update:     Thu 23 Apr 2026 17:14:10 +0000
Files and hashes:         1: yoPUPlpeWcd1mxubL72YqUff07w.crl (hash: XU1RxgDzDoaSC+opijQoHhfkDbBHTbiACBaQQNmoUN0=)
                          2: AAAA30A6288411EEAD22D65DC4F9AE02.roa (hash: 7K/QpVAO7JoVbT1z1p+Qj6Yu5pdtMluMhKw9vV8LigY=)
                          3: 7B306A34218D11EC87C96D6DC4F9AE02.roa (hash: UaBguah8aqrFfyBedD0PzoPcWPfm260vsagvZpaZCng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl
                          rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4417 (0x1141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6, serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
        Validity
            Not Before: Apr 16 17:14:10 2026 GMT
            Not After : Apr 23 17:14:10 2026 GMT
        Subject: CN=69e118e2-57d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:b0:55:96:2c:a9:5e:50:55:8c:ee:6a:f6:
                    24:b0:5b:11:f7:63:85:8d:5c:da:e0:c1:b8:4e:a9:
                    13:e7:c2:01:e8:b0:a1:c0:20:7e:1f:3a:45:93:4f:
                    c5:bd:57:99:97:f4:ea:6b:0a:be:ac:e2:cf:76:e2:
                    8c:4a:ca:46:24:8a:b7:33:04:76:6e:35:68:e6:af:
                    b1:98:8e:0d:87:d1:e2:6a:f7:a3:30:93:f7:63:fb:
                    34:89:ae:7e:33:0e:f6:fc:d0:f7:f7:54:f8:59:2e:
                    a8:e3:13:1d:57:71:53:70:2b:f5:f0:a8:1f:cf:a2:
                    42:67:f5:dd:e4:cf:5c:3e:e3:21:81:df:d1:64:db:
                    44:16:2c:3a:38:28:3f:c3:bd:c2:90:09:30:93:fa:
                    dd:d2:22:c9:60:56:5a:bc:ee:52:27:bd:56:10:21:
                    9b:99:bf:67:b5:a8:fc:9f:1c:ca:38:a2:a0:7c:70:
                    cd:f4:bf:18:a2:2b:bc:63:90:a0:e6:e4:86:8f:e6:
                    06:29:83:d5:23:bf:1d:d3:9d:64:ca:33:80:a9:80:
                    51:ec:1d:09:79:66:84:d9:c6:69:c3:23:13:df:ba:
                    14:ab:78:b9:bb:21:d5:88:cd:91:17:f6:e0:3c:22:
                    e2:ab:23:b1:08:f9:6d:36:43:ae:e9:45:70:01:ff:
                    12:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0A:FE:E4:1C:6F:FE:FF:7D:C5:E8:E3:A8:66:AC:A5:FA:B4:AE:1A
            X509v3 Authority Key Identifier:
                keyid:CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a7:a8:11:e9:68:22:bb:9f:6a:bd:0d:b0:fe:70:6c:6d:f7:
         68:87:61:47:04:2f:06:3b:b4:a6:96:be:9e:bc:1a:6a:a9:91:
         93:bb:09:38:8e:51:ef:5d:89:17:54:5e:73:ed:c7:f4:b5:ae:
         bf:93:ab:bc:a2:36:5d:90:09:32:ae:73:6d:dc:c9:b2:aa:5d:
         b3:55:42:f6:35:cf:7f:26:d4:12:f2:51:0e:a2:f1:5c:2d:fc:
         e9:70:7c:7b:1c:05:5e:41:92:5c:49:39:c5:e0:7c:7b:91:65:
         98:d0:f6:d5:e9:f9:fe:2b:86:fd:53:50:7e:6d:41:0f:fa:6e:
         a1:ce:b1:78:69:43:2b:17:41:a6:f2:2c:cf:18:58:99:f4:0d:
         3e:a3:5d:a3:03:75:16:56:a9:5c:f8:05:20:54:85:19:74:85:
         c1:4c:b3:68:cb:4f:70:19:b8:94:c3:42:b9:2f:22:c4:3c:99:
         a3:6c:88:04:9b:aa:f8:02:b2:06:80:b0:56:f5:f1:1f:41:73:
         76:55:17:34:05:20:8f:5d:b5:ad:21:ac:67:49:98:cf:39:d3:
         52:9d:c9:cf:a6:15:1e:09:9c:ac:46:e0:ce:35:e6:a7:33:77:
         08:7d:9b:f4:d9:29:e0:f8:d1:12:95:99:e5:28:ea:37:cc:e4:
         5c:8e:97:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:33 2026 by rpki-client