Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
File:                     yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft (raw, json)
Hash identifier:          igPBdAs+bqr0BawF/+fssVBXT2nk8vCM7zR2qe7t9rc=
Subject key identifier:   8B:83:E5:36:A7:A6:85:4E:E6:68:AB:C7:FF:31:E0:BC:E5:14:65:F1
Authority key identifier: CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1
Certificate issuer:       /CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
Certificate serial:       0289
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
Manifest number:          0284
Signing time:             Fri 17 Apr 2026 01:33:49 +0000
Manifest this update:     Fri 17 Apr 2026 01:33:48 +0000
Manifest next update:     Fri 24 Apr 2026 01:33:48 +0000
Files and hashes:         1: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl (hash: jfMFIznUaLesVHXZzK20/0V1tAM3Bn2W8+211qng1g8=)
                          2: D479653E5F2911EDB481A53EC4F9AE02.roa (hash: 6fQ8BTg937xYOKGhZoVAvzO9m8PPc+YDi2JSSj53F7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl
                          rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649 (0x289)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913814E, serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
        Validity
            Not Before: Apr 17 01:33:48 2026 GMT
            Not After : Apr 24 01:33:48 2026 GMT
        Subject: CN=69e18dfd-f265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d9:3f:ea:a8:ba:b1:97:59:f6:04:01:39:7c:
                    3a:7c:e0:c1:a9:72:c6:aa:6f:4a:6f:bc:10:36:91:
                    c5:7d:b5:8d:da:70:f0:b0:04:2f:b3:df:6c:a0:c2:
                    77:14:e6:09:ce:df:9e:ef:1b:c2:1f:a2:ea:42:bb:
                    c8:02:db:74:4a:fe:3f:d9:5c:fe:70:19:1a:e8:e0:
                    9a:77:3d:b1:55:78:5d:ef:02:12:ee:0d:52:b3:50:
                    8b:12:3d:be:4c:ce:56:43:7a:64:3c:97:21:64:5d:
                    01:99:92:42:3b:b6:c7:f9:fa:34:98:2e:65:9e:59:
                    f1:ee:dc:e5:fd:1d:29:68:33:41:1b:39:9b:7d:02:
                    e4:ba:8d:dd:60:5f:b4:b3:23:45:52:e3:d7:de:6d:
                    54:0e:87:7c:8e:fb:9b:c9:73:4d:01:59:47:69:f7:
                    71:f4:82:f6:97:81:f5:4f:14:bd:3a:71:3d:02:4e:
                    46:c9:f2:de:f1:f7:57:2f:f6:47:c3:8a:1f:bc:c2:
                    a4:e5:85:75:5b:8f:74:e4:fd:5a:e8:fc:81:26:19:
                    ef:61:c5:7d:5f:f2:3f:9c:0f:33:ac:0d:51:f2:88:
                    0d:f2:d8:4a:b2:02:5d:8b:f6:4b:6b:54:96:61:2b:
                    d1:8a:76:1e:ad:cd:af:07:58:e9:09:2b:23:2a:10:
                    d5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:83:E5:36:A7:A6:85:4E:E6:68:AB:C7:FF:31:E0:BC:E5:14:65:F1
            X509v3 Authority Key Identifier:
                keyid:CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d5:08:95:9f:8a:97:33:ff:0f:4a:29:45:58:eb:2f:22:18:
         f3:b2:ba:ab:1f:5c:80:31:bb:c1:d0:3f:1d:bf:79:89:e1:72:
         87:f1:2e:13:b5:03:af:c1:14:30:b6:d7:e3:64:86:12:e2:de:
         91:bb:53:4c:fd:73:c9:00:ef:0c:40:ac:74:01:b5:0f:17:db:
         dc:fa:b8:a0:5d:d4:06:3a:8d:fd:55:75:59:18:ac:c7:25:a0:
         55:22:c1:21:20:3c:67:53:90:a0:28:e8:b3:cc:cd:ae:0c:81:
         a3:54:43:35:6b:a8:dc:ab:b7:f9:89:22:6a:c1:d0:d2:66:f1:
         d3:97:e0:de:5f:d0:00:83:b6:6e:70:e6:b8:57:a1:7b:0f:f6:
         d0:05:91:1f:a7:83:05:c2:82:0f:88:3c:e9:7f:30:94:1e:b5:
         a2:da:35:11:42:80:4f:cd:54:d2:e4:99:d6:45:da:00:ce:69:
         c1:da:1c:24:ed:8f:61:f0:6b:99:e4:02:6b:32:e5:50:97:26:
         58:98:18:2f:8c:78:b0:a9:cb:e5:6c:f0:c6:83:27:03:58:d1:
         1b:a2:aa:f7:31:0d:3f:08:91:5a:c8:88:14:cb:64:80:af:4d:
         70:32:61:19:17:78:85:44:da:0b:57:bc:67:90:76:a4:1a:f6:
         64:ba:fd:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgxNEUxMTAvBgNVBAUTKENBMzgwMzY5OUFENUIwOTA2QzAwNzk3QTNBMUU5Q0Q5
NUI2NTkxQjEwHhcNMjYwNDE3MDEzMzQ4WhcNMjYwNDI0MDEzMzQ4WjAYMRYwFAYD
VQQDEw02OWUxOGRmZC1mMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudk/6qi6sZdZ9gQBOXw6fODBqXLGqm9Kb7wQNpHFfbWN2nDwsAQvs99soMJ3
FOYJzt+e7xvCH6LqQrvIAtt0Sv4/2Vz+cBka6OCadz2xVXhd7wIS7g1Ss1CLEj2+
TM5WQ3pkPJchZF0BmZJCO7bH+fo0mC5lnlnx7tzl/R0paDNBGzmbfQLkuo3dYF+0
syNFUuPX3m1UDod8jvubyXNNAVlHafdx9IL2l4H1TxS9OnE9Ak5GyfLe8fdXL/ZH
w4ofvMKk5YV1W4905P1a6PyBJhnvYcV9X/I/nA8zrA1R8ogN8thKsgJdi/ZLa1SW
YSvRinYerc2vB1jpCSsjKhDVwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuD5Tan
poVO5mirx/8x4LzlFGXxMB8GA1UdIwQYMBaAFMo4A2ma1bCQbAB5ejoenNlbZZGx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODE0RS84MEM5NUFBRTVG
MjcxMUVEQjFENUZBM0RDNEY5QUUwMi95amdEYVpyVnNKQnNBSGw2T2g2YzJWdGxr
YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lqZ0RhWnJWc0pCc0FIbDZPaDZjMlZ0bGtiRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODE0RS84MEM5NUFBRTVGMjcxMUVEQjFENUZBM0RDNEY5QUUwMi95amdEYVpyVnNK
QnNBSGw2T2g2YzJWdGxrYkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPNUIlZ+KlzP/D0opRVjrLyIY87K6qx9cgDG7wdA/Hb95ieFyh/EuE7UDr8EU
MLbX42SGEuLekbtTTP1zyQDvDECsdAG1Dxfb3Pq4oF3UBjqN/VV1WRisxyWgVSLB
ISA8Z1OQoCjos8zNrgyBo1RDNWuo3Ku3+YkiasHQ0mbx05fg3l/QAIO2bnDmuFeh
ew/20AWRH6eDBcKCD4g86X8wlB61oto1EUKAT81U0uSZ1kXaAM5pwdocJO2PYfBr
meQCazLlUJcmWJgYL4x4sKnL5WzwxoMnA1jRG6Kq9zENPwiRWsiIFMtkgK9NcDJh
GRd4hUTaC1e8Z5B2pBr2ZLr9YA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:57:22 2026 by rpki-client