Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
File:                     -Y3cNC9-J7aMoI09R8emmyaVXqE.mft (raw, json)
Hash identifier:          1hA/bQyJ17rbY9BjCZMpczDZiUzsAMbk7EI6zTttuh0=
Subject key identifier:   1B:91:9B:3B:E7:7E:F1:4B:1C:FC:2E:B1:51:71:52:A7:59:96:E5:F3
Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1
Certificate issuer:       /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
Certificate serial:       01E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
Manifest number:          01FD
Signing time:             Fri 17 Apr 2026 03:13:53 +0000
Manifest this update:     Fri 17 Apr 2026 03:13:53 +0000
Manifest next update:     Fri 24 Apr 2026 03:13:53 +0000
Files and hashes:         1: -Y3cNC9-J7aMoI09R8emmyaVXqE.crl (hash: xoYvwOkWUOobEZibYDqBZ/yRwXCTwKUGtN0KXlmR8kQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl
                          rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C68B, serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
        Validity
            Not Before: Apr 17 03:13:53 2026 GMT
            Not After : Apr 24 03:13:53 2026 GMT
        Subject: CN=69e1a571-67d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1f:53:cd:b1:52:6b:a4:87:f7:3e:96:3c:dd:
                    2e:ab:5c:9f:31:a4:55:6a:7c:04:15:b2:c8:3a:b1:
                    35:3a:8f:80:95:1a:b2:0c:66:ee:5e:c6:d0:7d:b3:
                    2c:49:bb:c8:79:80:49:c5:a4:3b:49:4e:68:f5:4b:
                    c9:f8:8e:78:0d:91:45:78:51:c2:22:af:ca:d6:9e:
                    5c:c6:87:55:c5:24:3b:e8:9c:9a:79:dd:a0:3f:42:
                    38:ee:d9:ef:b7:f2:26:f9:67:f0:c6:4d:61:5c:4c:
                    dc:51:3a:4f:58:1b:60:ea:a1:b4:97:15:f2:43:0b:
                    19:2e:6b:72:28:ad:83:6a:78:b0:2a:90:f2:8d:21:
                    5c:37:1e:2b:3f:04:5d:cf:91:9a:fe:0a:b2:55:fa:
                    e3:79:5d:7d:b6:9d:fb:2f:8c:b7:e4:4e:c3:bb:ae:
                    92:9d:cf:90:83:51:34:4f:63:0f:52:ea:8f:eb:f6:
                    a9:09:8e:fb:55:79:0e:ca:62:1c:d3:4e:ac:c8:fd:
                    60:f0:da:4b:7c:90:6e:6d:c8:23:7d:cd:6d:05:a9:
                    e1:33:d8:ef:2a:8c:f9:6a:51:6c:8a:13:3d:87:9a:
                    dc:a0:ed:bc:c4:79:4d:3c:e8:ed:90:10:60:dd:46:
                    fe:78:c3:90:62:02:03:11:a9:05:a7:ee:a3:51:87:
                    ad:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:91:9B:3B:E7:7E:F1:4B:1C:FC:2E:B1:51:71:52:A7:59:96:E5:F3
            X509v3 Authority Key Identifier:
                keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5b:e2:26:fc:26:95:ae:c6:4d:31:e7:7b:73:90:4a:13:a9:
         b9:29:52:d6:2c:99:cf:ac:e8:1a:45:22:d4:73:14:c9:4c:b8:
         d7:e3:df:91:67:7f:83:b3:a7:d8:0b:09:ec:d3:54:21:2a:c7:
         bb:15:ea:4d:a5:1f:82:5f:55:de:25:33:38:68:78:30:53:05:
         40:9a:65:b2:f7:6a:16:35:19:84:7b:79:18:2b:94:b7:10:eb:
         00:b1:d3:15:f3:fb:fa:80:55:f6:67:b9:70:a3:a3:28:5f:39:
         02:01:e6:64:c2:76:7f:d8:c0:2b:a3:8a:30:22:bb:0e:20:1b:
         df:8d:da:8b:ce:b1:67:9c:6d:92:6a:55:55:a2:00:0a:22:84:
         a4:8b:54:04:f6:96:41:ba:14:5d:3d:a5:6c:d1:d9:b1:aa:90:
         ab:cc:91:ee:60:fa:eb:7c:30:23:3b:89:7a:69:90:b2:f1:41:
         c4:6c:77:74:fe:a7:25:f1:19:29:cb:13:d8:c9:5e:fb:82:69:
         29:43:07:b9:3d:9e:7b:5f:a4:9f:d8:08:79:93:eb:5b:e4:37:
         87:e7:6a:b5:dd:ac:37:47:9c:3c:fc:48:d4:17:55:9a:44:cd:
         48:8e:54:b6:16:85:17:a8:02:4e:8e:92:18:cc:21:f1:7a:ee:
         f4:a3:71:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:47 2026 by rpki-client