Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
File:                     Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft (raw, json)
Hash identifier:          ZBxDePtKu7BzD0ZGuYRy6BS6OPHEbQgRE2K1Sp+IvBs=
Subject key identifier:   E3:AA:91:3C:FC:24:48:FB:C2:38:46:AA:C8:BF:84:68:9D:8C:AC:D8
Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59
Certificate issuer:       /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59
Certificate serial:       01D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
Manifest number:          01D0
Signing time:             Fri 17 Apr 2026 03:22:06 +0000
Manifest this update:     Fri 17 Apr 2026 03:22:05 +0000
Manifest next update:     Fri 24 Apr 2026 03:22:05 +0000
Files and hashes:         1: Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl (hash: mCQCR+gDit7N5yVUzPFTe+t4M1uWxl84YdjLKpAHRrU=)
                          2: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (hash: CpTWwAtDyYV5NG3Dw7iBHIxDpXfL3jOA6p5oviFkDVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl
                          rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142B70, serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59
        Validity
            Not Before: Apr 17 03:22:05 2026 GMT
            Not After : Apr 24 03:22:05 2026 GMT
        Subject: CN=69e1a75e-76ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:57:74:0f:6e:1a:36:05:50:45:ba:f3:89:68:
                    94:00:1a:21:82:62:e6:6f:7d:a7:5a:93:16:24:0d:
                    b1:17:4f:76:f2:f6:27:f1:f1:f1:bd:f3:55:d5:75:
                    2a:72:f5:92:46:1b:35:24:bc:9e:0a:f4:8b:7c:60:
                    aa:a6:10:fe:56:af:91:11:ea:94:2b:e2:ea:3b:27:
                    f4:47:c0:64:a3:54:63:61:83:80:cc:98:44:6a:71:
                    fa:c0:94:87:79:66:35:d2:1d:70:7e:c1:5e:c5:6f:
                    65:4d:fd:25:79:f7:d8:9e:f0:ab:bd:0d:d7:ef:0f:
                    ff:51:dd:06:39:45:41:c5:ae:4d:8e:38:20:8f:cf:
                    0f:df:39:23:f0:0e:52:bb:51:7d:53:0e:9f:95:0c:
                    f4:3c:5c:3a:d3:eb:ff:f9:d0:8e:a0:ab:0f:ee:66:
                    bf:c8:6e:df:64:bb:56:a4:0e:08:76:f6:25:0b:3f:
                    ac:cd:5d:40:8f:0f:79:a3:89:03:91:2e:ce:91:7b:
                    f2:69:b9:b7:a2:05:4a:40:e2:7f:4c:a6:ad:89:5d:
                    c0:3e:a5:b8:86:c4:80:0c:22:6e:55:3a:f3:18:06:
                    38:2d:a9:9e:cd:b1:33:b8:c0:8a:94:b6:c2:95:6c:
                    94:60:8c:68:fe:c4:12:cc:f4:90:20:40:1c:5b:1e:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AA:91:3C:FC:24:48:FB:C2:38:46:AA:C8:BF:84:68:9D:8C:AC:D8
            X509v3 Authority Key Identifier:
                keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5e:91:29:fe:46:6b:98:17:13:83:f3:e8:aa:db:26:1d:1d:
         89:2f:f2:76:04:74:ac:4f:11:f5:29:f8:93:af:94:31:8e:30:
         33:0f:21:28:f9:98:65:42:df:ef:97:d6:4e:6a:8d:f0:18:33:
         fc:01:fa:21:ed:6a:55:bb:8e:0f:16:23:ca:56:74:e1:f8:a3:
         77:d8:a2:34:7b:3a:10:11:05:e5:dc:70:2e:b2:90:e6:04:18:
         5d:4b:63:77:3c:de:71:a6:e8:43:b5:6e:e2:21:a3:92:f8:86:
         88:f9:55:28:d7:3e:35:16:7e:0d:3d:35:9c:1e:c3:29:82:0c:
         5f:2e:87:15:89:a9:3d:56:65:36:1b:02:38:fb:38:eb:b9:bf:
         6d:5d:e0:a4:e4:44:db:73:d7:47:3d:61:21:e5:0b:e1:9c:4f:
         a5:79:c3:1b:7d:a5:d9:0c:a6:7c:a4:19:be:df:75:13:59:0c:
         db:38:de:fc:35:60:bb:5d:fe:3a:47:89:f9:9d:7a:69:ff:73:
         45:13:e1:6f:a1:9e:47:1b:e9:53:6e:69:f0:40:c2:41:0e:ca:
         db:a6:cc:bc:d7:56:19:d0:9c:3d:a6:12:bb:12:ca:3d:85:6d:
         90:7d:44:69:26:ae:99:d5:09:c6:47:f3:f8:fc:35:ec:4e:bb:
         cd:cb:3d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:57 2026 by rpki-client