Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
File:                     Y8QELC5YMug5UaBUZeiB1qfd0CI.mft (raw, json)
Hash identifier:          XzFkl0ob+FAuBQVsHUP2yZYx5xtAvFnS4oTpyWRM24k=
Subject key identifier:   0C:1D:B5:F8:D6:18:71:9F:E9:9D:19:5D:16:81:AA:F4:76:29:FB:55
Authority key identifier: 63:C4:04:2C:2E:58:32:E8:39:51:A0:54:65:E8:81:D6:A7:DD:D0:22
Certificate issuer:       /CN=A9146039/serialNumber=63C4042C2E5832E83951A05465E881D6A7DDD022
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
Manifest number:          16
Signing time:             Sun 19 Apr 2026 08:35:05 +0000
Manifest this update:     Sun 19 Apr 2026 08:35:05 +0000
Manifest next update:     Sun 26 Apr 2026 08:35:05 +0000
Files and hashes:         1: Y8QELC5YMug5UaBUZeiB1qfd0CI.crl (hash: //2/zkfwGUNEJk3WcAF3vlH0DKsKOsdJPOQ9SaZ4T8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.crl
                          rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146039, serialNumber=63C4042C2E5832E83951A05465E881D6A7DDD022
        Validity
            Not Before: Apr 19 08:35:05 2026 GMT
            Not After : Apr 26 08:35:05 2026 GMT
        Subject: CN=69e493b9-d1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d2:1e:bb:71:a2:70:72:d1:11:2c:97:66:e2:
                    21:01:8a:20:b9:46:82:7e:72:a0:2b:05:2d:83:4b:
                    7c:73:57:e7:99:ef:ea:0a:a9:4d:90:cf:10:c6:ae:
                    cd:fc:a7:dd:36:74:85:68:b7:28:e3:aa:a4:20:20:
                    11:f2:8d:49:e3:f9:37:11:da:27:24:ec:c2:7f:da:
                    32:bb:7b:97:c1:2d:79:e9:2d:db:e3:3f:67:d3:58:
                    c2:52:d1:7e:4d:8a:11:57:44:14:29:b4:37:bb:5b:
                    44:a8:7b:d5:03:81:e3:07:7c:76:4f:b7:55:85:46:
                    f4:de:7f:f8:55:c8:00:ed:a3:a5:34:56:b7:ce:91:
                    4d:0f:a7:12:4c:51:38:00:c4:97:43:aa:53:b2:42:
                    dd:3b:9d:38:c0:cd:d7:88:55:26:a4:d7:82:e0:d7:
                    f6:13:2e:c6:f1:a3:ec:4b:ed:3f:db:34:ea:08:0a:
                    c3:aa:ce:d6:ed:49:51:fc:e2:4d:1f:a2:08:23:4b:
                    d0:d3:80:1b:e1:f0:ee:65:49:6c:9b:0c:e3:88:a8:
                    09:f6:f8:34:4d:a3:4f:3f:36:25:58:8b:fc:55:42:
                    4c:6e:c6:8b:f0:33:8b:54:e4:a4:2e:a6:66:91:02:
                    d8:76:c6:e6:df:10:a8:b8:ec:f9:f2:45:84:29:07:
                    32:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1D:B5:F8:D6:18:71:9F:E9:9D:19:5D:16:81:AA:F4:76:29:FB:55
            X509v3 Authority Key Identifier:
                keyid:63:C4:04:2C:2E:58:32:E8:39:51:A0:54:65:E8:81:D6:A7:DD:D0:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8e:17:8a:9e:cc:6f:ec:b3:2a:6e:62:7e:22:2d:f6:0a:d7:
         e7:eb:63:d8:44:4a:7c:c9:9f:47:9d:6b:ab:b2:91:b1:39:c5:
         75:e2:a8:d6:9b:e6:9e:0d:6d:97:1d:49:58:7f:7d:72:4c:38:
         02:38:4f:81:a3:15:b5:d9:13:0c:89:99:67:2b:af:7d:83:d9:
         2b:6e:3b:5c:40:60:3c:cc:4f:e2:8a:44:07:e5:d4:a3:02:81:
         79:80:a9:96:b1:28:35:61:f5:a6:a0:7d:69:1d:e2:68:98:5c:
         e1:d9:62:03:78:c3:a7:f8:aa:43:5b:e1:20:94:b3:b3:f0:3e:
         15:be:17:33:f0:c1:e2:eb:4e:60:77:c8:29:97:31:57:77:31:
         54:72:58:31:34:d2:5f:df:8d:e1:13:29:c6:3c:12:47:12:63:
         3c:b2:3f:a5:bb:9e:8c:5c:95:1f:f0:df:04:a9:2c:ef:ce:b2:
         15:48:d2:b7:bf:7c:70:01:fb:57:02:48:ae:75:fb:51:80:52:
         c5:18:ca:11:66:a8:99:93:ee:d4:f4:eb:aa:26:2f:5e:6b:9e:
         4e:1d:3e:95:df:ee:ef:1d:ac:60:a3:34:59:03:9f:57:39:b1:
         76:4c:00:e2:cc:7d:fd:55:3e:f5:88:d9:a2:be:2c:ed:5c:27:
         fb:14:f7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:34 2026 by rpki-client