Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
File:                     yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft (raw, json)
Hash identifier:          KJkc7qIeWcfnRoE1wNPYFJYcbiTUgTR2Eo0F1KpBQNs=
Subject key identifier:   A8:E6:1D:EF:31:2F:FB:3C:68:81:3F:53:3A:D6:55:D4:55:E5:80:63
Authority key identifier: CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF
Certificate issuer:       /CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
Certificate serial:       0174
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
Manifest number:          016E
Signing time:             Wed 15 Apr 2026 04:23:55 +0000
Manifest this update:     Wed 15 Apr 2026 04:23:55 +0000
Manifest next update:     Wed 22 Apr 2026 04:23:55 +0000
Files and hashes:         1: yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl (hash: Tx5itU3b4irHn/5GBztICJp3AA5yiMF16HXRdKeTcYw=)
                          2: F8636CC60F9D11EFA1E14343C4F9AE02.roa (hash: /3nOzfVBV3G4XKfktsyW3g/oGq96lm0UNw7VtIzketI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl
                          rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153675, serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
        Validity
            Not Before: Apr 15 04:23:55 2026 GMT
            Not After : Apr 22 04:23:55 2026 GMT
        Subject: CN=69df12db-d461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d5:f2:cd:56:f9:f9:df:4b:1f:ad:62:04:6f:
                    cf:6e:f3:67:22:c8:19:f4:cc:3e:24:90:fe:ce:43:
                    ce:77:36:69:11:e5:9c:64:79:10:91:d8:fd:a2:8d:
                    47:65:fe:c2:6d:b8:8d:1e:6e:c2:51:03:b4:f9:e4:
                    62:71:5d:9f:c2:ef:91:90:ec:50:85:0e:b9:67:6c:
                    44:0c:20:51:c6:6b:db:59:c9:49:4e:58:7a:9f:1d:
                    8c:c3:b5:77:b4:69:e8:91:f3:fe:e3:7b:0e:cd:b7:
                    60:92:9d:53:3f:4c:4a:7d:82:ca:60:0c:b3:17:d4:
                    f3:8d:49:5a:e9:89:9b:41:f9:47:58:cd:88:2b:84:
                    aa:14:6a:e6:6b:2a:e3:2b:39:94:2e:ac:66:2b:41:
                    62:42:c6:b0:eb:43:c9:20:e6:c9:0c:fa:f8:bf:83:
                    95:c6:54:63:21:ab:f0:45:df:df:99:6a:22:38:1f:
                    85:d7:0f:3a:c9:4a:63:5f:44:93:6e:1b:10:52:2b:
                    68:0f:41:6f:10:7c:85:3a:26:4e:c8:4c:4c:b7:be:
                    c6:c9:0b:e6:a6:2c:ab:cf:6c:f9:f6:bc:e0:ef:ce:
                    7d:80:b3:33:a8:99:c9:bb:b7:d4:5f:e9:94:80:bd:
                    ed:4d:7b:62:90:de:20:48:79:28:a5:19:2f:12:61:
                    36:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E6:1D:EF:31:2F:FB:3C:68:81:3F:53:3A:D6:55:D4:55:E5:80:63
            X509v3 Authority Key Identifier:
                keyid:CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:84:e3:8b:1a:c8:d4:ff:ed:f0:00:cb:8d:58:d1:cf:10:e3:
         fb:ec:24:b4:c9:fd:97:f1:b9:5b:c0:2d:5c:6c:4a:18:f9:46:
         58:b6:81:ec:0a:17:63:31:4b:a4:91:99:95:76:d2:9a:54:05:
         94:10:a0:b4:db:9b:7b:10:19:d5:79:30:58:cb:f8:0a:56:e4:
         af:53:94:66:cb:87:a8:b1:45:e6:98:13:0a:8b:c8:9e:2f:86:
         26:14:04:92:11:8e:50:59:fc:a4:7a:40:71:46:d3:56:bc:f9:
         1d:9f:fe:85:c3:d3:d9:31:d9:57:4a:b2:a0:17:74:c8:d5:46:
         42:4c:7a:75:b9:bd:d8:57:74:97:ba:81:94:7c:a7:72:70:ee:
         5f:b1:19:c1:5d:04:69:7b:74:34:8e:e8:fe:84:a6:67:ec:b6:
         5a:8f:b8:83:fe:68:dc:1c:82:a3:f1:e1:de:aa:88:dc:40:70:
         b8:00:9d:cd:c2:91:74:9e:d5:b7:6e:01:aa:80:c6:86:e3:98:
         a9:0e:1b:57:4b:73:ce:89:9e:79:94:15:77:90:6c:15:07:b7:
         b2:a0:04:e4:32:b6:cc:cd:5f:6c:58:8e:b0:4f:56:8c:de:1f:
         a1:e6:9a:78:d2:ae:b7:14:c5:ac:ed:7e:4f:27:43:20:0b:35:
         25:09:e1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:34 2026 by rpki-client