Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
File:                     yTQ499zhrbP_4OWIU2-que__79c.mft (raw, json)
Hash identifier:          WUUerLa2csT030NFJpntmTuaoPK3BwHdl6R9tGSgBgs=
Subject key identifier:   24:70:9D:28:48:81:12:04:08:33:47:9E:5C:10:A5:AD:A7:E1:21:94
Authority key identifier: C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7
Certificate issuer:       /CN=A915B2EC/serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
Manifest number:          05A2
Signing time:             Thu 16 Apr 2026 23:15:49 +0000
Manifest this update:     Thu 16 Apr 2026 23:15:48 +0000
Manifest next update:     Thu 23 Apr 2026 23:15:48 +0000
Files and hashes:         1: yTQ499zhrbP_4OWIU2-que__79c.crl (hash: TXQ7ilmKwNGxuvUb+meLCEbhvpUFrMSZ11lYAxL0be0=)
                          2: 6B7B69D21C6411F1B68A335785EE528E.roa (hash: t3WJZ+TqxO9rAjYRJ0g09t3brgTmkG4d6oU027EJ4NU=)
                          3: 6D98D7C21C6411F1B68A335785EE528E.roa (hash: p7GvvvhnBiIlq2AFY9FalMi/aIDVDUbfZqCsTS3w2ms=)
                          4: 6C0CA7EE1C6411F1B68A335785EE528E.roa (hash: U+LavfCdJdFhu3KM3IjuquJhxlvTznrSauq2yP2RdA8=)
                          5: 6D1560E01C6411F1B68A335785EE528E.roa (hash: BYU5FIyktvv26Nz2Rm1eQhqdMYLLaex730hzv42dZLo=)
                          6: 6C8E6D381C6411F1B68A335785EE528E.roa (hash: PHiN9WhM1Yjs+fJf4ch6Xa0wX5cn9N5EasUrbY9oPEs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl
                          rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B2EC, serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7
        Validity
            Not Before: Apr 16 23:15:48 2026 GMT
            Not After : Apr 23 23:15:48 2026 GMT
        Subject: CN=69e16da5-ea29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:52:f3:33:ba:03:e0:dc:6c:2d:cb:25:06:58:
                    58:39:17:ab:3f:cb:69:0b:c5:c8:de:f8:85:60:4f:
                    10:a9:e0:55:40:50:db:2c:d3:b6:4c:6f:bd:9c:24:
                    b9:64:c6:37:3f:a8:53:3f:b0:6e:41:bf:81:85:62:
                    20:98:23:63:b5:d1:68:bf:86:37:f4:3b:df:23:59:
                    91:f8:21:1a:7f:73:98:46:87:e6:1c:32:de:5b:8d:
                    06:52:71:60:0c:e6:1b:12:82:40:4c:3e:4a:66:cc:
                    5d:9f:e3:ae:71:3b:c3:b3:24:8d:6c:8c:98:c0:36:
                    8a:8d:3e:15:e7:f5:34:e4:c9:74:de:0e:0d:fc:48:
                    a2:70:e3:0b:4e:36:6b:5a:48:f6:e9:a0:08:30:6f:
                    fc:b8:c2:a4:b5:02:04:63:2d:73:af:de:60:3f:38:
                    41:57:3d:a2:6a:79:65:bc:e8:5e:9f:0e:af:f6:3e:
                    f7:5e:ff:38:17:8b:2c:88:70:12:0e:b4:45:04:d8:
                    c0:2a:c6:21:01:ad:13:37:2b:e3:ef:2d:3a:2d:38:
                    aa:36:6a:7f:22:8d:f6:0f:ca:90:14:25:bf:50:f7:
                    cc:89:a4:c5:d9:5d:13:3c:cd:55:db:32:a7:fc:9e:
                    b5:db:8b:51:e5:31:9a:37:13:82:af:48:8a:47:48:
                    30:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:70:9D:28:48:81:12:04:08:33:47:9E:5C:10:A5:AD:A7:E1:21:94
            X509v3 Authority Key Identifier:
                keyid:C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0d:59:ff:00:41:16:f4:72:9a:6c:9e:38:a7:2d:90:ec:4d:
         ff:98:c8:8e:c6:5d:16:a9:19:58:0e:a4:2b:ed:72:98:c3:20:
         1f:24:5d:a2:5f:ef:2f:40:3a:c4:c9:62:2f:84:e4:e8:95:bf:
         42:c8:f2:11:40:e4:97:db:5c:0e:83:94:91:e8:f5:a5:1d:0a:
         bf:f4:66:88:d0:73:f2:f5:3b:ce:84:76:9d:ea:6f:b3:ff:38:
         82:b6:de:af:be:a8:cc:f0:ae:51:e0:6b:07:fc:49:0b:f5:ea:
         c2:c0:2d:d0:44:1b:c2:3b:45:66:06:b2:dc:b7:ed:d4:5b:c7:
         0a:90:78:37:7d:ec:9f:68:42:ca:3b:6f:26:c0:0c:e5:9d:3c:
         e7:24:37:8f:aa:02:0d:52:68:dc:ed:11:b3:00:d0:5f:34:ea:
         57:24:e6:9e:4e:21:6f:cc:c2:1d:79:ab:c8:52:96:b6:1a:d7:
         54:c8:5b:95:3a:05:c4:f1:0b:35:92:ac:94:87:a4:8e:48:d0:
         3a:63:e2:b3:23:66:56:a5:db:af:70:73:18:ef:b9:15:ae:ab:
         aa:a5:e8:ec:b2:2e:9d:05:34:18:7a:03:db:9c:38:6b:1a:6d:
         77:c3:d9:99:42:f0:6c:75:49:ea:e9:7c:86:de:78:5a:22:cd:
         b8:85:8b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:36:53 2026 by rpki-client