Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
File:                     YeT4YWtiQmYakffQErbNHkCTiQs.mft (raw, json)
Hash identifier:          2GGuvtB9519jMJDgRhrJkifrmsm8GDtsxrBTfJhO6hw=
Subject key identifier:   5F:0E:5F:A1:6C:B8:2B:AB:CC:9C:55:9E:1F:FD:CC:FF:75:8D:50:69
Authority key identifier: 61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B
Certificate issuer:       /CN=A91605D7/serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
Manifest number:          0188
Signing time:             Fri 17 Apr 2026 04:11:45 +0000
Manifest this update:     Fri 17 Apr 2026 04:11:45 +0000
Manifest next update:     Fri 24 Apr 2026 04:11:45 +0000
Files and hashes:         1: YeT4YWtiQmYakffQErbNHkCTiQs.crl (hash: cZglMWrdvpX1K7Of1ps3PdXMwWJNsRsxKYMrrgKHqz4=)
                          2: EA46D7ECE57F11EE96F8FB39C4F9AE02.roa (hash: eGXhWTghID7LXCNSIEK8G8iUBL46dL5mXlz39bqNtkc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl
                          rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91605D7, serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
        Validity
            Not Before: Apr 17 04:11:45 2026 GMT
            Not After : Apr 24 04:11:45 2026 GMT
        Subject: CN=69e1b301-36a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4b:56:6e:b6:7a:4d:2b:01:ff:d9:8c:e3:21:
                    1f:3f:2a:fd:c2:59:b1:4e:f8:d5:8d:68:e4:51:5d:
                    08:59:f8:04:3a:ce:8c:30:6a:8c:20:b8:e9:17:9d:
                    69:ff:cb:73:8c:22:44:5a:2d:5d:4f:b7:e1:3d:4b:
                    4b:87:b4:da:a4:0b:ed:01:a7:b6:ed:2f:b9:0a:d1:
                    64:ec:7a:31:10:01:57:79:1c:80:a0:29:52:0f:7c:
                    fb:ed:24:a4:8b:d6:31:28:43:32:e2:95:30:90:b2:
                    98:17:44:7e:c7:3d:87:b7:58:f3:00:c7:0d:a8:91:
                    e5:cd:26:c3:98:a6:93:b7:75:d7:cf:13:af:10:5c:
                    24:3c:47:c1:4a:6f:36:fe:19:5f:86:33:fb:30:da:
                    df:0e:bc:0f:cb:d9:1b:0b:3e:bd:0f:c5:0e:15:cc:
                    96:1f:89:8b:c5:9e:40:01:29:00:1e:0c:b3:13:86:
                    bb:1e:a9:32:d8:b4:ad:0f:c5:4e:3f:f1:29:1d:2b:
                    eb:63:c4:26:42:0a:f6:76:a6:3b:06:fd:5d:04:4a:
                    6c:b7:90:16:98:1a:e2:72:94:53:6b:45:fd:9c:da:
                    41:e0:86:f1:7a:b8:ac:01:ab:11:96:3a:c3:56:67:
                    86:65:66:d5:9b:c0:67:9e:aa:6c:0d:23:a2:af:e7:
                    65:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0E:5F:A1:6C:B8:2B:AB:CC:9C:55:9E:1F:FD:CC:FF:75:8D:50:69
            X509v3 Authority Key Identifier:
                keyid:61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:03:a2:9f:be:63:38:94:7a:6d:26:bb:cd:54:82:dc:64:14:
         01:65:d8:0a:57:45:e2:cf:69:cc:f7:5f:f0:26:07:78:9d:b4:
         ef:0e:8a:e5:34:b5:19:cf:69:f8:26:d2:53:f4:2d:d0:0e:09:
         7d:8b:57:17:3a:f8:f0:15:fa:2d:ce:38:42:7c:48:53:aa:60:
         dd:ab:52:5c:88:3b:3d:97:b8:59:19:a0:22:fe:17:1d:24:18:
         93:7d:8f:1f:89:75:90:5d:a1:0d:1a:11:89:1e:32:ba:ec:54:
         1a:6c:e3:11:12:70:88:0e:bb:4d:9b:c3:f1:cf:86:5a:e0:4e:
         c3:cf:6d:73:eb:91:f1:8c:f8:8d:8d:7c:21:58:32:00:ef:cc:
         d4:73:ca:64:1f:24:5a:ee:3b:29:c5:2f:d7:c4:92:85:bf:07:
         0a:15:c2:5b:67:da:98:fb:d8:a8:7e:e7:36:78:29:fd:38:e5:
         ea:10:10:d9:81:ad:8b:a6:02:e4:8b:99:a3:f3:a9:85:ae:d0:
         59:7d:b4:db:c7:06:62:d9:12:6d:c5:48:4c:46:68:a9:33:76:
         dc:9e:fd:69:62:87:c0:e1:2a:1a:ae:62:06:5d:58:f5:c2:f2:
         02:ce:57:12:8e:56:92:0c:dd:40:66:37:dc:22:9f:c5:1a:ab:
         4f:01:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:21 2026 by rpki-client