Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft
File:                     yH_T4kCIpNnfHF0CaFII6Qph7_c.mft (raw, json)
Hash identifier:          /tL7ZETyk/AAK7dJBYH/GsMckYIXDGy7eKFkfY89QCE=
Subject key identifier:   E2:36:71:0D:F9:74:40:28:DD:E9:C8:E2:6E:BB:3B:1B:73:DF:F5:3D
Authority key identifier: C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7
Certificate issuer:       /CN=A9161065/serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft
Manifest number:          0231
Signing time:             Fri 17 Apr 2026 02:23:42 +0000
Manifest this update:     Fri 17 Apr 2026 02:23:42 +0000
Manifest next update:     Fri 24 Apr 2026 02:23:42 +0000
Files and hashes:         1: yH_T4kCIpNnfHF0CaFII6Qph7_c.crl (hash: Qjaz2DUGs1slgGfSMorpBhL2G8IdV4zIda6ZzYq+mYs=)
                          2: CDE70CB2E52011EDB505E014C4F9AE02.roa (hash: rmrewBXxG6n9T9lJyYuYh35ZNnNwGQOX9gsrKAmWQ9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl
                          rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161065, serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7
        Validity
            Not Before: Apr 17 02:23:42 2026 GMT
            Not After : Apr 24 02:23:42 2026 GMT
        Subject: CN=69e199ae-a0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:14:63:7d:4f:6d:94:11:a9:d6:71:a4:9a:
                    28:48:75:95:a6:cb:f9:c2:a1:74:60:23:88:1e:47:
                    86:ab:69:82:82:fb:6e:6f:7e:19:50:c9:8b:ea:b7:
                    35:41:e3:94:fd:14:a7:76:aa:ea:bc:6c:ce:66:04:
                    1b:f9:02:59:ed:d5:28:d4:1d:d5:ee:a0:5c:96:86:
                    04:95:67:31:60:40:fe:3c:37:81:75:df:16:9e:23:
                    b6:70:64:84:76:06:05:18:fe:ce:5d:9d:21:8d:91:
                    66:1a:b9:1c:53:6d:57:7f:8a:4e:8b:c0:50:ba:9c:
                    cb:e7:ef:73:6d:cf:e8:af:6d:f7:15:bf:9e:ea:59:
                    8a:e6:6b:5a:f3:e2:e8:b2:a8:d9:72:70:e3:13:b2:
                    f2:da:eb:85:af:dc:38:0a:2e:91:b1:85:56:15:60:
                    ce:55:d9:e4:2a:bd:13:21:56:9d:32:54:7c:22:81:
                    fe:ac:f4:72:3e:01:e1:b9:8a:0e:6e:a5:3a:c2:ce:
                    1f:0f:ed:aa:04:cd:46:4c:45:95:b8:7c:99:77:c9:
                    c2:80:5c:30:59:5d:d2:32:41:a6:3a:66:0a:8e:f8:
                    04:75:4a:f9:c0:ad:c7:15:d9:06:7b:04:b3:54:1f:
                    e6:af:d1:d0:17:0b:99:bc:31:4f:aa:21:be:bb:d2:
                    13:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:36:71:0D:F9:74:40:28:DD:E9:C8:E2:6E:BB:3B:1B:73:DF:F5:3D
            X509v3 Authority Key Identifier:
                keyid:C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0a:f0:77:ca:97:a1:f3:c5:90:c5:a8:a4:ab:fe:d2:5e:7d:
         1a:d1:57:eb:16:8e:03:7c:da:7c:5b:13:46:60:b9:cf:95:37:
         c8:a7:ca:c5:8d:15:89:73:4d:a7:d9:b2:bd:ec:86:ba:85:80:
         3d:02:78:f2:65:6d:1d:18:b1:9b:99:2c:eb:af:f2:cd:dd:8a:
         0e:06:3c:7f:87:26:e3:51:91:41:63:32:fc:d3:c9:4e:e1:87:
         54:50:f5:de:40:be:44:bf:42:16:a2:d8:90:88:77:fc:5e:fd:
         ec:ae:1e:13:68:27:48:18:80:20:1b:fc:d7:e1:b8:e3:89:61:
         76:4e:c5:b0:5d:67:e9:b1:f7:f0:53:5d:d1:da:1d:e3:da:31:
         f2:52:ee:4f:3e:12:56:28:9d:47:8b:2b:42:e9:e2:94:4d:e5:
         20:19:87:75:5d:6e:bd:9d:d4:59:1b:fa:20:0c:a3:e9:b1:22:
         43:b4:cf:bf:ee:bb:df:e3:8d:15:bf:6d:c0:35:62:e6:48:d6:
         c0:92:e8:b2:ff:bb:a6:23:4f:87:80:f9:e3:6a:09:47:c1:4d:
         ee:f4:53:82:95:71:63:e6:52:eb:bd:11:fd:db:86:f6:1d:ea:
         26:0f:06:73:ba:f3:d4:0f:68:33:24:40:2d:f9:a2:cf:09:2f:
         8e:2c:28:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:13:34 2026 by rpki-client