Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
File:                     YfRdxU9H4lL6xlUt27OWWFTGyAE.mft (raw, json)
Hash identifier:          IhinjmuOv42Q5flaw7Fc8HgmVmYxMlrsLQKOgOAxwzQ=
Subject key identifier:   CD:1E:21:12:32:BA:FD:63:F4:4E:89:D8:92:9B:AC:A3:47:2C:27:1D
Authority key identifier: 61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01
Certificate issuer:       /CN=A9162CCE/serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801
Certificate serial:       0698
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
Manifest number:          068C
Signing time:             Thu 16 Apr 2026 22:25:59 +0000
Manifest this update:     Thu 16 Apr 2026 22:25:59 +0000
Manifest next update:     Thu 23 Apr 2026 22:25:59 +0000
Files and hashes:         1: YfRdxU9H4lL6xlUt27OWWFTGyAE.crl (hash: nbas1pEvCv+6H/rYnY6yCuzUXW0sGuGNBqQAzz8CalE=)
                          2: D47858660E3411F1BB26575989EE528E.roa (hash: bWG4L4zm+kd/J5fsUxpfwPdRmncGUB5tai55L7Yj/oA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl
                          rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1688 (0x698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162CCE, serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801
        Validity
            Not Before: Apr 16 22:25:59 2026 GMT
            Not After : Apr 23 22:25:59 2026 GMT
        Subject: CN=69e161f7-46de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:a3:8b:a0:dd:50:cd:91:40:f0:e8:39:c3:
                    bf:3c:f0:44:d6:70:08:ff:19:ff:62:74:4f:00:8f:
                    42:3b:d9:91:03:db:ec:60:aa:40:33:ec:1a:b4:04:
                    37:fa:f8:f1:ee:d8:30:6b:11:a7:94:dc:29:8f:14:
                    bf:24:cf:1d:54:b6:7d:b0:ce:aa:35:99:fc:98:2d:
                    d8:d5:0b:7b:67:5f:65:f2:59:e8:65:eb:d4:6b:9d:
                    4f:da:28:c6:39:0f:67:f4:5f:3e:c4:39:10:c5:31:
                    10:8c:2b:30:49:c1:e0:65:88:54:84:3c:a2:5b:1f:
                    8b:f1:89:5d:7a:42:c2:f0:2e:d1:d6:d7:24:fe:30:
                    b3:88:a2:fb:9d:20:c5:31:56:a2:10:69:72:f2:5d:
                    5b:91:b9:f0:07:6f:fc:10:50:05:27:ec:a1:a7:b8:
                    66:76:cb:13:12:67:7b:55:81:b4:81:98:57:33:64:
                    ac:7d:b6:34:4d:ce:2a:bc:51:65:25:c7:64:5e:5c:
                    09:39:c0:c3:cc:b2:b6:6b:3f:0e:08:46:a0:a5:23:
                    86:22:91:f5:62:cc:53:c9:03:05:e6:a6:ca:d0:27:
                    cd:1e:57:37:40:27:a4:35:78:ec:cc:69:97:b1:76:
                    8d:5e:57:59:0b:5f:4a:06:85:1e:09:89:a0:c4:e3:
                    d3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1E:21:12:32:BA:FD:63:F4:4E:89:D8:92:9B:AC:A3:47:2C:27:1D
            X509v3 Authority Key Identifier:
                keyid:61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:17:97:e8:35:97:6d:b5:96:f8:1c:ba:a2:3e:38:a5:1b:6e:
         5d:97:a9:54:a5:92:3c:f7:71:c0:f9:b0:d5:56:63:a1:d6:ac:
         31:05:b4:38:e6:a8:27:86:c5:80:b3:51:9d:f9:7b:b3:ef:6a:
         f7:38:1a:fd:ff:ca:1d:62:b1:32:be:14:65:43:42:73:7d:5f:
         e0:80:54:81:47:55:fe:1d:ec:e4:0b:be:59:74:0a:b3:39:05:
         ba:7a:8d:b3:43:ab:7c:98:b1:fb:41:32:f8:13:ed:1f:77:46:
         0f:b0:81:47:55:c6:21:2d:ca:3f:75:88:00:b2:95:cb:5b:86:
         0d:01:85:34:3c:9e:53:5a:54:ad:96:da:f6:79:e1:8e:31:e2:
         ad:c7:b6:41:e3:36:67:ec:b6:09:a4:2e:24:04:cf:9c:40:3a:
         fa:5b:bd:7d:64:56:5d:1a:cb:13:a7:3a:be:f6:9b:91:7f:a9:
         73:f6:b9:5e:71:70:dd:dc:b8:85:78:71:7f:b8:aa:6b:e3:ac:
         ca:fc:3e:e6:02:23:1f:75:fd:7c:5b:00:89:68:24:2d:2c:b4:
         6d:6a:be:93:b7:a7:95:51:71:e0:72:b4:f3:51:80:33:d7:42:
         99:17:72:fd:71:be:28:84:12:20:b7:2e:89:00:8c:97:b2:c8:
         74:02:68:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:40 2026 by rpki-client