Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
File:                     YiiraKJGC9xWaItuVYkXkN2ASxA.mft (raw, json)
Hash identifier:          4tiGvTLSfnI6Y88H9Wp6zC1m9JSQse6Tv6uyAcH4010=
Subject key identifier:   C7:1E:3F:C9:CC:C4:1F:AA:E0:56:F2:38:05:26:B0:D6:25:63:9D:F6
Authority key identifier: 62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10
Certificate issuer:       /CN=A916A285/serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10
Certificate serial:       0256
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
Manifest number:          024D
Signing time:             Fri 17 Apr 2026 02:07:18 +0000
Manifest this update:     Fri 17 Apr 2026 02:07:17 +0000
Manifest next update:     Fri 24 Apr 2026 02:07:17 +0000
Files and hashes:         1: YiiraKJGC9xWaItuVYkXkN2ASxA.crl (hash: uuZ7acfD8vMCMGBGlgBLxEQywdE0mGEuRUPABvUBYhY=)
                          2: BCAF365487C111F0AC525C39C4F9AE02.roa (hash: qXkatjQdk9/LRncp/cgGtu7Z2Y3FqEqyaJABgXad1Wc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl
                          rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A285, serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10
        Validity
            Not Before: Apr 17 02:07:17 2026 GMT
            Not After : Apr 24 02:07:17 2026 GMT
        Subject: CN=69e195d5-338b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:28:11:06:3a:06:04:05:81:7e:8b:ab:af:
                    f3:9c:63:e0:0d:38:7a:09:88:28:34:f5:2d:40:54:
                    f6:73:8c:23:34:b9:fe:4d:10:03:61:76:af:97:6a:
                    fe:74:fb:61:e2:a8:4d:e4:aa:f5:c9:0b:92:21:d0:
                    01:91:46:18:8a:db:76:6c:18:3f:b5:2f:aa:e6:68:
                    60:cc:11:03:cb:fa:ff:27:a6:86:df:28:14:1b:21:
                    55:64:e9:c3:30:1e:15:8b:d5:44:2b:30:1d:c3:81:
                    da:48:77:71:9b:c0:9b:f8:2f:a8:fb:2b:c7:8b:b4:
                    75:b0:3e:10:0a:7c:54:9e:74:bb:f5:c9:be:15:ab:
                    67:78:77:8f:8b:06:bc:66:fa:8e:5f:da:1a:2b:58:
                    ab:1c:5f:0f:f6:1e:f5:3c:d1:50:f2:ad:b2:17:dd:
                    99:d6:a1:94:77:79:52:8e:2a:36:16:b1:53:e3:99:
                    a7:a2:71:a4:2b:cf:78:6f:89:1c:58:00:9d:17:50:
                    d3:b4:c9:ab:13:42:17:18:d6:f0:4e:ed:33:35:9c:
                    e0:30:ce:80:fd:0e:94:47:36:b6:8b:80:89:d8:7a:
                    c4:8c:ad:f1:91:32:3a:cc:5f:61:6c:84:89:17:0d:
                    2c:b2:f0:50:75:6c:72:fd:0e:c3:fc:0d:0e:4a:13:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1E:3F:C9:CC:C4:1F:AA:E0:56:F2:38:05:26:B0:D6:25:63:9D:F6
            X509v3 Authority Key Identifier:
                keyid:62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:2e:63:22:7a:e3:fd:fc:d0:32:09:fb:80:b4:8d:72:14:4d:
         e7:d3:a0:a2:c3:88:f4:af:4f:ca:c2:07:4b:a3:5e:28:bb:86:
         09:1a:f8:28:6e:af:60:cf:1d:98:17:01:82:7b:3c:c1:63:96:
         d5:6d:17:6f:58:20:b8:f4:5b:9c:41:6a:fc:22:50:9a:5c:29:
         3d:4f:59:a8:b8:de:d9:3b:94:27:42:d9:79:03:00:8e:dd:0d:
         37:ad:6d:dd:f3:26:b2:bd:b4:cd:3b:77:75:5a:e7:c3:1e:07:
         7f:b6:cd:92:b9:38:91:07:92:78:a5:fb:04:2f:6e:47:c9:93:
         61:aa:fc:30:3e:64:b4:4c:e7:1a:73:fa:06:4d:97:e0:30:ec:
         b4:25:59:72:b9:9b:8e:69:f4:2c:07:44:94:1e:6e:fe:2f:0a:
         4d:e1:83:e7:f5:77:84:71:e1:97:ac:54:f9:95:e9:89:21:f9:
         b1:69:6a:c5:b1:a5:62:84:d8:38:22:ed:10:98:7e:e8:d7:cb:
         24:0b:9f:fd:33:61:10:f1:4f:8d:40:3c:93:6f:55:6b:a2:e0:
         0d:f9:8c:cb:05:44:3f:dc:c0:b9:44:7c:16:13:6e:42:43:d1:
         0c:74:12:4e:b3:a2:92:dd:40:69:33:4a:7f:f9:c5:ba:d3:7f:
         da:8e:1f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:41:38 2026 by rpki-client