Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
File:                     iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json)
Hash identifier:          WpHb0UtuB9/6Pl8NILPYgv90eENWYhna17bbo03J8sE=
Subject key identifier:   17:CF:30:F1:A3:78:C7:74:18:A0:47:87:D7:2D:AC:FE:3A:8E:C1:35
Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86
Certificate issuer:       /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86
Certificate serial:       0880
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
Manifest number:          0A03
Signing time:             Thu 16 Apr 2026 20:36:09 +0000
Manifest this update:     Thu 16 Apr 2026 20:36:08 +0000
Manifest next update:     Thu 23 Apr 2026 20:36:08 +0000
Files and hashes:         1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: /hSeZ/oDgU4VRpFE9bToBG6H/zXLnrgTpAv19AvKskY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl
                          rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2176 (0x880)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86
        Validity
            Not Before: Apr 16 20:36:08 2026 GMT
            Not After : Apr 23 20:36:08 2026 GMT
        Subject: CN=69e14839-afe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:87:e1:df:10:4d:3a:7a:b4:f1:a2:fd:16:81:
                    0d:8f:b0:21:b9:80:2e:da:88:91:05:3d:73:84:68:
                    20:67:2d:1b:38:e3:c9:79:14:61:46:1e:54:68:bb:
                    3e:fb:59:bc:55:6a:10:ad:c9:b7:85:56:82:a1:f8:
                    1a:8e:37:ed:2d:3a:25:09:84:7b:2e:11:9c:97:99:
                    0a:53:b0:b6:b6:24:4e:5b:5e:d1:4a:11:01:f7:82:
                    e8:4a:3a:21:2f:6b:51:66:b5:ca:cf:08:29:13:25:
                    5c:e4:a4:65:b7:13:29:0f:ad:62:86:33:94:ff:70:
                    1c:7c:c4:86:5c:ed:3f:a5:3a:c6:ce:d0:c9:71:28:
                    f1:05:c5:e1:3c:85:d0:bb:d8:f1:03:df:1c:73:ac:
                    16:7a:6c:d5:82:54:3f:26:8d:4f:8b:7b:88:73:02:
                    47:3f:31:a2:ae:e5:21:ac:21:08:03:03:2b:70:85:
                    cf:d6:a7:11:4a:92:1c:ed:ec:29:79:83:0a:d2:7e:
                    85:83:0a:e0:11:01:35:f0:4c:4c:4f:fb:e7:6e:71:
                    bc:a7:8f:fc:74:58:3a:e6:ea:ef:93:f5:39:60:3f:
                    b2:5e:d2:b3:f8:6f:4d:71:cd:fb:ea:62:08:3c:f5:
                    0e:6d:8a:d9:e0:33:7f:8a:e7:f3:58:db:9c:33:7c:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CF:30:F1:A3:78:C7:74:18:A0:47:87:D7:2D:AC:FE:3A:8E:C1:35
            X509v3 Authority Key Identifier:
                keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:8b:29:2b:02:b1:bc:80:6b:af:f1:59:70:f8:ac:50:01:0e:
         44:21:6c:66:74:f0:de:28:ab:69:63:37:00:52:7b:6d:28:08:
         21:c6:9f:47:7d:92:f0:1e:96:69:1d:d5:57:85:71:49:73:bd:
         07:3c:75:81:c6:ec:b7:e7:75:77:51:57:fe:db:59:52:3f:36:
         84:dd:e9:a0:a4:4a:fd:c9:48:a0:75:6b:cd:4e:fa:80:9e:ff:
         1c:b3:2a:fc:03:cc:6a:c4:ef:c7:31:43:dd:61:00:46:1e:2d:
         56:dd:dd:4d:4a:f2:d7:6e:17:2f:06:4f:7e:3d:7a:19:bb:6c:
         3e:71:7b:70:80:e4:85:69:ac:07:31:75:60:b4:3e:9f:31:b1:
         84:ea:a1:84:6a:80:b2:9a:30:6b:21:00:85:bb:32:11:ee:5c:
         fb:4c:44:d2:af:94:9c:a5:15:43:1e:0b:09:64:54:76:db:0a:
         18:1f:30:00:a5:98:10:bb:e8:63:7f:2f:91:34:3a:29:41:1e:
         3a:5d:c7:3d:af:63:76:1f:b5:76:c0:62:91:f2:a2:16:8d:bc:
         86:71:f8:ca:6b:9b:dd:c0:fe:04:5d:9d:29:25:07:56:f6:93:
         e6:4b:9b:ab:93:91:3f:df:51:cf:f8:d2:e1:e7:0c:6d:74:76:
         da:42:e7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:20:17 2026 by rpki-client