Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft
File:                     YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft (raw, json)
Hash identifier:          alWv3/Fa/9ZEyZcvmeo1Ol/shKqUr1zUXoGN42c/+Xg=
Subject key identifier:   0C:FA:25:AF:8B:78:FA:59:C5:95:C4:91:AE:D9:40:2A:7F:D6:07:62
Authority key identifier: 61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A
Certificate issuer:       /CN=A9171D16/serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft
Manifest number:          01AB
Signing time:             Fri 17 Apr 2026 03:46:16 +0000
Manifest this update:     Fri 17 Apr 2026 03:46:15 +0000
Manifest next update:     Fri 24 Apr 2026 03:46:15 +0000
Files and hashes:         1: YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl (hash: t/fxpRd9QtKbl7HUBh5FKefUjVS1PhsbutB/nB7/WOA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl
                          rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D16, serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A
        Validity
            Not Before: Apr 17 03:46:15 2026 GMT
            Not After : Apr 24 03:46:15 2026 GMT
        Subject: CN=69e1ad08-a87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:a6:63:40:81:67:39:f7:f0:ef:a2:27:13:
                    b8:47:9c:73:96:cd:78:94:50:b6:f9:58:09:74:24:
                    11:1f:85:1d:98:99:58:25:50:14:17:4a:b7:62:b0:
                    91:91:02:79:97:71:ec:b6:ab:09:4e:ea:2f:15:47:
                    5e:c8:c2:f5:65:ca:0d:5d:8d:84:43:9b:2e:e1:2d:
                    0c:46:59:e6:df:47:5c:dd:30:66:c3:9e:6a:07:84:
                    54:0f:34:85:24:a1:f4:ac:46:c6:83:70:0e:65:27:
                    fa:63:4e:75:71:e7:ac:44:56:93:6e:15:f6:23:dc:
                    bb:af:ec:4e:a1:32:82:0f:6e:18:47:b6:e0:b1:4a:
                    51:2c:f6:d9:8f:89:aa:b1:7d:fc:ba:be:4c:2b:9e:
                    85:86:81:f5:5b:26:f9:a3:0b:69:01:cf:f9:1c:15:
                    1a:52:9b:e9:2a:10:79:48:f0:65:aa:e2:b3:98:b9:
                    94:d9:44:e9:56:f8:82:1d:d2:f1:92:b4:cf:33:78:
                    fa:a6:a7:3d:70:a5:31:7c:90:e1:08:db:c1:5a:78:
                    0d:84:05:60:c4:1d:ce:8d:67:4b:b6:f5:8b:45:47:
                    a1:a1:cd:22:fe:f0:5f:dc:35:b8:0b:99:e6:b0:76:
                    9d:11:63:b7:44:e6:a8:39:d5:bf:e8:1f:74:41:d8:
                    bd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FA:25:AF:8B:78:FA:59:C5:95:C4:91:AE:D9:40:2A:7F:D6:07:62
            X509v3 Authority Key Identifier:
                keyid:61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:2e:b4:c5:57:01:e9:31:02:d0:67:27:6b:a0:47:dc:b2:f0:
         66:10:9a:c6:8d:d9:f6:d2:95:2e:57:e0:d1:52:ec:2d:67:4a:
         13:2b:61:8d:59:0c:1d:d5:aa:4d:97:e9:40:e0:8e:49:9b:37:
         bc:32:1c:45:7f:28:90:c9:71:a6:a1:1d:47:4b:70:37:80:a8:
         43:ac:4c:1f:37:eb:5d:7c:b6:3d:f4:1a:28:28:a9:eb:38:7d:
         8e:b8:1d:f0:00:17:66:58:01:8e:0f:5f:06:c8:b6:3a:c2:35:
         e3:03:ad:23:a3:b1:72:f0:6a:2d:3d:cc:bd:a6:a2:3e:69:c6:
         38:a6:52:b0:e5:10:c2:7e:1c:79:51:2f:03:5b:75:44:ed:33:
         4b:79:19:95:9d:25:a2:89:db:eb:a3:3b:96:c2:03:5b:b5:82:
         c5:65:fb:3d:3c:a8:68:43:8f:b1:0f:ce:5f:93:4f:3d:e9:92:
         03:42:32:b8:b1:0d:ae:c7:db:09:0e:13:32:26:1c:40:eb:1b:
         70:17:93:fc:07:ea:f9:c2:b1:b3:eb:f3:cb:8b:2c:1e:18:e6:
         5c:fe:e8:24:8d:47:06:75:ea:4f:25:7b:59:fe:ed:8b:4a:f8:
         97:22:7b:6f:88:e0:a3:36:39:10:98:d0:8f:81:be:33:19:96:
         a1:92:8a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:08 2026 by rpki-client