Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
File:                     _Yje-aa92-pZOJ7cYXGq3KEGtQk.mft (raw, json)
Hash identifier:          8NKz8bvf+wYs9LVI1ioBx6DpWjxLSSB669ZJbXPgB2w=
Subject key identifier:   87:80:7D:A9:F4:74:A2:77:8D:CF:48:FC:64:8D:02:71:40:B9:D5:FB
Authority key identifier: FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09
Certificate issuer:       /CN=A9172FC5/serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
Manifest number:          0106
Signing time:             Wed 15 Apr 2026 05:40:30 +0000
Manifest this update:     Wed 15 Apr 2026 05:40:30 +0000
Manifest next update:     Wed 22 Apr 2026 05:40:30 +0000
Files and hashes:         1: _Yje-aa92-pZOJ7cYXGq3KEGtQk.crl (hash: GpGJIH4Sfs9TaD8m49HML2Z9ngaXc0D2dtprwUy1SUI=)
                          2: 2D810A88AB4011EF849D9515C4F9AE02.roa (hash: ReDU3pM6puyTOqvPDYn/OPZQZEhbfRxZyleb6fyedWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl
                          rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 05:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172FC5, serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509
        Validity
            Not Before: Apr 15 05:40:30 2026 GMT
            Not After : Apr 22 05:40:30 2026 GMT
        Subject: CN=69df24ce-6439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:b1:2f:57:ab:70:ad:1f:05:84:f7:c0:20:
                    dc:64:34:41:62:fc:84:c9:71:06:36:6b:af:22:31:
                    58:2d:80:64:38:64:0a:e5:59:09:60:08:f3:c3:9a:
                    65:67:7c:84:d7:76:13:50:99:0c:99:1d:2e:9a:65:
                    c1:89:cc:09:fe:83:72:c9:21:6e:e1:8d:7a:70:d1:
                    5d:4f:bd:9a:32:33:a6:c2:50:6c:6e:f6:85:c7:25:
                    cd:ee:08:c8:25:6e:1f:03:62:13:d5:1d:02:5b:da:
                    bd:4c:3b:2f:e9:08:b0:e4:cb:03:bd:97:8a:2d:c7:
                    54:27:ae:c2:08:32:97:26:71:9e:38:9a:30:00:d9:
                    f2:82:87:69:f5:5f:95:fd:48:ca:19:73:51:dd:df:
                    7e:f2:71:e8:af:be:1d:5a:20:73:fd:3c:2f:64:5d:
                    22:71:fa:b5:23:fb:35:9a:b1:20:f4:aa:8d:42:6b:
                    71:ce:b4:f2:b8:2f:00:85:f1:1f:0e:99:b3:bf:ca:
                    85:9f:a1:b7:8f:44:23:37:cd:fc:f0:64:41:73:12:
                    28:b1:60:4f:80:0e:ca:56:b8:65:63:cf:04:63:08:
                    e2:80:ab:1f:6f:38:31:32:30:8e:66:12:3d:f9:a9:
                    7e:aa:98:77:04:ea:30:29:3d:82:23:9c:79:56:f9:
                    9e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:80:7D:A9:F4:74:A2:77:8D:CF:48:FC:64:8D:02:71:40:B9:D5:FB
            X509v3 Authority Key Identifier:
                keyid:FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c8:58:cf:56:3e:e1:6f:f3:bb:22:58:d3:f1:ad:53:f0:a9:
         b5:1f:84:f3:d3:c0:03:df:ee:2a:b3:b8:93:06:b5:d2:57:0f:
         4a:63:f5:b7:2b:9e:7c:1f:38:bc:b1:f1:35:74:c6:b0:78:92:
         62:96:b5:ff:b3:2f:5e:4f:f2:0b:d0:92:2e:33:97:73:a1:16:
         be:2f:ec:de:aa:66:4e:fb:b4:e9:cb:b1:6b:27:b6:12:df:30:
         3d:82:f2:27:7c:a9:66:cd:6a:b4:22:67:64:83:0e:1f:15:44:
         9e:cf:21:26:3d:a1:a1:e1:a5:b2:f7:4e:55:35:8b:03:ed:5e:
         d1:3a:0f:ed:95:66:4a:cb:52:a6:f7:e6:85:87:ab:e2:48:32:
         b2:b0:d3:8c:16:74:bf:88:49:0e:02:a2:c2:d9:29:56:ab:1f:
         e4:22:c7:96:e9:84:c7:d9:ce:62:48:9a:9d:0b:11:45:ff:4c:
         75:6a:c9:35:65:67:2c:4a:34:38:2c:fc:1a:18:30:c5:6b:32:
         92:94:b3:82:3f:9b:c7:20:fe:13:d1:c1:89:98:66:e1:2d:a3:
         44:51:d1:4e:2a:30:cb:b1:9b:8d:4f:84:65:73:45:6c:6b:0c:
         40:1b:6f:62:fe:ec:2a:45:6d:4b:5c:de:52:90:50:33:bc:af:
         0d:32:03:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:38 2026 by rpki-client