Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
File:                     YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft (raw, json)
Hash identifier:          KdjcBI85VIDd3KmmrP6QfrcUwGWW/nz+jzQwVRIQK14=
Subject key identifier:   C1:2D:88:B1:80:6E:03:BE:4A:D1:61:21:88:C9:54:D1:6C:7C:D9:56
Authority key identifier: 60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5
Certificate issuer:       /CN=A917799C/serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
Manifest number:          9D
Signing time:             Fri 17 Apr 2026 07:06:38 +0000
Manifest this update:     Fri 17 Apr 2026 07:06:37 +0000
Manifest next update:     Fri 24 Apr 2026 07:06:37 +0000
Files and hashes:         1: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl (hash: ittJKqj+e70AcakPj745jtBI5lr+vfc/JerThwRo3QY=)
                          2: 05939A1C554611F09F737331C4F9AE02.roa (hash: gUXNFVaxSQufYdqyGN4kaVGgCYgVtungC4DrMnEIpG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl
                          rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917799C, serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
        Validity
            Not Before: Apr 17 07:06:37 2026 GMT
            Not After : Apr 24 07:06:37 2026 GMT
        Subject: CN=69e1dbfd-f15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4c:eb:3c:eb:3a:9a:bc:ea:dd:2d:8b:e1:2e:
                    f4:e1:a8:9e:7b:05:83:ce:e1:f4:39:f1:87:d1:f1:
                    27:cd:ef:d5:1d:b3:1f:e7:bc:04:48:fd:03:91:6a:
                    91:85:ee:4f:6a:05:52:33:a1:d9:0e:84:c4:c4:38:
                    d6:af:b5:e3:61:6a:84:12:ba:b3:78:4d:f6:05:87:
                    f1:56:2e:f6:fc:11:29:b5:70:91:eb:34:78:af:6e:
                    f7:e4:e2:16:11:1c:9a:28:2a:43:c5:dd:a6:4c:98:
                    bc:77:97:32:3f:bb:1a:d4:d7:32:78:5e:46:39:84:
                    16:d9:b6:72:b2:96:ff:33:8b:e5:34:4b:40:c9:0f:
                    6a:7d:41:3c:f5:0a:62:2d:3a:99:b9:63:ca:bd:5a:
                    21:65:cf:0a:86:33:b1:31:d3:9e:11:aa:db:b9:eb:
                    30:c0:77:e9:74:30:9c:b9:f6:53:00:9c:96:f5:f0:
                    ae:a7:ef:7b:76:8e:8f:8a:5f:7d:ad:e4:4d:88:e5:
                    b7:d0:22:ea:07:2a:a0:6d:9a:70:d7:36:ba:84:84:
                    5b:e7:fd:22:71:32:3d:c0:47:80:35:a4:fc:d6:80:
                    e6:c4:21:fb:6e:b6:9a:a8:49:3b:25:72:6a:5d:57:
                    35:15:5e:7e:68:32:02:22:dd:51:d2:ed:99:c0:8a:
                    20:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2D:88:B1:80:6E:03:BE:4A:D1:61:21:88:C9:54:D1:6C:7C:D9:56
            X509v3 Authority Key Identifier:
                keyid:60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d0:0f:3e:a8:e9:bb:50:6d:b9:0f:84:99:55:f5:ea:92:e4:
         f9:97:b9:df:2c:de:27:d9:59:f9:35:d3:e5:95:8b:b9:4e:b6:
         e1:ec:9b:36:9e:d9:ab:57:b2:94:1a:d4:ea:81:f4:1c:c3:38:
         66:33:3a:91:31:b0:e8:e8:b6:e5:c4:7e:ea:32:e6:e6:23:a4:
         9c:dc:50:34:3d:e1:ed:03:f8:93:a0:d5:c1:cf:7e:ef:33:69:
         0b:e4:1a:09:8c:43:d1:4c:52:cd:97:e5:26:f9:a8:1b:4a:cc:
         2d:b0:ab:85:b5:cc:0b:ef:cd:93:40:df:b0:32:27:79:85:b4:
         fe:04:5c:7a:bf:d9:05:47:02:ed:03:4a:b7:2b:ea:1a:f1:4b:
         45:3e:b4:07:3b:35:83:d1:e4:83:0d:dc:0a:cf:9a:2e:d7:1a:
         b7:30:03:f7:2e:83:b4:d6:f7:52:76:ed:2e:ff:09:69:e5:62:
         1e:32:07:19:27:c0:98:39:2c:5b:db:24:a1:6b:ce:7f:03:e1:
         be:cb:d3:f8:23:df:d6:77:2c:3b:5f:d6:cb:dc:95:37:fc:d9:
         f0:aa:e1:94:a0:88:d4:26:68:70:d4:bf:b6:45:67:62:b0:25:
         af:79:8f:fe:7d:a4:5d:46:42:19:50:f7:8f:b0:63:57:da:25:
         50:99:64:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:53 2026 by rpki-client