Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
File:                     Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft (raw, json)
Hash identifier:          Ng1UIx2v59vFa6XdRdvBRB4e2B4NSC6EUIHYtWxShmY=
Subject key identifier:   AB:97:2B:6E:89:02:CF:56:97:0E:2C:83:A4:B3:72:35:88:19:42:29
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Certificate issuer:       /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
Manifest number:          05
Signing time:             Thu 16 Apr 2026 16:06:02 +0000
Manifest this update:     Thu 16 Apr 2026 16:06:02 +0000
Manifest next update:     Thu 23 Apr 2026 16:06:02 +0000
Files and hashes:         1: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl (hash: bACZVfarWvC8v8yvLJxEFfFteCxGp5p6e9x8rWSZh1M=)
                          2: E685F69A372D11F1A4767B088F833773.roa (hash: Qin1CSenHeWf6qKBdgvv65CH/jbRnOCli4KnV1U3QUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
                          rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
        Validity
            Not Before: Apr 16 16:06:02 2026 GMT
            Not After : Apr 23 16:06:02 2026 GMT
        Subject: CN=69e108ea-6439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:43:79:e2:e0:9e:dd:1b:6c:7c:98:f0:2f:b9:
                    69:7b:14:d4:b6:d0:4e:a7:da:a3:50:df:d0:fe:5c:
                    1d:79:a8:99:12:3b:53:d4:55:c9:1e:ba:dc:12:64:
                    85:87:9d:ed:68:fc:de:d2:f0:96:ae:f7:e2:67:c7:
                    ae:15:c8:cd:8b:63:17:38:c6:59:ea:24:a9:1e:53:
                    9d:53:c5:36:d5:45:46:34:f9:37:13:8f:7c:2f:7c:
                    1d:95:00:94:ce:13:2a:7a:28:90:ba:45:53:fb:50:
                    da:e7:ea:4d:84:24:f3:5b:2e:99:28:d1:0c:29:28:
                    fe:10:80:8e:84:f0:7e:eb:ad:d7:21:1b:99:3e:13:
                    84:68:3d:21:0e:7e:c7:83:ec:0e:94:a8:11:0f:83:
                    d1:ca:06:bd:3a:e2:3c:83:cf:16:d4:02:79:95:e4:
                    9d:78:69:72:08:a4:2a:99:b8:86:68:cc:06:54:df:
                    d4:e3:65:8f:4b:34:b8:c2:ec:4d:d3:32:3f:a6:9c:
                    ec:05:97:0c:04:eb:de:63:c2:4d:d0:58:0f:9f:cf:
                    88:6b:d2:57:3a:bf:21:6b:39:00:7e:ab:43:4e:c0:
                    e1:88:ed:70:14:41:d5:91:19:13:13:dc:d1:26:67:
                    d1:12:c4:70:57:28:16:22:08:6a:49:4b:bb:f6:0a:
                    c7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:97:2B:6E:89:02:CF:56:97:0E:2C:83:A4:B3:72:35:88:19:42:29
            X509v3 Authority Key Identifier:
                keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:28:c3:8c:09:d7:04:48:c6:4d:d0:84:72:6e:21:a1:a4:10:
         65:0c:ce:20:33:01:ce:99:eb:36:85:25:c1:cf:ba:40:7b:ae:
         f1:69:83:56:54:57:fa:a0:23:23:a9:db:65:ca:17:d4:e5:79:
         4d:83:9d:6f:62:ef:60:9d:aa:82:b5:8c:bd:3c:86:ea:61:9f:
         09:8f:14:bb:6b:24:02:2d:05:1b:cc:8d:92:35:99:67:28:89:
         1d:95:de:d3:f0:7b:7c:c5:2f:79:48:b8:c7:c8:ff:ce:cd:cd:
         4c:7e:2d:4f:e8:ae:0f:27:82:ec:3d:4a:4b:a1:f5:e2:3b:af:
         d5:6f:80:15:3d:38:d3:51:b3:f7:e1:e4:8a:51:d4:a3:bd:4f:
         94:42:cc:b0:8a:c0:90:e6:16:aa:e1:38:f4:bd:51:71:16:f9:
         2b:25:90:3b:ef:47:3c:43:08:67:7c:95:d9:99:65:db:f0:78:
         28:84:cc:b5:de:2f:71:d6:27:39:b4:19:55:d5:38:6e:0d:57:
         59:c0:6b:98:11:07:56:96:f6:46:08:d9:81:91:5f:9d:ad:8e:
         1b:ec:f9:a5:d3:92:70:71:a8:36:5a:bf:be:17:37:d3:28:73:
         e3:01:28:2c:02:91:35:4f:05:53:18:af:a0:ff:94:d8:5b:bb:
         ba:9e:f8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:32 2026 by rpki-client