Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File:                     YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier:          Uyr8a4ah2cJS/3a23IG0KH+CZtga6C/kkPZft4WQkSY=
Subject key identifier:   BB:80:E2:3D:75:A6:E7:93:5A:34:EE:3A:8D:BF:76:81:BC:CB:3B:A4
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer:       /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial:       0283
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number:          027C
Signing time:             Sun 19 Apr 2026 01:40:36 +0000
Manifest this update:     Sun 19 Apr 2026 01:40:35 +0000
Manifest next update:     Sun 26 Apr 2026 01:40:35 +0000
Files and hashes:         1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: 9q2d9iOOr09yzgbsXkBuoX/8IE7UW9RRLcKapOZifK4=)
                          2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: /uGLQIrlBTxMwkdtG3jyxMXG6mL7PGCkVKPH/j33iG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
                          rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 01:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 643 (0x283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
        Validity
            Not Before: Apr 19 01:40:35 2026 GMT
            Not After : Apr 26 01:40:35 2026 GMT
        Subject: CN=69e43294-b4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:df:56:bc:ed:a9:9e:5a:5f:a4:cc:20:5f:
                    dd:0e:32:c6:48:14:f5:77:aa:94:fd:1a:a4:bc:52:
                    42:c4:b2:73:04:33:7f:13:c1:13:04:8a:80:52:62:
                    df:90:21:29:fd:3d:d1:b8:05:86:52:95:e7:3c:86:
                    2c:84:50:e2:73:39:fb:95:10:18:d4:ef:59:5a:5e:
                    82:30:89:ae:79:ee:77:f6:6d:a0:fc:f3:14:24:72:
                    36:ad:96:e4:ac:53:b2:95:a1:aa:c6:44:ff:ce:06:
                    f0:86:8a:c9:05:b4:52:bb:97:e3:11:22:16:c3:da:
                    92:08:9f:a7:fc:dc:d8:fb:70:13:5b:d1:a7:e4:80:
                    02:67:fa:3b:e6:28:29:47:ad:85:7c:3e:aa:27:58:
                    a9:d0:a9:5d:2e:7f:0c:1f:5b:90:19:b3:f1:f0:15:
                    af:4d:23:f7:d7:7b:24:7f:7a:2c:70:7e:a5:7f:aa:
                    01:c6:a6:f4:f2:2b:52:ac:14:dd:42:f9:d8:50:19:
                    42:75:c7:0e:37:ad:2e:97:f6:0d:85:a4:de:a6:96:
                    51:8f:57:7e:b8:18:15:64:d1:54:9c:5f:bc:63:04:
                    d4:ac:cf:56:29:7b:fa:96:8d:2e:17:07:91:de:44:
                    ab:a4:23:03:86:f2:47:6b:1a:a9:9a:9c:dd:8c:a3:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:80:E2:3D:75:A6:E7:93:5A:34:EE:3A:8D:BF:76:81:BC:CB:3B:A4
            X509v3 Authority Key Identifier:
                keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:bf:4d:0f:81:21:d2:8e:64:b5:c0:1c:85:32:7c:48:10:d5:
         58:d5:84:4c:88:ab:6c:43:b0:ad:f7:35:67:05:41:41:e4:64:
         87:11:4f:b6:16:b0:39:14:20:23:92:f1:a9:32:4d:92:a2:70:
         ff:4a:7b:05:97:1e:13:13:bd:0e:03:7d:18:c7:77:dd:81:0f:
         a3:a9:c8:fb:d5:19:d2:cc:19:05:e9:7a:b2:bc:cd:36:c8:1e:
         bd:6c:74:54:e4:3d:4f:ed:96:14:e1:da:f1:95:af:d3:13:10:
         c1:45:d7:a3:d5:e6:48:6e:36:1a:86:79:c5:1f:25:a5:26:57:
         0f:39:63:b1:2b:0f:43:6b:1b:8b:45:9b:a3:e3:2c:9b:c4:60:
         b7:c4:ef:9a:d6:c8:21:f1:e5:9c:49:c0:f5:4f:a3:dd:5c:8e:
         5f:9c:bb:04:9c:28:09:08:f8:8f:7d:e9:27:68:e7:b4:27:70:
         a7:5d:c8:17:e7:cf:3a:df:df:4e:26:38:ea:33:a4:10:d4:d3:
         7f:cd:81:78:4a:b7:f0:c8:66:dc:b5:68:13:2b:2a:4a:96:b6:
         bf:4f:df:44:51:3e:4d:9e:87:2b:82:95:72:93:1d:fa:4f:a3:
         29:ed:95:69:fe:a6:81:37:e2:c4:b7:82:51:3c:f9:fb:95:25:
         cd:ef:ea:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:40:16 2026 by rpki-client