Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft
File:                     tYgfusqd6_Rspghj0pd8U_3WwZA.mft (raw, json)
Hash identifier:          YsT5K6tLm8PUb3ZUXiP+Ku3Qzp6o5B/fPLXQXNhm92U=
Subject key identifier:   23:82:5F:46:8B:CB:39:6E:DA:A6:95:FC:62:E5:C0:2F:D4:96:52:89
Authority key identifier: B5:88:1F:BA:CA:9D:EB:F4:6C:A6:08:63:D2:97:7C:53:FD:D6:C1:90
Certificate issuer:       /CN=A9188D2D/serialNumber=B5881FBACA9DEBF46CA60863D2977C53FDD6C190
Certificate serial:       0269
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft
Manifest number:          0262
Signing time:             Fri 17 Apr 2026 01:54:14 +0000
Manifest this update:     Fri 17 Apr 2026 01:54:14 +0000
Manifest next update:     Fri 24 Apr 2026 01:54:14 +0000
Files and hashes:         1: tYgfusqd6_Rspghj0pd8U_3WwZA.crl (hash: fW2q4zlIP1czOQkShKu2TAqbQQi7XEFjeUMZZcEXaw4=)
                          2: D9D943568FFC11ED9776CB38C4F9AE02.roa (hash: rS73wDlRVwn5DJgE8WmW3uKXkEx8a9vepjddqT6ugZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.crl
                          rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188D2D, serialNumber=B5881FBACA9DEBF46CA60863D2977C53FDD6C190
        Validity
            Not Before: Apr 17 01:54:14 2026 GMT
            Not After : Apr 24 01:54:14 2026 GMT
        Subject: CN=69e192c6-480e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:f6:72:94:38:7a:cc:7d:13:92:89:01:94:
                    f5:7c:0a:80:e5:87:42:20:36:e1:0a:49:06:0d:c0:
                    0a:0b:38:2a:b7:3f:b4:32:2b:5f:d1:81:7c:c6:5f:
                    fd:1f:f4:da:1d:74:7a:29:a2:58:99:e8:42:16:c1:
                    45:b6:57:e2:e3:d4:fd:ed:43:cb:43:6e:a3:89:d1:
                    be:f6:a2:60:ef:73:45:48:19:ec:cf:06:82:80:9b:
                    12:b0:37:bd:5a:22:16:34:6e:94:ba:56:b2:d5:e1:
                    50:77:9d:29:33:bc:a5:1e:5d:b5:e2:68:c6:ac:30:
                    86:8c:97:07:3f:aa:5b:89:13:8a:b2:6c:e7:dd:1e:
                    7c:5f:f4:8b:57:b3:f6:eb:86:74:8a:10:b2:ad:21:
                    6c:d1:eb:01:0a:33:a1:09:a7:31:0c:18:1d:77:90:
                    3b:05:38:1c:96:50:de:51:5f:27:a6:16:0e:e9:d3:
                    2d:b5:b8:71:4a:d0:4d:f8:05:70:ab:f8:81:c9:8b:
                    8b:7e:3e:dc:14:7f:3b:40:89:85:1a:e2:a4:d5:c5:
                    14:3b:e8:fa:a7:0e:31:cc:68:93:32:27:8e:28:f0:
                    6d:71:2f:73:aa:00:b9:1a:26:f2:a9:f3:8d:13:a0:
                    4d:04:d9:62:1d:a8:50:f5:e7:b5:b1:75:14:f6:77:
                    d0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:82:5F:46:8B:CB:39:6E:DA:A6:95:FC:62:E5:C0:2F:D4:96:52:89
            X509v3 Authority Key Identifier:
                keyid:B5:88:1F:BA:CA:9D:EB:F4:6C:A6:08:63:D2:97:7C:53:FD:D6:C1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b8:78:e0:52:04:4a:be:06:04:31:69:59:37:50:43:06:06:
         6f:73:50:cd:2a:38:1d:b8:fa:e1:e1:e4:77:a3:0c:7c:c9:54:
         0d:f4:e7:3d:c2:82:0d:9d:ac:cc:d8:3f:a9:bf:8a:18:dc:6a:
         2a:0b:27:6f:dd:b1:7c:3c:62:df:cb:93:8f:09:0b:71:b3:47:
         9c:08:82:65:c3:9b:ae:a4:10:39:7f:54:c8:39:49:02:0f:83:
         76:86:56:01:94:50:2f:bf:ee:d4:08:78:94:7d:d4:98:fe:5f:
         3e:9a:19:55:87:07:6a:93:c3:77:d4:c3:fe:60:c5:59:7e:0e:
         e7:29:6a:31:00:65:23:fe:62:a1:7e:ad:1b:f2:a7:8f:4b:77:
         c1:1c:cb:74:85:3b:4e:52:83:b8:d0:b1:c3:2f:b3:e3:ed:29:
         9d:9a:a2:87:20:37:af:76:12:f6:91:70:3f:cd:24:34:32:6e:
         1d:10:fb:35:d6:ae:99:cf:15:1d:45:c1:b6:e8:7a:fe:d3:2a:
         c6:c0:01:d9:5a:9c:0f:3d:2e:99:0e:e3:6d:68:fa:45:4c:ff:
         c9:64:24:1b:e7:5e:f8:0f:49:48:3d:53:91:93:f5:42:43:d0:
         90:4c:7c:30:44:a4:35:43:cc:85:ff:82:d4:64:39:d9:2e:e9:
         7f:e2:9a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:52:45 2026 by rpki-client