Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
File:                     YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft (raw, json)
Hash identifier:          4OPcyMPvCbnz1c/3IWsSk1w7bVQtRk+OErzHLumRBbM=
Subject key identifier:   C7:95:86:E6:5F:EF:DC:8B:29:8F:00:DA:5E:41:71:DB:5E:16:A8:5B
Authority key identifier: 61:FA:70:86:81:1C:B0:3F:CB:94:C3:16:CF:EE:AD:88:9A:85:27:F7
Certificate issuer:       /CN=A918E3C0/serialNumber=61FA7086811CB03FCB94C316CFEEAD889A8527F7
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
Manifest number:          2B
Signing time:             Fri 17 Apr 2026 08:29:28 +0000
Manifest this update:     Fri 17 Apr 2026 08:29:27 +0000
Manifest next update:     Fri 24 Apr 2026 08:29:27 +0000
Files and hashes:         1: YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl (hash: HzcwEdBAraqKBz/U/KSW2ac0uAob8prnR+MqIb7H+mE=)
                          2: 3F6F4A1A01B211F19B62C4E66C6F56BC.roa (hash: tMHj5+/ILv6Qo4xWUT+IoiNMESbwl2vJsPhAT7WrKns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl
                          rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E3C0, serialNumber=61FA7086811CB03FCB94C316CFEEAD889A8527F7
        Validity
            Not Before: Apr 17 08:29:27 2026 GMT
            Not After : Apr 24 08:29:27 2026 GMT
        Subject: CN=69e1ef68-301b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a0:d8:f8:53:6a:ef:a8:df:c9:96:2a:12:86:
                    5c:5d:74:08:2a:f1:37:36:fd:4c:e0:86:60:4c:7e:
                    28:49:2b:91:32:ae:9c:ef:18:98:0a:7c:50:fe:ae:
                    8a:a5:1f:67:6c:3c:06:cb:12:bb:7e:c0:80:97:24:
                    c0:76:0b:ca:4b:06:cc:4a:c3:16:78:b4:fc:77:f1:
                    ba:6e:2c:45:05:1e:45:2d:31:0b:71:d5:27:36:fb:
                    9f:8c:36:f3:00:07:44:0f:af:3d:64:59:07:48:41:
                    1b:cc:00:2d:41:87:87:fa:eb:26:a3:53:f1:07:80:
                    12:48:21:8a:57:94:d9:8d:a1:b2:d6:cc:45:49:95:
                    6c:af:6f:f1:96:0f:27:0a:4a:85:ae:53:3b:0e:63:
                    f3:5d:76:0f:b6:cc:93:3a:97:55:26:5c:25:15:b8:
                    f9:0e:c4:e1:04:5a:ed:58:06:8f:f7:f1:07:35:3d:
                    0d:5a:03:ce:1f:74:17:7b:7a:52:c0:c6:dd:02:80:
                    a8:88:c3:b6:77:e7:86:0a:5a:fc:45:22:21:aa:79:
                    89:36:8f:5e:43:6d:fe:bc:af:ed:b7:ac:72:21:55:
                    19:bc:c0:b8:71:55:c9:f7:6a:b4:a9:40:27:ad:af:
                    fd:62:03:77:1c:8f:7f:11:8e:eb:d5:9d:51:92:be:
                    f0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:95:86:E6:5F:EF:DC:8B:29:8F:00:DA:5E:41:71:DB:5E:16:A8:5B
            X509v3 Authority Key Identifier:
                keyid:61:FA:70:86:81:1C:B0:3F:CB:94:C3:16:CF:EE:AD:88:9A:85:27:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:93:cd:01:47:03:a1:bf:e0:59:d4:99:ed:68:a2:57:bc:63:
         cd:52:68:0e:a3:d9:6f:d8:95:11:3f:99:8b:54:b6:e3:6a:29:
         df:22:37:db:45:65:06:7b:5c:21:9f:1a:ea:fe:98:07:a5:01:
         ab:1f:7a:77:05:e9:b4:c2:b6:cc:a2:5a:0b:e0:1a:95:96:ce:
         39:9b:ff:1c:11:c5:f9:e4:9c:cd:e6:74:40:a4:c8:14:71:61:
         24:73:6b:98:5a:89:03:17:88:0a:13:0a:2c:6e:21:9c:13:6c:
         87:7b:fd:4a:0b:68:f1:97:5c:bb:7a:41:c6:a1:9a:df:52:01:
         22:ff:3e:80:6d:5d:62:28:a7:6f:de:59:1f:ef:e5:6d:6d:c2:
         c0:ae:02:29:05:68:e3:53:2b:32:cd:cc:2f:67:eb:0e:da:a9:
         5a:74:86:47:2c:4f:d6:dd:c5:ec:43:f7:f8:64:59:8c:16:74:
         61:23:a2:28:2e:d5:f4:63:f8:e2:60:f6:3d:01:a2:da:85:97:
         d8:c4:4a:c3:22:62:cb:4b:2c:38:2c:f9:56:18:2b:1c:02:cc:
         29:f3:70:8f:54:e8:fc:2b:03:b0:71:9c:00:ed:9e:85:f9:84:
         c3:50:29:de:69:1e:3c:0c:6a:d1:e2:65:f2:ca:c0:b7:7b:f8:
         c5:5d:dc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:51:42 2026 by rpki-client