Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
File:                     yddu42nMHPDmKcUQpLr0ZeFfteE.mft (raw, json)
Hash identifier:          4l5/3yGij8RlfmSNrzBhJunfC7NKKH34UQycESZN26k=
Subject key identifier:   C1:6C:90:B9:9E:D7:7D:98:78:11:7E:D8:84:90:31:7C:A0:26:88:48
Authority key identifier: C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1
Certificate issuer:       /CN=A9194E59/serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1
Certificate serial:       04C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
Manifest number:          04BC
Signing time:             Thu 16 Apr 2026 23:48:14 +0000
Manifest this update:     Thu 16 Apr 2026 23:48:14 +0000
Manifest next update:     Thu 23 Apr 2026 23:48:14 +0000
Files and hashes:         1: yddu42nMHPDmKcUQpLr0ZeFfteE.crl (hash: H4K9noN0aX2O4cQYytT8k3Mz4uP+zFvM+pbV0adNYUE=)
                          2: AD9D02406C6811ECB7C0925AC4F9AE02.roa (hash: +cLlzkIBm/p8e2CGv26xzGqvHJz8gqLYzjwIGaKh6zM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl
                          rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1220 (0x4c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E59, serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1
        Validity
            Not Before: Apr 16 23:48:14 2026 GMT
            Not After : Apr 23 23:48:14 2026 GMT
        Subject: CN=69e1753e-fdb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f3:d6:57:17:5f:b0:d4:8b:c5:ff:75:04:0f:
                    86:4e:c7:ea:4b:c6:70:a2:3f:97:db:dc:09:93:21:
                    60:21:b4:14:ea:79:d6:20:df:42:65:47:28:b2:10:
                    b1:52:f0:8f:21:74:9b:f2:04:35:0b:7d:e2:28:c8:
                    84:0c:52:c9:1a:c6:65:47:00:0f:9d:63:56:5e:28:
                    cf:0b:ef:ad:2b:9c:74:fb:51:70:c3:1f:a4:bd:85:
                    c2:f7:71:49:ac:e2:31:30:cb:a6:71:1e:4d:c6:79:
                    ab:39:d3:b6:4e:fc:bd:25:c4:d6:2a:ef:72:58:11:
                    a0:82:2e:ca:49:81:e5:4f:59:a7:59:05:08:40:38:
                    2b:34:29:66:2a:57:ec:8e:75:77:fb:aa:76:17:33:
                    bc:40:40:8d:ff:1e:92:4e:ce:e8:cd:50:98:63:27:
                    bf:64:f3:08:b7:22:92:22:13:f5:f0:12:d9:0e:45:
                    73:03:58:b4:aa:8e:e2:c5:c2:80:17:c0:75:45:83:
                    94:3d:48:7c:0d:6a:a8:85:f9:1c:31:99:6e:11:44:
                    86:59:b1:e6:fd:7c:f0:33:77:66:62:6b:1c:89:6c:
                    8a:27:61:45:fc:ac:aa:ed:a2:a9:60:19:c2:45:5c:
                    17:0b:0f:1a:7b:1a:d4:d4:74:31:15:80:fa:51:2d:
                    83:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6C:90:B9:9E:D7:7D:98:78:11:7E:D8:84:90:31:7C:A0:26:88:48
            X509v3 Authority Key Identifier:
                keyid:C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:82:e0:ca:9d:f1:11:fa:b3:51:b2:3c:d1:af:2e:0a:c8:f2:
         5c:98:fa:77:3c:ed:ab:a2:44:e5:58:d4:7f:58:1a:c2:18:5e:
         01:65:ec:4b:cd:ee:dd:00:5e:68:e8:e6:c4:c4:89:a2:68:a9:
         68:10:7b:c5:06:be:d6:80:c6:1e:bf:b0:d7:e9:ed:72:ab:52:
         48:26:e7:79:e0:70:32:cf:1f:b8:e5:ca:b5:f6:3f:b5:7c:f8:
         a4:24:26:b3:a5:a7:78:22:58:23:46:ef:76:da:68:00:9f:e8:
         58:b6:a3:34:66:18:1e:ac:4d:92:12:79:a9:db:ba:5b:12:b2:
         cb:78:50:ca:8e:86:e1:3f:39:25:56:2e:c1:1b:ea:04:f5:97:
         07:8e:57:da:fa:2b:f9:32:ce:69:56:81:b8:ca:d6:f4:16:2f:
         11:f0:5a:a4:7c:57:88:67:d2:e5:47:4f:14:f9:71:33:62:6c:
         d9:66:45:b1:f7:5f:f7:b6:aa:fe:81:17:a8:2d:9e:f7:ca:dd:
         c1:46:9f:fb:be:18:87:99:6b:12:6a:85:31:61:c8:bf:ae:bd:
         30:fe:9f:74:c0:d5:6b:ff:c4:e9:3c:87:66:12:0a:39:e2:7b:
         29:ea:65:30:ad:61:d7:e2:b5:8f:c8:9d:6f:11:cf:5e:22:c5:
         05:e3:35:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:36:56 2026 by rpki-client