Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft
File:                     ycf7MVXuXrRUGnY3mYlwgGpG878.mft (raw, json)
Hash identifier:          SaQgl097XxCW9jha0z3rKKN84gmqxHCK51ETTquewgs=
Subject key identifier:   2B:E9:1F:D6:AE:FD:3A:2E:2C:9C:58:4B:1C:7C:A6:01:27:54:ED:EF
Authority key identifier: C9:C7:FB:31:55:EE:5E:B4:54:1A:76:37:99:89:70:80:6A:46:F3:BF
Certificate issuer:       /CN=A919AB96/serialNumber=C9C7FB3155EE5EB4541A7637998970806A46F3BF
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft
Manifest number:          7F
Signing time:             Fri 17 Apr 2026 07:25:52 +0000
Manifest this update:     Fri 17 Apr 2026 07:25:52 +0000
Manifest next update:     Fri 24 Apr 2026 07:25:52 +0000
Files and hashes:         1: ycf7MVXuXrRUGnY3mYlwgGpG878.crl (hash: YWXHpIKYnYowWGSuldGZNFZXg221nZKnlMT3V3tGKA0=)
                          2: CDD6FA7CAD8511F08C759F59C4F9AE02.roa (hash: ULqljmKP1BWooJSvotaZqa/yGOV5svmm48Hfjv80d1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.crl
                          rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AB96, serialNumber=C9C7FB3155EE5EB4541A7637998970806A46F3BF
        Validity
            Not Before: Apr 17 07:25:52 2026 GMT
            Not After : Apr 24 07:25:52 2026 GMT
        Subject: CN=69e1e080-1230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:e2:f7:83:b2:6b:14:75:77:3d:b8:6d:c2:
                    7f:22:16:5b:f2:98:68:a3:3e:e3:e3:2a:ea:f3:31:
                    ee:57:74:77:d4:66:65:08:b9:cb:75:19:eb:b0:79:
                    c1:a2:d5:e7:ca:af:bb:0b:fb:3f:3a:b8:9b:9c:c3:
                    be:3b:3a:b2:44:71:52:f9:14:58:fb:bc:7a:ff:f6:
                    89:84:a2:c7:9e:49:b8:98:df:c4:d6:42:ab:46:e1:
                    d8:13:e6:86:f1:55:1e:1b:09:6f:ba:a8:f3:7a:92:
                    f6:ae:55:2f:bc:04:96:9b:9d:3d:5f:16:32:3d:46:
                    44:06:a9:18:20:c1:05:42:70:83:a3:08:6d:25:0c:
                    3d:df:f1:86:3d:8b:61:59:96:8c:3f:51:b3:b9:8b:
                    e3:8f:c6:5f:11:d3:80:f9:98:b5:5c:7d:5f:44:5b:
                    8e:8f:64:dd:4f:8b:2c:eb:4f:3e:f9:f7:45:ef:06:
                    21:91:b2:d6:26:6f:79:7d:36:58:fc:02:1c:c3:4e:
                    b1:65:e6:52:bb:2a:ff:b1:6c:ec:e2:02:63:65:0a:
                    15:35:32:cc:2a:13:27:6a:a7:75:93:61:a0:d1:be:
                    30:f6:4b:9b:32:f8:7b:7e:25:47:86:79:a0:b3:5f:
                    82:2b:ab:3a:bb:09:08:c2:74:5c:27:38:35:bb:30:
                    d8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E9:1F:D6:AE:FD:3A:2E:2C:9C:58:4B:1C:7C:A6:01:27:54:ED:EF
            X509v3 Authority Key Identifier:
                keyid:C9:C7:FB:31:55:EE:5E:B4:54:1A:76:37:99:89:70:80:6A:46:F3:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:4d:09:ed:af:a6:f4:d1:20:4a:8d:c1:6d:46:ca:35:61:2c:
         10:59:f9:5b:c6:ca:76:13:1c:0d:a8:b6:8f:a2:be:22:2b:74:
         0e:b0:42:e4:f1:3b:66:48:06:df:27:75:6f:09:22:f6:85:78:
         09:af:bf:19:03:50:32:3a:af:1d:30:3d:10:55:55:08:b7:5f:
         f7:c2:cf:83:33:0d:8f:a8:37:dd:c6:fe:39:32:24:b6:08:f0:
         1c:5b:ae:47:34:ff:d3:2e:7a:48:1f:85:94:e6:17:29:43:e9:
         3f:c9:58:4d:9e:5d:0a:33:08:38:ff:b7:e2:d9:19:31:92:c0:
         58:14:46:27:49:23:c3:9e:87:70:44:fe:84:f0:e8:97:1a:66:
         e8:69:9a:77:a5:66:9d:77:ca:c5:e5:f8:41:61:97:88:22:a8:
         e7:28:fa:d4:aa:b3:89:4d:67:f3:4d:27:2b:f3:5a:45:1b:a0:
         d5:3c:ee:02:49:42:58:69:ea:96:87:46:79:59:58:c5:97:72:
         71:74:1d:32:fc:26:1b:c7:82:66:c3:c4:40:84:18:d8:68:8d:
         57:73:fe:75:dd:77:53:fe:ed:74:fc:41:92:4f:c4:42:0e:1e:
         c5:76:d7:b6:03:3c:14:e9:eb:73:2a:50:4f:ab:fa:03:72:54:
         e5:2a:0c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:11 2026 by rpki-client