Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
File:                     yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json)
Hash identifier:          6w1jasIRKkbklnMWhu2gUWbc3i7YEpk5gRPGulcx5WY=
Subject key identifier:   69:1F:12:07:A3:61:F5:99:BB:05:34:D4:B1:72:A8:B1:0B:38:B5:F5
Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
Certificate issuer:       /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Certificate serial:       0EEA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
Manifest number:          20D0
Signing time:             Thu 16 Apr 2026 17:04:33 +0000
Manifest this update:     Thu 16 Apr 2026 17:04:33 +0000
Manifest next update:     Thu 23 Apr 2026 17:04:33 +0000
Files and hashes:         1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: QL8y4uki2Up3s+NaxQPFp8lTicsTkV6vFRksFGuR2rk=)
                          2: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: FStnmuvAhEZrbfpobk2t5cZMbtbEpQcJCfPnl30kvn4=)
                          3: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: vwjjv+5sqcKmdcJ+2TblUGDFKJ/vFoOagGQtoy9fEng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl
                          rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3818 (0xeea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
        Validity
            Not Before: Apr 16 17:04:33 2026 GMT
            Not After : Apr 23 17:04:33 2026 GMT
        Subject: CN=69e116a1-bac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:db:98:45:7e:51:8d:4e:18:98:34:68:fd:
                    8f:c1:49:a8:88:69:3b:8e:0a:0f:8b:e4:f5:b5:b8:
                    00:29:cb:20:5d:13:d0:e3:b8:82:22:a4:a9:ac:72:
                    cf:71:5c:d4:42:9a:4a:f1:07:d8:1d:0d:fc:4e:49:
                    75:5a:72:79:82:17:a2:57:77:1c:bb:9a:17:1d:3a:
                    26:fe:13:48:52:2b:61:e9:17:45:d2:a3:20:ac:91:
                    56:62:36:50:8a:26:b0:93:6e:f4:c9:57:6b:a5:5e:
                    50:21:05:2c:36:ae:f2:3e:3b:75:3d:6b:7b:5f:7a:
                    4b:fc:eb:24:4f:d8:47:f2:21:12:e7:44:3b:a4:c1:
                    66:ad:aa:b3:4d:3f:f7:a4:b5:1a:81:67:7d:41:90:
                    7d:d3:87:ab:00:ba:12:f3:dc:79:8e:97:17:78:06:
                    b4:2d:b8:65:0d:be:fe:19:70:fc:f3:a1:45:09:04:
                    13:4f:e5:94:f7:d8:bb:e2:ca:ce:42:36:ea:12:c2:
                    6f:ad:05:ba:37:35:0e:ab:25:0d:a1:ef:9c:fc:5d:
                    cb:7f:71:cc:89:f9:43:52:89:2b:e0:e9:df:1c:3a:
                    ab:0a:d1:05:ef:8d:23:74:9b:5a:4a:23:68:d2:db:
                    62:a0:a4:4a:fe:2c:b0:d9:97:34:43:ff:57:a9:d8:
                    95:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1F:12:07:A3:61:F5:99:BB:05:34:D4:B1:72:A8:B1:0B:38:B5:F5
            X509v3 Authority Key Identifier:
                keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:67:87:30:59:e8:92:8e:5b:a0:c9:44:e7:7c:c0:57:e5:75:
         bf:b0:13:09:8b:a4:1b:4a:09:c4:65:8c:8b:43:67:1e:45:a0:
         cd:6f:fb:75:43:52:14:4b:44:81:f5:f5:7f:b7:81:17:c7:b9:
         fd:93:19:cf:c5:d1:7e:36:0c:38:15:56:d8:8d:50:ca:7e:5b:
         93:e6:a7:a7:7f:5b:c3:87:9c:69:0f:c1:a9:fe:50:b3:09:d0:
         64:47:8e:82:41:8c:0e:6a:b8:34:2d:4c:98:a4:81:63:40:b2:
         6a:4e:a4:8a:d5:2b:59:b9:b3:43:73:e7:fe:ce:79:b0:45:3b:
         fa:64:8e:3c:a2:8e:11:ea:65:2b:ad:f0:14:30:69:28:d4:5e:
         a0:0d:ac:6e:4a:cc:71:3c:00:c3:d6:22:c3:73:ba:77:46:cb:
         a7:16:01:9e:78:35:2b:be:4f:d6:ba:ac:a1:bf:42:ad:a0:25:
         48:5c:86:66:be:98:ee:4a:8b:ff:67:a7:4f:c2:ee:5c:63:86:
         95:42:15:34:fe:70:76:d9:2b:95:9e:26:fe:15:ed:ee:f4:9d:
         25:d7:fd:8b:83:15:f7:95:0c:e8:94:85:fc:9d:12:3e:86:ca:
         2c:e8:c1:5e:1c:a7:4c:81:a2:04:5e:66:15:e0:68:61:57:fe:
         61:fe:05:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:04:39 2026 by rpki-client