Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
File:                     yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft (raw, json)
Hash identifier:          z6WNdC+JDNzmQUStzaEfXG7JMsyocamwA7VEndqTT00=
Subject key identifier:   46:68:EC:0C:62:33:CE:95:DA:6C:85:7B:10:77:FE:3F:2A:0D:A4:3D
Authority key identifier: C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5
Certificate issuer:       /CN=A91AB3E3/serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5
Certificate serial:       0263
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
Manifest number:          025E
Signing time:             Fri 17 Apr 2026 01:57:35 +0000
Manifest this update:     Fri 17 Apr 2026 01:57:34 +0000
Manifest next update:     Fri 24 Apr 2026 01:57:34 +0000
Files and hashes:         1: yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl (hash: FhjEZ5R6xRLc244aofSvJFfmxVsHCF0DoSEu0pmCe+s=)
                          2: 1E7B7BB4996C11EDA107E666C4F9AE02.roa (hash: 0zxYrdPrMBfjgPj6RJV7ZvcXItqtU0NYSlHoSwv7daw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl
                          rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB3E3, serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5
        Validity
            Not Before: Apr 17 01:57:34 2026 GMT
            Not After : Apr 24 01:57:34 2026 GMT
        Subject: CN=69e1938f-da1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3c:e8:29:dc:14:a5:d5:b1:53:59:a2:d8:ef:
                    ec:63:d7:ce:ae:78:f3:61:d2:7a:61:a7:c4:c4:ef:
                    c7:55:68:3e:12:7d:13:92:d1:52:32:44:db:b9:30:
                    72:6f:91:03:4d:e9:32:cf:5c:8f:81:da:91:42:55:
                    27:ab:04:75:bc:2b:0a:8f:ad:a6:d6:e0:1e:9e:bb:
                    99:50:37:d8:b4:36:65:a9:eb:3d:1d:51:f7:3f:3e:
                    66:28:67:05:c9:61:8f:10:4e:ed:96:63:b9:21:43:
                    1f:1f:2d:ed:12:ea:05:68:9d:e2:58:45:a5:0e:47:
                    44:22:41:44:6f:61:b4:57:15:8c:55:89:cf:f2:67:
                    be:3b:94:77:07:fc:1d:c7:89:63:65:a4:48:08:4e:
                    30:70:21:bd:a4:19:ff:c0:66:ea:26:f4:ae:ed:e5:
                    48:c8:a8:33:e4:8f:be:1b:7a:0a:ef:d1:7e:77:95:
                    d9:3b:07:97:6f:00:9b:9d:5c:bf:b4:ca:c0:80:2e:
                    00:42:6b:dd:78:fe:f1:c4:44:23:bc:79:dd:8d:9c:
                    87:c6:32:65:fe:5b:06:ff:ff:f2:8a:0c:3b:9b:0c:
                    f5:57:e3:9c:45:0d:68:54:22:8a:01:8b:32:6d:62:
                    bb:77:ca:5b:5b:c1:ee:95:b4:07:f3:b5:a4:ba:41:
                    af:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:68:EC:0C:62:33:CE:95:DA:6C:85:7B:10:77:FE:3F:2A:0D:A4:3D
            X509v3 Authority Key Identifier:
                keyid:C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a9:ab:28:ac:67:6a:9d:d4:59:57:69:d5:c6:8a:db:28:d0:
         84:a3:6d:ac:17:97:15:3c:02:5f:78:37:04:f0:cf:a5:40:3c:
         19:1d:51:47:37:c1:dd:e3:c1:ab:5e:62:ff:8d:9a:c0:69:42:
         4b:a1:e2:22:b0:23:59:a1:31:19:b7:21:d1:90:b9:f4:c4:31:
         ce:7e:2e:c1:d3:bd:ac:72:9e:23:24:fe:41:23:f1:c2:48:8b:
         0a:0f:2f:ad:10:c5:78:ac:6f:c3:e9:db:be:ff:e7:65:bd:36:
         a4:4c:b7:bd:4c:b4:58:65:11:e5:a9:fb:1e:4a:76:89:d4:ec:
         e0:33:bd:93:5b:7b:97:48:33:86:f2:63:81:7b:f2:94:6a:be:
         b5:1e:65:69:cb:8c:c7:aa:d8:80:c7:ec:4b:50:c6:be:b4:cd:
         7e:32:99:0f:61:e2:7e:c3:f7:e8:d0:2d:9a:da:45:b2:12:a8:
         6a:e7:b1:17:a2:21:21:c9:51:2e:0a:e4:66:99:1d:5d:cf:5d:
         97:25:e7:cd:c5:a6:08:db:0b:a3:69:66:a5:87:e9:64:11:87:
         a6:3d:3e:7f:0f:ec:eb:5b:fe:c1:ce:eb:06:e7:e4:0f:ce:cd:
         ac:88:0e:4e:b3:e5:87:9c:0e:50:21:b5:3a:0d:9d:a2:b4:b6:
         87:04:cd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:29:02 2026 by rpki-client