Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
File:                     ycIPtAaIDHHcvabGs_umov85Kks.mft (raw, json)
Hash identifier:          McYBWhD4cTi6FtOZ4/DaqmsTe1varCoJm88XaLxiY2o=
Subject key identifier:   FF:CB:4B:AC:B5:66:A1:B6:80:DD:E7:E0:78:CD:79:72:24:58:0C:07
Authority key identifier: C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B
Certificate issuer:       /CN=A91B86F6/serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
Manifest number:          41
Signing time:             Wed 15 Apr 2026 08:01:47 +0000
Manifest this update:     Wed 15 Apr 2026 08:01:46 +0000
Manifest next update:     Wed 22 Apr 2026 08:01:46 +0000
Files and hashes:         1: ycIPtAaIDHHcvabGs_umov85Kks.crl (hash: 6KB2sSGB/CjCSULSP7QnMyJbIbb1nd/rTmKwRneyaRA=)
                          2: 41E03246DA3E11F0A9D9994C8ED3641D.roa (hash: RSEIybSMpRGlyt7iVSAaODWDkzpxlz37Tk1zS8mwuzM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl
                          rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 08:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B86F6, serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
        Validity
            Not Before: Apr 15 08:01:46 2026 GMT
            Not After : Apr 22 08:01:46 2026 GMT
        Subject: CN=69df45ea-dabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:76:b2:e2:92:49:ec:c5:1d:7f:58:b4:fd:
                    20:36:c3:8a:8a:8c:0d:c8:f0:3d:df:21:60:00:47:
                    b8:7d:09:01:3b:c0:35:1b:f0:e2:ad:c4:65:31:86:
                    94:0b:c1:aa:78:8d:c7:9a:62:b1:d1:b9:de:e4:88:
                    1a:fd:6e:d4:70:4c:f2:51:c9:e9:39:66:53:03:fc:
                    18:51:87:6d:b5:b3:a2:a5:fb:fb:57:70:ec:a7:9f:
                    ff:59:f0:bf:17:ae:05:d7:55:26:82:77:3a:5e:c1:
                    97:af:ca:59:e2:55:e2:e7:b2:32:84:3a:4f:0c:6d:
                    98:cb:4a:b6:1f:9b:8a:db:f1:05:e7:d6:aa:d7:c3:
                    0c:48:cc:e7:96:61:90:f2:11:14:0c:4e:cc:e5:ad:
                    65:dd:8f:57:85:2b:8f:51:2b:eb:69:28:14:24:e3:
                    ba:87:6a:3f:5a:a1:0f:54:35:31:a7:22:56:7d:89:
                    21:e6:ce:db:0e:1d:a7:ed:03:9f:44:06:84:99:b6:
                    55:d9:03:52:25:f7:2d:a8:4d:87:0f:1e:13:62:c7:
                    32:56:91:cc:71:0a:98:c5:d0:53:ed:98:73:cb:46:
                    3a:45:e2:7f:2f:ea:85:17:30:f5:c8:28:5a:b0:86:
                    31:a7:50:b2:d3:70:c7:0e:a9:c7:8b:1c:65:02:93:
                    f9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CB:4B:AC:B5:66:A1:B6:80:DD:E7:E0:78:CD:79:72:24:58:0C:07
            X509v3 Authority Key Identifier:
                keyid:C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:08:95:b8:36:3d:c1:2d:ea:1a:98:e9:f7:ee:55:4c:b7:a2:
         ed:1f:74:ac:95:3a:e6:e9:ac:c4:db:87:e5:c6:d2:cd:c4:0e:
         eb:0f:c0:ee:96:c2:a4:7c:09:5b:e5:e9:b0:6f:5a:41:16:83:
         65:79:11:f6:0e:7a:10:2a:56:68:bb:c9:1c:9f:98:b5:1a:08:
         25:aa:2b:da:3f:75:c3:ae:d9:2d:71:77:6a:a3:94:4c:aa:b0:
         9e:40:03:b2:df:6b:72:6b:09:25:35:40:5f:b4:03:ed:ed:b6:
         6c:1c:84:54:8c:3b:96:4a:db:4a:e4:98:64:13:e9:ab:65:f2:
         73:d3:ab:b9:9d:17:3b:d6:81:7c:2f:fa:0d:ee:33:1c:f6:91:
         cc:37:d2:cd:45:61:46:a3:89:e2:48:a0:e1:33:e6:e1:a9:bc:
         22:01:f5:64:08:42:77:e0:26:31:56:d2:e5:8b:30:80:80:15:
         b7:56:b3:52:4c:81:37:21:c8:63:0a:b9:60:8f:d4:d2:4c:5f:
         a6:33:08:5e:23:12:e4:7f:32:39:8f:27:31:67:33:54:d2:e4:
         17:10:fc:01:1a:cb:77:4e:95:a8:8e:31:a7:74:80:fa:df:b1:
         be:9f:55:3f:9d:67:69:e4:a2:f6:0f:45:00:44:a2:5b:c8:5c:
         3e:18:90:af
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
ODZGNjExMC8GA1UEBRMoQzlDMjBGQjQwNjg4MEM3MURDQkRBNkM2QjNGQkE2QTJG
RjM5MkE0QjAeFw0yNjA0MTUwODAxNDZaFw0yNjA0MjIwODAxNDZaMBgxFjAUBgNV
BAMTDTY5ZGY0NWVhLWRhYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCww3ay4pJJ7MUdf1i0/SA2w4qKjA3I8D3fIWAAR7h9CQE7wDUb8OKtxGUxhpQL
wap4jceaYrHRud7kiBr9btRwTPJRyek5ZlMD/BhRh221s6Kl+/tXcOynn/9Z8L8X
rgXXVSaCdzpewZevylniVeLnsjKEOk8MbZjLSrYfm4rb8QXn1qrXwwxIzOeWYZDy
ERQMTszlrWXdj1eFK49RK+tpKBQk47qHaj9aoQ9UNTGnIlZ9iSHmztsOHaftA59E
BoSZtlXZA1Il9y2oTYcPHhNixzJWkcxxCpjF0FPtmHPLRjpF4n8v6oUXMPXIKFqw
hjGnULLTcMcOqceLHGUCk/nrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/8tLrLVm
obaA3efgeM15ciRYDAcwHwYDVR0jBBgwFoAUycIPtAaIDHHcvabGs/umov85Kksw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4NkY2L0I3REExMzk2REEz
RDExRjA5MjFFNUVBMjhERDM2NDFEL3ljSVB0QWFJREhIY3ZhYkdzX3Vtb3Y4NUtr
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveWNJUHRBYUlESEhjdmFiR3NfdW1vdjg1S2tzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4
NkY2L0I3REExMzk2REEzRDExRjA5MjFFNUVBMjhERDM2NDFEL3ljSVB0QWFJREhI
Y3ZhYkdzX3Vtb3Y4NUtrcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCdCJW4Nj3BLeoamOn37lVMt6LtH3SslTrm6azE24flxtLNxA7rD8DulsKkfAlb
5emwb1pBFoNleRH2DnoQKlZou8kcn5i1GgglqivaP3XDrtktcXdqo5RMqrCeQAOy
32tyawklNUBftAPt7bZsHIRUjDuWSttK5JhkE+mrZfJz06u5nRc71oF8L/oN7jMc
9pHMN9LNRWFGo4niSKDhM+bhqbwiAfVkCEJ34CYxVtLlizCAgBW3VrNSTIE3Ichj
Crlgj9TSTF+mMwheIxLkfzI5jycxZzNU0uQXEPwBGst3TpWojjGndID637G+n1U/
nWdp5KL2D0UARKJbyFw+GJCv
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:40 2026 by rpki-client