Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
File:                     y8CtGWWFFkH2YRHo4pAmmKm57YA.mft (raw, json)
Hash identifier:          mbcOUgD9vU5nh6TYVTBg78lO3Ik+0+8H20IttFzeTLY=
Subject key identifier:   84:48:D5:22:C8:FD:14:D4:85:9E:F5:67:B4:E5:8E:9D:5F:F7:96:EB
Authority key identifier: CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80
Certificate issuer:       /CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
Manifest number:          019C
Signing time:             Wed 15 Apr 2026 04:01:56 +0000
Manifest this update:     Wed 15 Apr 2026 04:01:55 +0000
Manifest next update:     Wed 22 Apr 2026 04:01:55 +0000
Files and hashes:         1: y8CtGWWFFkH2YRHo4pAmmKm57YA.crl (hash: AqBWyw6cOgAbi3+CtX/NdMyjmMgDuaI1VKaYffbJSSU=)
                          2: CA2A06D6D5E511EE9B319A12C4F9AE02.roa (hash: yIHsiGXUbr4yiSWIbyeH/+lnd1LO5enPoNYE+CObcWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl
                          rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C38CC, serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80
        Validity
            Not Before: Apr 15 04:01:55 2026 GMT
            Not After : Apr 22 04:01:55 2026 GMT
        Subject: CN=69df0db4-fe04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:63:34:fa:d9:ca:91:0c:8f:03:6d:95:d3:a4:
                    56:3d:53:5d:d3:75:fe:e8:12:1f:ac:e7:b1:5f:ea:
                    c5:01:e8:2a:ca:d7:a1:ff:8b:fd:97:0a:27:15:74:
                    88:87:f4:12:40:92:97:77:b7:d2:31:00:b1:92:fa:
                    c7:fd:24:0f:cc:5d:29:98:99:43:06:5f:9e:5f:70:
                    21:c8:5c:12:22:c3:d6:37:52:f7:d4:98:06:04:57:
                    21:9e:d5:21:70:fa:55:9d:d9:b3:fa:29:31:f7:dc:
                    e8:32:61:36:13:18:ea:4b:00:d4:ae:6a:12:1a:a1:
                    c4:5e:96:77:2e:bd:c3:6d:76:e4:6a:fc:58:aa:72:
                    10:8f:82:26:02:c7:58:1e:48:1e:36:1b:62:8b:72:
                    79:5c:f9:24:15:a7:fa:a5:8e:b8:5d:4c:d3:6c:95:
                    f3:ca:89:d7:9b:3b:35:13:ef:ee:33:2f:54:f7:0b:
                    03:f9:05:3a:4e:78:00:fe:1b:89:fb:75:02:e3:35:
                    d3:e6:c2:fc:73:22:be:88:4b:86:0a:c2:8f:0b:98:
                    93:53:3a:7a:ae:19:83:9e:5b:0a:51:c5:6f:48:dc:
                    ae:21:98:6f:f8:1d:96:c8:68:7f:a6:3c:2a:e8:a7:
                    eb:f4:5d:33:a8:ea:05:6d:cc:ca:ff:ed:21:c8:f9:
                    16:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:48:D5:22:C8:FD:14:D4:85:9E:F5:67:B4:E5:8E:9D:5F:F7:96:EB
            X509v3 Authority Key Identifier:
                keyid:CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:1d:61:83:39:6d:a4:a4:6e:b5:2e:e9:e3:5a:75:3e:4b:3f:
         b0:f3:1f:c5:f2:fc:75:6d:93:03:77:ff:d7:99:28:27:1b:f7:
         68:df:ee:f1:02:f2:2b:1f:c8:2a:14:f3:8f:a7:2a:51:a0:9a:
         d3:54:e3:07:b6:b6:aa:e4:ba:d9:59:6f:e0:15:fd:3c:6e:17:
         53:92:57:75:02:43:6d:89:6a:4f:63:da:c4:05:f5:b4:fd:7d:
         fb:5b:16:f1:16:35:17:c2:6a:2a:ef:90:87:39:05:20:4c:90:
         69:ee:f4:59:52:0a:a6:b2:ae:a9:4d:47:24:b8:ee:03:72:b0:
         45:8d:04:2f:f5:39:eb:42:2a:88:ae:e7:3a:3a:4d:57:ae:55:
         ea:48:71:e0:f2:45:18:eb:e7:09:81:a7:d5:8e:7c:25:4e:a6:
         66:05:6f:ee:82:32:fc:17:fc:d2:44:ae:8d:a3:dc:8a:7c:2e:
         fd:70:6d:1d:d9:9f:3a:da:e9:3b:1a:be:af:00:ed:d2:b6:d0:
         84:09:5d:c8:fd:5d:b6:0b:6e:98:da:aa:5f:93:ee:e5:c0:2a:
         e3:2b:8d:39:10:65:58:8e:54:e8:70:e8:13:16:25:8f:08:3e:
         c4:6a:a9:12:34:5f:4a:6e:66:69:27:a4:06:5e:50:72:61:6d:
         3e:53:ed:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:07:53 2026 by rpki-client