Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
File:                     y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json)
Hash identifier:          hc+/8CZk/sl/e8pNGukuakfu37Mhbif4jdLQjq+P8UM=
Subject key identifier:   87:F1:DA:62:54:F5:04:9B:DA:06:AA:41:1F:8D:59:03:8D:77:8B:DC
Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63
Certificate issuer:       /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
Certificate serial:       26C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
Manifest number:          26A8
Signing time:             Thu 16 Apr 2026 15:39:32 +0000
Manifest this update:     Thu 16 Apr 2026 15:39:32 +0000
Manifest next update:     Thu 23 Apr 2026 15:39:32 +0000
Files and hashes:         1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: UOtkvq+6kEJ36Q5qlTeL5hD2gNPiV/39qyKfRAQG374=)
                          2: FBD68828FCBF11F0A4D02CBC666F56BC.roa (hash: SxJM2aFKgBGF6I9rZ7S9/EziiSoyCz/xteiPP/MBsS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl
                          rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:39:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9923 (0x26c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
        Validity
            Not Before: Apr 16 15:39:32 2026 GMT
            Not After : Apr 23 15:39:32 2026 GMT
        Subject: CN=69e102b4-ab63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:14:14:27:b4:f8:7e:a0:8b:92:19:d7:de:26:
                    95:dc:a1:11:53:d5:58:94:e9:d2:17:51:d8:3e:bf:
                    71:2a:05:9b:e0:e3:b3:c4:dc:fb:05:00:2c:59:99:
                    b9:a8:e0:05:93:2c:41:98:e8:c1:bc:ab:69:8a:f6:
                    6e:0e:a9:17:64:d3:c9:76:9e:7e:95:50:9a:5c:aa:
                    7f:e9:f5:87:d3:22:ee:00:9e:32:f9:ad:0f:11:aa:
                    4a:83:4b:8c:56:ad:57:19:c1:8b:f5:e7:01:db:69:
                    6a:2d:04:08:5f:5b:d2:f2:23:97:cf:be:97:25:25:
                    63:b1:49:f0:4f:26:58:f2:ec:4e:c3:41:ec:21:d3:
                    a4:dd:37:be:ad:96:5e:91:4c:76:d7:1a:6f:70:ff:
                    d9:2c:65:be:e2:f2:bb:67:6b:61:8a:4a:09:c8:d2:
                    15:6c:ee:9d:26:1e:0d:3b:34:89:b8:97:0e:a2:cf:
                    c6:0a:61:5a:9f:b9:81:e2:0f:02:b1:2c:9c:5d:5c:
                    1e:8f:e1:78:e7:d2:88:51:0d:6b:d7:ed:ae:fe:53:
                    7d:af:80:85:e1:9a:83:26:0c:26:04:bd:76:02:96:
                    99:b8:2d:25:4d:34:3a:47:21:07:26:dd:06:d5:02:
                    04:a8:17:44:63:17:9f:ef:21:a1:39:ee:4a:b7:2b:
                    51:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F1:DA:62:54:F5:04:9B:DA:06:AA:41:1F:8D:59:03:8D:77:8B:DC
            X509v3 Authority Key Identifier:
                keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:eb:64:f3:e4:fc:bc:93:7d:dc:ba:78:74:98:28:8b:d6:ea:
         a9:70:b6:76:f5:b4:10:23:6c:65:55:f3:59:03:40:78:74:6f:
         3a:65:47:28:8c:ad:e7:9b:85:94:1d:14:9c:36:18:06:28:99:
         fc:4d:ea:25:d5:c3:87:e1:ac:e4:eb:65:86:98:40:dc:f9:5e:
         db:f6:2a:f1:ac:c2:83:bf:bc:07:8e:d9:dd:86:f2:89:97:4b:
         75:14:df:a5:77:05:7a:c4:8c:63:97:de:7d:82:78:8f:84:5a:
         19:b4:97:7d:13:e0:ed:1b:7a:3c:a8:2c:86:69:88:9b:bd:c7:
         9a:30:af:c9:02:a9:86:8b:22:b7:26:4b:7b:a2:16:8c:99:98:
         6e:9f:fb:63:ad:6c:f5:86:53:84:47:3c:60:ce:f8:97:06:c0:
         0f:04:d0:21:a5:0d:cb:7f:a5:db:67:88:f6:be:d2:74:99:cb:
         b5:b8:a6:20:84:27:fa:eb:c5:ab:fe:a7:72:a8:3a:e1:a5:bf:
         03:ae:3d:c3:07:b8:33:d2:ff:6c:d5:d5:7f:8d:bb:3d:e4:ed:
         6f:1a:01:22:e8:d2:64:e7:40:a3:88:d7:95:d3:76:60:ad:dd:
         37:cd:6d:a1:81:5d:28:f7:2b:11:51:5c:c5:0f:c4:7e:bf:a7:
         5f:a3:dc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:25:50 2026 by rpki-client