Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
File:                     YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft (raw, json)
Hash identifier:          JcYt+DtRyZTejD7/SjjZea0Yr+8HH503kJpcSSKAgP4=
Subject key identifier:   8A:5B:FC:B8:92:86:43:16:33:74:02:BB:D4:FA:5C:6B:A1:83:76:83
Authority key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
Certificate issuer:       /CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294
Certificate serial:       049E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
Manifest number:          0487
Signing time:             Fri 17 Apr 2026 00:01:06 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:06 +0000
Manifest next update:     Fri 24 Apr 2026 00:01:06 +0000
Files and hashes:         1: YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl (hash: 00yC1Gcjnv2VJnQozJhRugbtx4/USlH2xwdxtOi6o+w=)
                          2: 373C0EEEAFB011EC9688644FC4F9AE02.roa (hash: CxWoJR6Se2jSwedaoRYTtf5Ccc+rdHyvf5qIYgnZC84=)
                          3: EF6D0418235911EFB1B55375C4F9AE02.roa (hash: K+H/sCg/7uo16p0l9r8hsE4GJ7oFMKIq4jprTznasVQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182 (0x49e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B08, serialNumber=614CCD24F785E9299215916408294042F1463294
        Validity
            Not Before: Apr 17 00:01:06 2026 GMT
            Not After : Apr 24 00:01:06 2026 GMT
        Subject: CN=69e17842-af08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:ed:d7:6e:c1:b0:8d:8d:40:73:a1:12:64:
                    7c:58:a0:2b:6f:c0:85:52:59:85:3f:59:59:c2:9a:
                    0d:f4:68:11:bb:09:84:f9:a6:cf:97:90:7c:9e:52:
                    ae:4f:f2:8e:f2:84:b5:64:fe:3c:cd:e0:63:f2:55:
                    86:76:02:4a:d3:05:c2:8c:08:09:a3:8a:64:43:68:
                    78:d0:8e:ec:bc:ae:ec:83:f4:97:85:4b:f6:eb:c4:
                    fb:51:1d:85:28:ae:b0:a3:c9:00:cb:d5:c9:87:f4:
                    27:d1:f4:73:fc:00:9c:df:f8:89:d2:95:04:0c:fe:
                    89:28:c6:84:e0:ca:70:b1:3f:e1:c1:27:42:9b:ec:
                    58:39:d2:26:7a:f7:50:c5:9a:e0:a1:a9:c8:0a:66:
                    4b:63:14:76:73:83:17:32:b1:c4:ee:8e:de:81:f4:
                    be:03:b4:ef:13:09:07:78:2a:b5:26:02:99:65:38:
                    7a:fc:c7:29:92:27:f9:bb:4d:86:f3:fa:04:cf:c4:
                    82:4d:c3:c3:d2:d9:39:6a:02:5b:65:88:8c:e3:a4:
                    d0:83:aa:54:64:ec:1f:c8:11:4f:c6:e1:ac:17:57:
                    36:2d:89:d1:fe:7a:ae:34:d8:a3:76:b3:af:8f:f1:
                    57:17:20:14:1b:b3:ab:4d:4c:5e:9b:6f:3c:2e:56:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5B:FC:B8:92:86:43:16:33:74:02:BB:D4:FA:5C:6B:A1:83:76:83
            X509v3 Authority Key Identifier:
                keyid:61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d1:37:1a:b6:73:bf:64:20:03:b3:d2:55:1b:ab:e0:4d:1a:
         c7:93:15:28:c2:18:98:09:10:4f:ff:48:20:2c:11:4d:7f:6b:
         1c:6d:27:cf:ef:30:8b:3a:f4:fd:9a:6e:50:75:37:f9:54:4e:
         43:65:5f:00:b8:45:ac:a9:cc:fa:c8:a8:68:c6:71:44:a7:5a:
         1b:74:2a:85:12:21:a5:cd:55:54:d1:78:fa:b8:db:53:f3:e4:
         d5:7a:31:33:1a:db:97:9e:a4:60:bf:cc:42:e9:c5:7e:69:95:
         73:fe:60:5f:cc:d0:79:fb:79:ca:12:36:a9:96:55:87:53:00:
         fc:9f:8d:10:aa:6e:88:b7:cb:56:31:42:45:9f:ac:36:46:12:
         76:c5:63:19:bb:37:f2:34:ed:57:c7:3c:00:05:30:99:b4:17:
         36:6d:7c:a9:cf:af:e4:b3:11:9d:80:20:27:96:61:01:ab:b8:
         92:8e:51:10:19:77:27:81:36:ec:5e:dd:e2:42:65:df:0f:eb:
         4b:e4:60:c5:f8:2d:d9:f8:9f:33:c4:e7:43:8d:da:28:86:df:
         96:cc:c1:f9:0b:1d:bb:01:df:30:ce:7a:d3:f0:13:38:8c:9e:
         46:e0:57:6c:33:86:35:88:bc:fc:e3:cd:75:fc:89:cc:85:fd:
         6d:3c:20:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:06 2026 by rpki-client