Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
File:                     yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json)
Hash identifier:          Frp/1BF5o0RwDB3waprbFEoE7tzBSUCy7uaYEORs8cE=
Subject key identifier:   3B:30:0E:91:1B:B2:D2:7F:08:CD:06:90:76:6F:46:5B:F7:7B:3F:CE
Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9
Certificate issuer:       /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
Certificate serial:       0224
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
Manifest number:          021E
Signing time:             Fri 17 Apr 2026 02:33:39 +0000
Manifest this update:     Fri 17 Apr 2026 02:33:39 +0000
Manifest next update:     Fri 24 Apr 2026 02:33:39 +0000
Files and hashes:         1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: XxuigcDEmsQyFb42M/+YSy89yrdzASKJCebXo/PuLWo=)
                          2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: Cd3ka8bb5R3DYUTF/v0b6ivGnboKPrlUrUoM7/Vgbdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl
                          rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
        Validity
            Not Before: Apr 17 02:33:39 2026 GMT
            Not After : Apr 24 02:33:39 2026 GMT
        Subject: CN=69e19c03-08c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:85:a3:4e:76:bc:1b:6b:24:fb:3c:30:bd:
                    03:34:27:76:17:41:f8:8c:1c:f8:71:42:3d:d9:06:
                    a0:06:c4:ea:e9:39:bd:f6:61:6e:4a:b6:67:5d:d6:
                    cd:a7:28:05:3c:87:a6:78:57:25:7d:20:ca:72:ae:
                    ed:34:4d:6d:45:75:c8:13:72:e0:a3:c6:91:0a:65:
                    06:20:b9:f8:5c:dc:77:4a:87:33:28:f9:19:ba:5f:
                    a2:82:84:1c:6c:c0:84:0b:b9:f1:04:86:6c:cb:34:
                    98:95:ee:44:81:b3:e0:6b:42:23:78:5c:e1:0e:15:
                    84:50:0a:93:c3:1f:35:e5:e6:03:f7:e9:4e:4c:1e:
                    e9:0f:00:a4:28:1c:2b:dc:24:f2:33:43:76:7e:c5:
                    6b:5f:1b:28:03:33:82:54:f8:08:08:02:3c:3e:91:
                    77:b2:00:58:21:b0:e6:36:49:80:35:60:36:6c:03:
                    77:15:fb:5e:e3:70:d6:82:ee:45:92:0a:d2:f2:47:
                    df:d5:e2:90:c5:ef:be:36:2e:ad:95:f3:23:ec:17:
                    ef:57:10:a1:36:13:cf:ae:6d:cb:f0:5c:2f:3c:ef:
                    82:af:ab:79:05:d3:a0:70:6b:9a:7c:42:58:f2:fc:
                    f9:03:8e:db:1a:d3:0a:49:f0:bf:6f:18:cc:ac:77:
                    da:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:30:0E:91:1B:B2:D2:7F:08:CD:06:90:76:6F:46:5B:F7:7B:3F:CE
            X509v3 Authority Key Identifier:
                keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:10:a5:46:44:73:65:9b:95:32:9e:db:f5:4a:26:6c:5c:6b:
         d1:11:a6:31:bb:78:6e:51:6f:27:a1:9d:c1:2f:43:3d:43:ee:
         14:36:da:ae:b2:b8:7a:3d:0b:66:c8:ae:ef:54:de:ed:cb:3d:
         72:86:05:62:78:36:03:f0:f0:95:b1:c3:c7:9a:48:f1:93:e5:
         fe:02:5a:40:fe:9b:92:0e:d6:73:8e:aa:8a:a2:0b:ec:ab:04:
         be:f4:7d:29:e4:44:45:2c:d7:b7:4f:9d:1e:31:30:65:fc:40:
         3c:3c:70:0d:d0:22:04:47:13:cd:7e:13:a7:39:68:bc:20:37:
         8f:73:82:d2:56:17:60:64:b9:bd:c5:95:98:da:50:e6:65:ff:
         2c:5e:ab:8f:ed:c0:0a:be:61:9f:7f:5b:c9:29:8e:62:b4:e3:
         22:df:b7:14:ea:3a:b5:55:19:db:32:62:4f:81:91:82:a7:da:
         a2:11:62:e8:83:69:46:12:c2:7e:b7:2f:d9:07:13:fd:e6:de:
         9f:08:3f:6a:2f:23:ce:b6:f6:b4:fc:72:e7:c3:ab:78:5c:90:
         d4:43:9d:85:76:10:0d:a5:f7:3b:4c:ff:51:f1:23:1f:15:27:
         57:c1:94:ae:2e:68:0d:13:d0:5b:20:1b:a9:0a:7b:61:94:46:
         76:32:5a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:42 2026 by rpki-client