Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
File:                     Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json)
Hash identifier:          DLIqBeEmXkpxWAgPmeRhbQcJ5KGqqs7pWIh61ShhSYw=
Subject key identifier:   BD:F3:C6:E6:07:27:E6:11:00:52:3F:EB:2C:CF:C9:65:9A:44:BD:C5
Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
Certificate issuer:       /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Certificate serial:       01F1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
Manifest number:          01E8
Signing time:             Fri 17 Apr 2026 03:10:01 +0000
Manifest this update:     Fri 17 Apr 2026 03:10:00 +0000
Manifest next update:     Fri 24 Apr 2026 03:10:00 +0000
Files and hashes:         1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: 0GpztQOWI0/WdC6tj05difXgxzpvdZ491g/STj+SoqI=)
                          2: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: yOJh/+loOwxOssiA6T+NoUiDgUYuEN8uooTJYRzMykM=)
                          3: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: qQAFiH8K0tMbZHs9aqKBQOP7+YdRR7v8JEfyMnCNuXA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl
                          rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
        Validity
            Not Before: Apr 17 03:10:00 2026 GMT
            Not After : Apr 24 03:10:00 2026 GMT
        Subject: CN=69e1a489-000f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:6f:eb:93:32:a1:86:84:d8:df:89:26:e6:
                    82:ef:21:64:24:70:fd:28:8d:c2:21:f5:1d:f6:b8:
                    51:99:f2:a9:6f:b3:2f:50:dd:45:c5:ce:5a:05:9c:
                    18:f1:34:14:0c:58:56:69:8f:d8:af:58:62:3d:76:
                    82:ed:81:7b:1a:30:94:17:ec:cc:a5:44:24:61:2b:
                    99:1a:4d:1f:b2:1b:f0:35:4e:fb:04:80:f3:3f:26:
                    95:05:b7:39:92:d8:98:4f:af:28:e7:3c:f6:cf:89:
                    7f:0e:83:32:e7:d1:6e:b9:48:62:c4:42:07:07:89:
                    6e:1f:d2:71:3b:d9:c2:72:50:3b:71:e3:26:31:f2:
                    cd:4b:8a:99:a7:d7:cc:54:c4:d9:61:64:bc:ff:9e:
                    a9:7c:fe:8e:36:ed:5e:47:46:99:aa:1b:a0:6f:27:
                    76:09:7c:b5:5e:8b:7f:a6:65:c3:ce:1a:bf:54:67:
                    3c:fd:ee:f9:e1:90:8d:58:d4:ae:9a:52:6c:d3:e5:
                    4c:59:c8:f6:48:a1:3b:7e:f7:a8:71:2b:99:d5:07:
                    9c:c6:d5:ab:d1:64:32:7c:0e:55:36:b8:d9:1b:ec:
                    8f:97:a4:6d:78:b4:47:8d:13:74:36:16:8e:69:de:
                    82:21:eb:b3:05:a1:0d:35:64:0a:12:c8:d5:af:eb:
                    50:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F3:C6:E6:07:27:E6:11:00:52:3F:EB:2C:CF:C9:65:9A:44:BD:C5
            X509v3 Authority Key Identifier:
                keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b4:5a:52:52:c3:96:cc:19:44:34:e7:03:96:07:3e:28:a7:
         35:34:2f:8f:e5:1f:c2:a4:86:dc:30:81:f6:55:4b:b1:f4:d9:
         82:78:45:cf:6e:c4:2d:b7:26:f9:5f:87:3f:7a:ce:aa:8b:ab:
         9c:82:88:13:1b:98:1c:76:7e:64:cb:63:78:b0:9a:23:81:7a:
         82:05:f9:93:c8:4d:59:55:79:2b:d7:c3:f6:5e:a8:8c:c1:dd:
         bc:e4:46:cf:6b:14:e0:40:ff:03:58:1c:65:55:01:8b:20:47:
         21:7c:b6:9b:0c:85:bb:f2:3e:0a:99:db:5f:c5:b3:ab:b7:ff:
         4a:3a:20:41:75:2b:2c:e0:91:ec:ed:95:b8:06:55:50:25:ac:
         2b:97:98:bd:c5:99:aa:fe:50:5f:48:f4:d4:84:1e:3e:5c:bf:
         9f:ba:8d:c5:53:03:34:b6:69:8d:35:a6:61:7b:a9:42:41:ec:
         65:de:0e:25:7a:be:fb:7a:d0:c6:91:5a:41:5a:29:7f:56:ce:
         fd:de:51:81:9c:39:52:dd:ab:6b:be:55:d4:30:7d:19:46:03:
         64:1a:6d:9c:a1:20:dc:8e:f5:50:53:da:90:3e:71:34:f3:78:
         32:68:64:98:4b:83:60:d7:92:bd:b2:64:82:ca:1b:15:33:b6:
         3f:15:18:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:40 2026 by rpki-client