Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft
File:                     y1McHsaSJfDcrkTOyl41mAzpwPI.mft (raw, json)
Hash identifier:          hTUkbCk7UOPsCkzHHwTpn8cvTHyPhY+ysM4t6LtYdko=
Subject key identifier:   16:78:4A:88:EB:73:F5:31:59:6A:4F:F2:43:A2:A1:5A:37:E1:BD:76
Authority key identifier: CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2
Certificate issuer:       /CN=A91CFFCB/serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft
Manifest number:          A6
Signing time:             Wed 15 Apr 2026 06:51:47 +0000
Manifest this update:     Wed 15 Apr 2026 06:51:47 +0000
Manifest next update:     Wed 22 Apr 2026 06:51:47 +0000
Files and hashes:         1: y1McHsaSJfDcrkTOyl41mAzpwPI.crl (hash: SkrxKwtCVzukM/9XvT80BEa9dthYoluQk5z1d0n+qxc=)
                          2: BB8F3118497B11F096DCA14EC4F9AE02.roa (hash: oQWD1xCgvEBo74MYI/v+krw85igCsnWcu6Q2lw2VOEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 06:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFCB, serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2
        Validity
            Not Before: Apr 15 06:51:47 2026 GMT
            Not After : Apr 22 06:51:47 2026 GMT
        Subject: CN=69df3583-ce7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:99:67:f1:2d:0d:41:fa:59:10:6b:26:ee:7d:
                    43:f4:13:ae:3f:09:8e:10:0d:55:e1:04:54:18:2f:
                    7f:ee:a4:17:4a:a3:35:99:7d:e9:ed:d6:12:49:6a:
                    ff:5d:56:d8:58:51:5c:42:8c:10:0d:dc:c4:21:5f:
                    f2:3c:aa:34:f5:5d:89:9e:3c:7c:22:34:15:48:e0:
                    f6:24:dd:22:de:93:26:20:3a:10:30:7d:17:cd:e2:
                    01:16:d2:21:41:58:03:2e:7b:62:e5:35:51:dd:c3:
                    b0:85:2a:ae:c9:e2:77:17:34:9b:01:ee:46:41:cb:
                    a8:94:1b:09:47:a7:d4:70:21:77:0f:2a:5a:f8:b4:
                    cd:d0:cd:02:0d:c4:3c:e0:9b:35:7a:70:6f:8a:2f:
                    11:70:95:5e:17:e9:14:db:04:9f:b4:86:9c:6e:54:
                    40:b2:0a:e9:f6:37:c0:6f:6f:d4:2c:3e:44:7a:c9:
                    58:50:87:b2:61:b3:6e:11:95:0b:8b:27:58:20:98:
                    a1:60:1a:c2:c4:77:bb:d0:99:dc:89:9c:77:59:ac:
                    bb:70:bb:cf:1c:35:76:da:78:26:95:1a:18:50:32:
                    d6:1f:d5:31:45:03:4f:37:f3:85:de:ee:0e:5c:46:
                    f1:b3:98:ad:0b:2a:f4:26:2a:5a:c0:be:db:77:5a:
                    e9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:78:4A:88:EB:73:F5:31:59:6A:4F:F2:43:A2:A1:5A:37:E1:BD:76
            X509v3 Authority Key Identifier:
                keyid:CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:42:00:68:9b:b7:ed:25:63:70:72:a3:de:23:70:a5:a9:29:
         7f:45:18:10:da:96:67:2b:1d:71:6a:47:1c:87:02:92:24:56:
         f6:ef:bc:6b:3c:1d:af:95:a5:2c:35:20:f9:e9:55:35:6d:98:
         fe:98:f0:ed:e6:56:f6:57:1a:8d:b0:8f:3e:7d:4e:4f:af:a6:
         f2:89:4a:d4:48:17:73:8a:bb:bf:d0:5c:08:17:7c:33:57:a9:
         85:65:ba:37:56:6c:ba:23:20:05:64:d8:5b:cf:23:d6:55:e6:
         cb:5b:61:cd:32:9a:b9:a1:af:cc:9f:34:5b:dc:c6:50:7f:96:
         d4:63:2e:78:a1:09:12:fd:14:db:8d:66:1a:b3:c6:9a:71:7d:
         0e:b6:f1:c5:78:0e:0a:25:95:d6:e5:fc:01:ae:8b:f2:01:4f:
         8e:71:9c:f3:96:23:a0:38:ad:af:a1:d6:35:a8:a4:86:7d:91:
         3d:e0:5f:a1:22:c5:66:a6:56:d3:26:69:8a:7a:bd:f4:be:03:
         62:1e:36:67:08:f3:6f:1a:e2:51:7b:7a:60:e9:44:06:9b:65:
         c7:b6:8b:21:87:cc:04:84:67:6c:e3:01:e9:49:c8:79:ad:7e:
         5c:60:e2:8d:7f:da:a8:e5:c1:c2:45:8b:21:9d:df:df:1d:a0:
         48:96:02:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:54 2026 by rpki-client