Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
File:                     W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft (raw, json)
Hash identifier:          ztzMp+Apqp/tfEEO6A2xMAhJPBq9nre//qVWs5DXvg4=
Subject key identifier:   3D:37:AC:F7:8A:9C:BA:F4:D1:63:2D:04:97:C4:0B:8F:FE:D5:F6:67
Authority key identifier: 5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C
Certificate issuer:       /CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
Certificate serial:       0979
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
Manifest number:          0970
Signing time:             Thu 16 Apr 2026 19:59:18 +0000
Manifest this update:     Thu 16 Apr 2026 19:59:18 +0000
Manifest next update:     Thu 23 Apr 2026 19:59:18 +0000
Files and hashes:         1: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl (hash: 5llWST/rayRyTE8nTEJcNk0pD9y4P7zgu9tHRbrXKmk=)
                          2: 108B7DAAB2A711EAABBE8663C4F9AE02.roa (hash: jJBBqp0n1dcla2CfO5nioVw0ckuTS67twgXm6uBPlv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2425 (0x979)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E29, serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
        Validity
            Not Before: Apr 16 19:59:18 2026 GMT
            Not After : Apr 23 19:59:18 2026 GMT
        Subject: CN=69e13f96-fea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:13:b4:17:0b:31:33:7a:3c:74:c9:19:a4:64:
                    65:8c:fe:89:72:eb:ab:d6:5a:e3:b8:c4:8e:ec:fa:
                    2e:0c:b9:61:1b:06:85:39:2e:04:a4:59:c9:a3:58:
                    54:f2:25:4b:28:5c:04:ca:ed:54:42:28:5f:73:c7:
                    2a:73:c7:7b:8f:fe:6d:18:5e:41:c8:64:9b:c5:a5:
                    75:f8:05:b1:79:31:6f:23:97:5e:9b:0a:c6:f4:f0:
                    5f:52:ee:a6:32:11:7b:d3:c7:5a:0a:71:22:a6:31:
                    c6:3d:64:40:d0:29:6f:31:f2:95:d4:8e:db:2f:15:
                    1e:2a:4f:bb:58:08:7b:e0:e7:35:f4:7b:11:1b:fc:
                    6f:98:93:b3:ba:34:1c:6b:37:17:bd:a4:8e:73:76:
                    8f:58:2a:24:3a:01:62:24:3d:6e:98:6a:d7:b7:17:
                    e6:62:ad:53:c2:1f:cb:a7:ed:66:66:d9:d8:67:52:
                    fe:c0:dc:90:52:bc:5a:65:2d:cb:bb:93:ee:9c:e5:
                    22:80:ee:6c:8c:7a:41:fb:20:bf:69:c7:6e:de:cc:
                    f8:03:01:85:5f:a4:8e:ca:08:0c:97:8d:a0:f3:56:
                    c7:a3:5c:76:be:a0:bd:cd:5e:aa:27:50:4a:0f:e8:
                    b1:23:2e:83:53:65:99:c2:4f:72:4f:a5:38:55:70:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:37:AC:F7:8A:9C:BA:F4:D1:63:2D:04:97:C4:0B:8F:FE:D5:F6:67
            X509v3 Authority Key Identifier:
                keyid:5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c3:53:e5:3e:61:4d:b5:13:6b:77:ab:64:32:b8:52:8d:ce:
         00:b6:41:8d:a7:31:db:01:d3:93:0c:d6:10:35:0e:d4:1b:03:
         d9:02:c4:48:d3:c5:a6:b6:f1:90:7d:3b:bd:16:96:b0:98:c8:
         15:3e:c2:a8:86:aa:97:44:45:61:5b:dc:6c:71:ca:e8:a3:a8:
         fc:e1:e7:cc:df:35:fc:94:d5:00:32:67:e9:7f:e8:3e:24:7c:
         c1:b8:e7:ac:5e:78:6a:58:c8:dd:a5:4d:b7:09:bd:22:a2:d3:
         22:28:06:ef:f7:3d:da:f3:a1:0b:c5:f7:73:c5:9a:cc:d3:51:
         03:99:53:fc:78:e6:fa:b2:26:2b:86:fe:dc:a3:4d:cc:2b:d0:
         87:a4:46:c3:f5:d2:6e:b4:77:92:4c:63:91:01:ba:2b:8f:24:
         f6:d8:0c:71:38:4b:17:2e:6a:12:03:76:ac:d3:04:86:b7:06:
         75:af:bf:75:1f:95:61:ce:e8:8f:b4:ce:1f:10:15:cd:60:d7:
         62:a0:43:be:29:97:8b:9e:30:1c:cc:55:a7:59:ea:e4:24:2e:
         ac:51:0a:67:b4:bd:4d:a4:cd:3d:61:2a:30:69:71:9b:ed:1b:
         ca:d7:be:34:a9:4e:b1:73:ff:3f:e8:c0:d4:dc:22:4b:8e:32:
         12:03:f2:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFFMjkxMTAvBgNVBAUTKDVCRjYyNDM5OTBBOTQ2NEM4NUI3ODIzREI0MjZFMkFC
OTY3MjBBM0MwHhcNMjYwNDE2MTk1OTE4WhcNMjYwNDIzMTk1OTE4WjAYMRYwFAYD
VQQDEw02OWUxM2Y5Ni1mZWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxxO0FwsxM3o8dMkZpGRljP6Jcuur1lrjuMSO7PouDLlhGwaFOS4EpFnJo1hU
8iVLKFwEyu1UQihfc8cqc8d7j/5tGF5ByGSbxaV1+AWxeTFvI5demwrG9PBfUu6m
MhF708daCnEipjHGPWRA0ClvMfKV1I7bLxUeKk+7WAh74Oc19HsRG/xvmJOzujQc
azcXvaSOc3aPWCokOgFiJD1umGrXtxfmYq1Twh/Lp+1mZtnYZ1L+wNyQUrxaZS3L
u5PunOUigO5sjHpB+yC/acdu3sz4AwGFX6SOyggMl42g81bHo1x2vqC9zV6qJ1BK
D+ixIy6DU2WZwk9yT6U4VXCfOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD03rPeK
nLr00WMtBJfEC4/+1fZnMB8GA1UdIwQYMBaAFFv2JDmQqUZMhbeCPbQm4quWcgo8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUyOS9ERDEzRjhGMEIy
OUYxMUVBOTM4MEMwNEJDNEY5QUUwMi9XX1lrT1pDcFJreUZ0NEk5dENiaXE1WnlD
ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dfWWtPWkNwUmt5RnQ0STl0Q2JpcTVaeUNqdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MUUyOS9ERDEzRjhGMEIyOUYxMUVBOTM4MEMwNEJDNEY5QUUwMi9XX1lrT1pDcFJr
eUZ0NEk5dENiaXE1WnlDancubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALcNT5T5hTbUTa3erZDK4Uo3OALZBjacx2wHTkwzWEDUO1BsD2QLESNPFprbx
kH07vRaWsJjIFT7CqIaql0RFYVvcbHHK6KOo/OHnzN81/JTVADJn6X/oPiR8wbjn
rF54aljI3aVNtwm9IqLTIigG7/c92vOhC8X3c8WazNNRA5lT/Hjm+rImK4b+3KNN
zCvQh6RGw/XSbrR3kkxjkQG6K48k9tgMcThLFy5qEgN2rNMEhrcGda+/dR+VYc7o
j7TOHxAVzWDXYqBDvimXi54wHMxVp1nq5CQurFEKZ7S9TaTNPWEqMGlxm+0byte+
NKlOsXP/P+jA1NwiS44yEgPyNA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:50 2026 by rpki-client