Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
File:                     Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft (raw, json)
Hash identifier:          X9eEw/7PRe2zbWMzX6P0EKnMWMngW0NUcd0pqREdppU=
Subject key identifier:   55:61:DF:00:A5:BE:E8:20:81:69:C4:79:E3:32:41:85:08:81:EB:46
Authority key identifier: 63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A
Certificate issuer:       /CN=A91D2706/serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A
Certificate serial:       07DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
Manifest number:          07D4
Signing time:             Thu 16 Apr 2026 21:15:35 +0000
Manifest this update:     Thu 16 Apr 2026 21:15:34 +0000
Manifest next update:     Thu 23 Apr 2026 21:15:34 +0000
Files and hashes:         1: Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl (hash: m7o1ickoVPNknnuWh2jW3KxELoLO9Z7gTF4F9yOJ+FI=)
                          2: 35D4363E330711EB9D3AA60BC4F9AE02.roa (hash: MIjawd33la/jBdvWj1qHhi7fRFhJrDfr9QRihhf5huE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl
                          rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:15:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2013 (0x7dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2706, serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A
        Validity
            Not Before: Apr 16 21:15:34 2026 GMT
            Not After : Apr 23 21:15:34 2026 GMT
        Subject: CN=69e15177-8d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:3a:05:62:b4:ef:d6:9f:82:dd:0e:51:fc:
                    54:de:15:92:22:3d:40:9d:5d:fa:97:b0:30:81:e9:
                    80:70:67:2d:9b:70:04:a8:da:b5:08:4a:9f:4e:03:
                    40:7a:ce:6d:a3:11:12:ef:27:77:0b:cd:54:df:37:
                    ca:c7:31:5c:16:64:2b:1a:a6:11:a9:0b:25:3d:cc:
                    4e:04:58:16:c7:4a:31:ac:ab:ff:46:ac:1d:c0:35:
                    43:b7:d8:88:84:d3:1e:d6:46:c9:72:12:41:7a:1c:
                    1e:a1:6c:09:20:7b:b4:83:c3:5c:a1:8c:b4:36:6a:
                    18:79:cf:d1:5b:82:ae:c7:24:bb:4a:fa:a4:e6:79:
                    cc:d4:0f:49:00:e0:16:cc:a1:86:e7:c1:72:fc:39:
                    55:5f:fe:c2:2b:24:1b:72:5b:f4:8b:b8:4b:44:f4:
                    83:e8:62:32:c3:b6:86:97:fa:94:70:f5:53:04:a4:
                    84:66:73:57:da:eb:9b:7b:91:8b:b1:21:a3:87:53:
                    40:a8:86:32:56:8a:89:2d:f3:76:d7:8a:e6:d3:35:
                    35:5b:63:00:51:fa:01:20:87:93:0c:9c:f3:8b:fd:
                    ef:96:8a:f3:9f:06:46:22:72:fe:12:2d:f6:8f:3d:
                    5f:ec:f0:f3:8d:a6:86:6d:d0:2e:b4:17:05:62:a4:
                    5f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:61:DF:00:A5:BE:E8:20:81:69:C4:79:E3:32:41:85:08:81:EB:46
            X509v3 Authority Key Identifier:
                keyid:63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:19:04:0a:0f:0b:c6:98:f8:2c:a3:e6:03:84:39:10:c7:d5:
         49:a1:9f:f5:94:29:05:13:70:79:5d:6f:30:6f:aa:44:13:fa:
         38:b0:fd:7e:c2:c2:75:a3:43:c2:02:56:97:d0:3e:ce:50:be:
         85:29:2d:62:c0:97:e3:04:88:12:a6:7c:e7:58:c2:f6:7b:8e:
         41:18:e3:ef:d2:6e:2d:58:2c:6e:81:18:a1:ae:dd:39:aa:fb:
         9d:bf:05:f7:f8:77:50:1d:b1:80:c8:5f:38:8c:3d:c2:d0:ac:
         b0:91:9f:fb:b6:98:ce:52:a2:c2:58:02:a0:c3:07:e2:7d:17:
         f3:b6:82:23:95:02:d5:3e:19:90:90:f0:8f:02:f9:e0:7f:c8:
         df:ce:95:30:2d:a9:36:0e:4f:03:51:e5:f3:b1:6e:6e:d3:2b:
         cb:5f:c1:b1:ea:01:27:d3:07:bb:f0:d3:dd:c8:3c:fc:8d:cd:
         94:6f:84:9a:7f:f1:de:02:ba:75:d0:f0:99:f6:07:63:f2:f2:
         f4:06:b0:61:aa:6c:12:f4:cf:18:84:4a:73:45:4d:f4:bf:f1:
         b5:bb:3d:6a:21:22:a4:25:ab:5c:97:79:37:ea:02:97:f2:51:
         b5:2f:4b:95:14:75:54:bb:92:f4:98:17:a0:22:b7:66:33:d1:
         01:f7:da:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:04 2026 by rpki-client