Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft
File:                     YmEJu-zJi6UufzmbgJYtOv5astQ.mft (raw, json)
Hash identifier:          VES0xL9rLkMGpgZmvmB+A7oZ+JcXNwfwPjvFK40dKgU=
Subject key identifier:   74:F5:DA:26:AC:AD:B1:2B:03:85:3A:6B:64:F7:21:8E:DE:8F:92:46
Authority key identifier: 62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4
Certificate issuer:       /CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4
Certificate serial:       019D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft
Manifest number:          0197
Signing time:             Fri 17 Apr 2026 04:03:26 +0000
Manifest this update:     Fri 17 Apr 2026 04:03:26 +0000
Manifest next update:     Fri 24 Apr 2026 04:03:26 +0000
Files and hashes:         1: YmEJu-zJi6UufzmbgJYtOv5astQ.crl (hash: wIzpOr2MnfV76/xlAlM/XEy8qsiHsIYCX0LMEN9XFRE=)
                          2: 7447BEF0928411EFB854A522C4F9AE02.roa (hash: s5IrdWl4w7CD+6C1zMRSChN5e01E/87tYgCIhEdcZ14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D50A2, serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4
        Validity
            Not Before: Apr 17 04:03:26 2026 GMT
            Not After : Apr 24 04:03:26 2026 GMT
        Subject: CN=69e1b10e-c622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ec:ba:00:56:3d:c5:1b:53:90:13:54:e2:88:
                    7e:e1:cc:44:b8:7f:c9:77:67:ed:dc:54:e4:e0:a6:
                    26:d6:d2:3b:e2:65:84:34:24:d9:7b:69:81:e5:34:
                    5d:cd:6b:db:7f:c1:a4:d7:06:4c:69:e3:54:90:cf:
                    16:3a:5a:cd:5b:39:3a:f9:34:55:fa:ad:ad:77:9d:
                    09:41:13:d1:d8:bf:c8:c5:13:88:84:74:69:0b:ed:
                    da:90:97:76:90:6a:72:9e:18:8a:f5:5a:6e:0c:00:
                    42:b8:e2:6b:6f:2e:83:49:c9:1b:1b:9b:9d:80:f1:
                    8f:9a:4e:de:2a:66:26:ad:7b:38:61:16:1d:d3:33:
                    92:64:69:84:2f:6d:5a:82:41:31:32:37:d5:f3:ad:
                    35:d4:08:8c:ba:fb:55:1a:43:d4:6f:7c:05:8b:72:
                    26:5a:7d:55:69:86:34:ba:35:83:69:f4:e6:00:e4:
                    b5:89:62:76:87:70:94:30:86:e0:2c:6b:e2:29:eb:
                    e0:b3:28:0e:5e:72:89:76:b4:b4:30:3c:6c:58:59:
                    a7:4c:c1:aa:51:37:0a:f0:bd:b6:74:90:4d:6d:3e:
                    19:bc:60:34:48:68:7e:7f:34:ed:a5:aa:33:51:44:
                    b3:4a:f1:20:cc:9c:2f:35:0b:39:7b:03:47:9d:fb:
                    47:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F5:DA:26:AC:AD:B1:2B:03:85:3A:6B:64:F7:21:8E:DE:8F:92:46
            X509v3 Authority Key Identifier:
                keyid:62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:25:82:a9:0e:9f:27:b9:c7:06:11:f3:73:f4:ee:e6:67:a8:
         9b:58:05:28:91:3b:a4:25:07:05:a7:74:55:a8:70:cf:da:1b:
         5e:fe:39:5d:2e:00:87:57:03:85:a5:9c:d3:66:ca:09:bf:23:
         a2:c6:3c:a5:a2:35:27:b1:1f:90:9b:44:f8:5e:c5:24:83:5c:
         ff:cb:d7:3c:92:4f:55:87:aa:c7:20:c5:a3:21:86:51:0e:c0:
         18:f0:58:91:1b:32:11:57:f6:63:65:b0:07:1a:96:e0:29:40:
         72:ef:77:68:96:b3:b8:b5:ea:1a:57:e5:a7:64:f6:de:15:39:
         e4:af:b1:11:db:df:4c:39:6b:7d:5d:33:dc:66:f6:4a:0a:41:
         d6:85:96:1f:97:92:b3:86:47:3f:96:bd:ab:ac:d0:7b:f9:3d:
         46:f2:d9:11:5d:41:6b:21:35:84:b8:bd:9f:8a:16:e3:da:fd:
         9b:f0:86:fb:8f:f8:cb:4d:98:a9:a5:98:79:3f:8f:79:4f:88:
         b6:f9:8e:4a:ef:27:bb:fe:6d:4e:ad:e9:c0:fb:75:50:d6:30:
         5b:1e:04:e7:29:bf:5f:4d:86:49:6b:bf:e7:e2:48:cb:7f:b2:
         f2:75:9d:09:bb:ae:8b:7a:5a:44:05:bf:7b:11:94:e7:d0:5d:
         ac:e7:81:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:44:26 2026 by rpki-client