Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
File:                     YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json)
Hash identifier:          ln2IexVvxXLRnRa0p07Q3q241GFkTN6WgoyS8bvlwZs=
Subject key identifier:   3B:8E:9A:97:62:0B:2D:49:70:6D:2B:46:E2:69:6C:25:7D:B7:BE:8E
Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
Certificate issuer:       /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Certificate serial:       080F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
Manifest number:          07FD
Signing time:             Thu 16 Apr 2026 21:06:42 +0000
Manifest this update:     Thu 16 Apr 2026 21:06:41 +0000
Manifest next update:     Thu 23 Apr 2026 21:06:41 +0000
Files and hashes:         1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: xT0ric3Rge9JrtSZS+nWSiDRCaJjeSfainTU4ipYKMQ=)
                          2: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: qglLYq7r5hz5k4fW3XvsL6XPXtp+KRbOwdrUaMlNod8=)
                          3: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: u+6wnGx2BCNffz/w+UONTWtqIYdeVxC/HbLsF2PYqHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
                          rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2063 (0x80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
        Validity
            Not Before: Apr 16 21:06:41 2026 GMT
            Not After : Apr 23 21:06:41 2026 GMT
        Subject: CN=69e14f62-46ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a8:61:1b:4c:93:27:7c:9e:7f:02:9f:92:37:
                    41:e4:6e:e2:de:02:dd:bf:ce:c3:a6:92:cf:35:e9:
                    17:ae:b4:dd:b2:4a:40:04:dd:3c:f5:71:46:a3:1f:
                    f7:a4:db:76:5b:73:35:d0:c2:40:08:78:a1:89:8c:
                    44:75:84:7f:ea:89:6d:9a:39:1d:5d:00:59:70:9d:
                    00:bb:c2:40:f7:f0:df:98:ae:e4:e7:ea:ff:38:ac:
                    42:70:e6:f1:f5:b7:c6:1f:65:33:d4:50:ab:9d:39:
                    08:9b:02:98:8a:e3:c6:be:b9:b1:53:70:bb:db:9c:
                    80:25:4d:6a:76:12:85:96:12:da:f0:28:6f:ca:45:
                    f0:6b:dc:9b:de:19:da:aa:19:9e:36:e3:67:85:9b:
                    9f:5f:ff:27:51:8d:ae:04:33:24:17:d9:b2:b7:d0:
                    1a:0f:2d:b7:ff:e1:b5:66:ed:01:1c:63:51:0f:da:
                    f7:5f:a4:2a:57:d6:d5:13:14:0f:c8:7e:20:74:19:
                    9c:d1:76:c6:25:54:0c:26:c4:35:5e:97:9f:44:b7:
                    6f:ce:0e:16:74:66:13:91:18:91:bb:06:89:cc:8e:
                    6f:32:9b:77:49:9b:64:ba:3f:20:06:b1:2d:5f:a8:
                    d4:97:1b:f9:ea:fe:39:43:d2:02:db:d0:80:21:c3:
                    91:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8E:9A:97:62:0B:2D:49:70:6D:2B:46:E2:69:6C:25:7D:B7:BE:8E
            X509v3 Authority Key Identifier:
                keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:73:62:29:70:42:b8:71:46:29:b1:f6:86:8c:12:03:c1:83:
         f8:71:7c:a6:31:82:81:3e:36:0b:ef:57:b5:6e:02:15:53:43:
         38:ce:b3:d8:7b:f0:43:c8:cc:86:da:d2:44:54:d7:bb:aa:64:
         7d:8a:bb:15:74:fa:eb:6e:55:7d:53:85:dc:37:5d:d5:63:30:
         13:b2:df:98:f3:fb:86:a9:cc:df:95:2a:c2:93:21:39:11:b2:
         6e:de:b4:80:ca:30:06:74:1d:db:2b:d6:5c:e8:91:42:9e:6a:
         08:83:a3:8c:30:39:2f:b1:b0:c1:a2:df:6a:4b:74:9d:e5:fc:
         0f:3f:9c:98:87:a0:49:c5:a8:3a:81:db:5f:0f:b4:3c:e8:bb:
         c2:ac:85:09:43:26:c3:0d:e7:57:97:af:46:1c:60:0f:bc:e8:
         e5:5a:ea:da:17:e0:1d:6e:01:05:79:33:e8:02:ef:a7:09:dd:
         3b:ef:e3:ff:05:31:32:2c:aa:30:44:1a:e7:d8:0c:61:0f:df:
         e1:1e:11:b8:d6:63:a7:72:0c:98:37:5a:73:b2:fd:18:14:c0:
         48:f9:0a:57:29:5f:20:d4:7f:81:68:77:04:90:bf:ab:ac:df:
         4d:04:c0:38:bd:43:7a:da:91:80:2d:a2:14:c7:ca:1d:92:ce:
         45:c9:d0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:42:59 2026 by rpki-client