Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
File:                     YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft (raw, json)
Hash identifier:          o1BDfJ5REb8/a21dEr0IT/xnc/Kk7kvk8q9A6X+y8a8=
Subject key identifier:   D5:A2:5E:1F:52:A9:36:EE:7C:29:80:80:0A:4A:DE:BB:EA:56:B6:BD
Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
Certificate issuer:       /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
Manifest number:          75
Signing time:             Fri 17 Apr 2026 07:33:41 +0000
Manifest this update:     Fri 17 Apr 2026 07:33:40 +0000
Manifest next update:     Fri 24 Apr 2026 07:33:40 +0000
Files and hashes:         1: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl (hash: pmMSDtN63cnVSMFAfM9XmEodJOwv+A29topzdQffkpg=)
                          2: 11CCFCD8DB0B11F0BC36350982D3641D.roa (hash: iqoDOOCu/fngDkkSni/oqHyjislrgnbGvgYBpgWoetA=)
                          3: DD3F28CC93D111F0B0A32B0BC4F9AE02.roa (hash: Cadr/xUb1+0gVtL0k3xW6zkBh+JLJ5ZTxdWq64WB59k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
                          rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
        Validity
            Not Before: Apr 17 07:33:40 2026 GMT
            Not After : Apr 24 07:33:40 2026 GMT
        Subject: CN=69e1e254-0123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:cb:d1:de:1c:6a:94:ba:fc:57:eb:f1:3f:
                    41:5b:7c:df:df:b4:29:e8:7f:dd:f6:6b:aa:bf:1d:
                    d9:ca:29:50:9b:f1:88:6b:52:d8:39:f7:70:a9:11:
                    61:96:6e:16:66:57:2b:16:7c:05:ac:c5:43:ae:27:
                    6d:7b:19:56:16:60:d1:81:50:db:a8:a3:96:13:54:
                    5d:a9:28:36:ee:f9:f8:3d:2c:72:c4:a0:10:e4:1a:
                    67:e0:0c:9e:d9:8f:96:f0:e8:e5:73:fc:fc:3b:42:
                    9e:34:97:71:5e:76:55:44:37:47:89:da:29:52:62:
                    bc:61:ee:97:b5:6b:d3:b3:99:3c:98:e8:7a:71:81:
                    3f:64:e6:d9:d5:f6:5c:63:2c:56:69:86:92:e0:3a:
                    8c:9e:5a:ce:16:5d:90:03:50:34:0e:29:89:05:5e:
                    e6:02:f4:93:89:2a:32:c4:0b:37:ad:40:94:d4:83:
                    12:ba:d9:90:e7:f0:3d:5b:31:27:dc:2c:cd:1d:aa:
                    b3:e8:80:69:19:af:b2:c8:63:54:ec:b0:bc:44:45:
                    09:b6:bc:68:2f:67:57:e3:b9:9a:6c:32:2e:65:72:
                    30:36:e2:1a:57:9b:ee:85:03:1e:94:dd:61:e0:8c:
                    e4:96:f6:bb:09:7d:26:a7:a9:e2:b2:1c:7e:a1:9c:
                    ef:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A2:5E:1F:52:A9:36:EE:7C:29:80:80:0A:4A:DE:BB:EA:56:B6:BD
            X509v3 Authority Key Identifier:
                keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:15:60:06:11:8f:9f:c7:5c:f6:d9:f5:4f:9d:12:fb:4b:77:
         5a:47:f1:de:8f:36:24:43:60:dc:02:8b:85:14:48:76:92:a8:
         61:2a:d6:e9:68:17:d7:0b:42:54:35:85:cb:7b:bc:e0:10:04:
         94:3f:8d:3b:ef:7b:f3:36:53:8c:3a:c7:a1:12:0a:63:1f:cb:
         d2:f3:4b:77:d3:ee:31:ae:f3:70:22:cb:18:3b:22:7e:6b:1a:
         77:e0:bf:fb:90:19:e5:8c:a6:cb:cc:c5:71:8c:b2:17:af:8b:
         4d:f0:7a:fb:9b:40:5a:7e:ce:1c:a9:48:76:e7:a4:b3:7c:a2:
         af:5c:af:fd:fa:9d:4f:65:ce:4d:ce:29:44:f5:6b:31:55:37:
         48:70:37:11:dc:8f:9f:8c:0e:ad:45:4a:7e:07:5e:3d:e0:dd:
         66:47:c8:c5:f7:ba:45:1e:ba:df:92:d5:7a:40:ce:a2:c1:cf:
         f8:48:d8:c0:f7:f7:57:94:90:ec:4d:5c:4d:80:ab:39:e9:7c:
         9d:db:00:f0:fc:db:4b:ea:f9:0d:35:5f:a2:a3:cc:92:22:6e:
         da:52:13:73:97:7c:79:cc:a5:e4:0f:e5:1d:3b:60:36:b0:ff:
         0e:a5:b9:70:28:b1:6b:87:21:a3:fb:3b:1a:27:a1:e3:62:13:
         98:1b:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:25:58 2026 by rpki-client