Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
File:                     YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft (raw, json)
Hash identifier:          QDHWRLpNj1EAMM7gaz89nrRfq+fUStsUpkUeKZzI/U8=
Subject key identifier:   37:DC:F3:4A:0F:09:2F:49:B5:0C:DB:05:1F:2C:40:B3:BA:72:C3:27
Authority key identifier: 60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4
Certificate issuer:       /CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
Certificate serial:       0652
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
Manifest number:          0641
Signing time:             Thu 16 Apr 2026 22:38:16 +0000
Manifest this update:     Thu 16 Apr 2026 22:38:15 +0000
Manifest next update:     Thu 23 Apr 2026 22:38:15 +0000
Files and hashes:         1: YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl (hash: O1cdfz3qyJq0diUMARAu/5XFYhqCei9rjMbe9CJz89g=)
                          2: 8504C794D12411EBAD06CD48C4F9AE02.roa (hash: z3K78kKecVQMmJ50EY3GJXcrFCdRmrLxw9yA8ww2hMY=)
                          3: 84706C70D12411EBAD06CD48C4F9AE02.roa (hash: 1uRa9qCZnC1NyVtsdBrtA6UVUVTLZi1rR+2Ai/+6L3o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1618 (0x652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF55D, serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
        Validity
            Not Before: Apr 16 22:38:15 2026 GMT
            Not After : Apr 23 22:38:15 2026 GMT
        Subject: CN=69e164d8-6415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:ce:ed:84:1d:81:f2:62:57:27:72:89:f4:
                    32:77:64:2d:a3:7c:6c:bf:0d:98:4c:48:87:89:e4:
                    e3:b8:f2:f7:a4:97:cf:6c:c2:c3:c6:11:45:42:89:
                    5a:24:51:fb:a4:74:6b:07:d5:fe:5a:a7:3a:d4:3b:
                    c4:82:d5:16:72:45:ca:ed:79:cc:ce:71:86:45:4a:
                    db:8a:52:48:23:ed:9d:b8:97:28:0b:29:8f:98:67:
                    9a:41:b0:f8:51:27:3c:41:5e:ff:38:20:9a:45:a2:
                    1d:ef:21:0d:01:0f:01:b4:67:99:e0:fa:72:bc:25:
                    a2:72:cb:5f:a1:08:a2:e6:2f:ed:94:e6:22:4a:0e:
                    a9:63:24:d9:3b:bf:7f:a7:75:4a:71:62:f3:7f:7e:
                    32:bb:82:ab:d3:91:9e:bb:2e:ee:43:7c:ba:50:09:
                    48:34:29:82:90:7f:3b:98:22:eb:f7:b7:00:d6:93:
                    2e:ea:dd:9d:d6:a6:4e:72:2b:4f:9a:c9:de:28:89:
                    ff:a0:23:1e:40:5f:e9:1b:e0:4a:85:cf:17:2f:27:
                    54:94:53:5a:f6:8b:0a:da:8b:04:5e:91:49:f9:1c:
                    98:b3:29:96:a8:4c:4f:7b:3e:7f:79:49:be:8f:d0:
                    c0:ed:d3:77:0d:0d:b2:e4:22:f8:f3:17:08:52:5c:
                    eb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DC:F3:4A:0F:09:2F:49:B5:0C:DB:05:1F:2C:40:B3:BA:72:C3:27
            X509v3 Authority Key Identifier:
                keyid:60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:63:03:5b:45:63:41:c7:3c:ad:dc:1d:d2:bc:77:c8:3b:9b:
         f0:af:91:80:6e:63:d9:ed:6f:e6:10:99:fc:22:aa:ad:83:37:
         86:bb:0f:b8:b8:32:43:87:4d:01:e2:77:1b:ff:dc:b5:68:8f:
         3e:f9:f1:ca:3c:76:a2:cd:84:d8:61:f7:9c:9c:ef:3d:a4:e1:
         5e:46:e9:eb:e7:4e:80:12:58:3c:82:45:ca:60:0a:d4:e2:cc:
         e7:29:15:84:a2:54:a3:10:a3:b5:8a:e7:7c:0f:98:44:94:f2:
         9b:62:75:c3:92:09:35:ba:0b:4d:01:b6:2b:d7:70:dc:4a:e7:
         54:32:7c:0c:98:59:0c:90:a7:62:f6:86:0e:1e:3b:fb:e6:62:
         d1:a2:18:b7:0c:f2:a0:03:ff:ac:af:ac:7d:7f:7f:9e:3b:71:
         47:19:73:44:94:99:73:95:93:8b:1b:06:55:96:53:01:1a:12:
         c7:80:b0:8a:49:06:02:db:f0:2f:7b:88:86:39:5d:56:f5:45:
         39:50:d4:fe:0b:a3:05:2a:eb:81:4c:ee:9a:fb:6c:b1:4f:d7:
         f6:2d:8e:73:38:cb:86:f7:a6:64:cf:9d:a8:a3:b6:7f:a8:99:
         ba:f3:62:cc:0c:34:cf:72:21:ec:b5:1c:c3:45:eb:36:eb:9f:
         14:bd:12:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:48 2026 by rpki-client