Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
File:                     yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json)
Hash identifier:          Lt/FarynlTpp54KNYa6pAwq4W+CjhuaAYOIXcJJ/oxc=
Subject key identifier:   8D:98:D5:42:48:55:50:F4:9D:78:F0:BB:A4:2E:F0:7D:C2:83:ED:8F
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Certificate issuer:       /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
Manifest number:          0153
Signing time:             Wed 15 Apr 2026 04:46:41 +0000
Manifest this update:     Wed 15 Apr 2026 04:46:41 +0000
Manifest next update:     Wed 22 Apr 2026 04:46:41 +0000
Files and hashes:         1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: IGD1SLL08sKlq57NrYRO8QshHCZLwguroJ/+NcpWDCw=)
                          2: 09799D96F36811F0BB995E0C666F56BC.roa (hash: k3tbTsuNd/0VaZo35U6WBx+uMYBIhVnOPOnYzqjLUfs=)
                          3: 09F2AE3EF36811F0BB995E0C666F56BC.roa (hash: 3qyXQf9X9ypzRtr6ed01ZGzQMiK+H459JYw687uWAE4=)
                          4: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: iZo2C57Z9aeJt224wtweP1I+ZMSYFsBAndFJeCnjn1U=)
                          5: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: QjR9A/HMp05od+zO3VCnyHZYpiHXbBVwXb61oJSOZeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
        Validity
            Not Before: Apr 15 04:46:41 2026 GMT
            Not After : Apr 22 04:46:41 2026 GMT
        Subject: CN=69df1831-927e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:16:8b:12:e8:0f:a4:56:be:a5:70:f1:ed:
                    b8:78:c3:68:29:ce:01:c5:66:b5:b0:fd:88:2c:ba:
                    c7:a0:a9:f0:d5:db:07:9d:ee:e2:b2:d2:58:82:73:
                    85:ee:5b:56:7b:eb:1f:67:59:49:df:7f:76:84:ed:
                    6a:33:3e:3f:58:8e:c0:2f:21:07:50:34:66:8a:1e:
                    b3:9d:7f:6b:69:eb:e4:74:52:2d:f4:74:bb:dc:ed:
                    b9:32:8e:ab:92:bd:8c:e2:1d:7f:63:02:e1:70:4f:
                    63:b1:2d:ab:11:82:e9:1a:c5:9f:cd:5b:28:49:a7:
                    35:1c:48:69:6e:44:a9:68:4c:61:90:31:50:28:44:
                    d3:79:43:c0:b0:ff:76:0d:7c:83:03:ad:bf:48:37:
                    90:66:3b:a3:9a:59:86:13:8d:93:40:3e:6d:6c:3c:
                    eb:53:13:ed:5d:00:bf:47:fe:4d:13:f4:83:60:1a:
                    54:da:1e:aa:9b:06:04:9a:59:7d:29:6d:00:f4:c5:
                    03:91:80:e4:72:e6:fc:e4:7e:72:28:e9:45:ef:ee:
                    71:07:e3:65:41:aa:eb:cf:2a:ac:74:59:39:c7:56:
                    b5:92:68:62:5c:89:7b:b6:8c:af:f5:6f:42:e0:9d:
                    f9:64:a6:28:a0:5c:41:e1:f3:4b:1c:18:32:09:d2:
                    af:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:98:D5:42:48:55:50:F4:9D:78:F0:BB:A4:2E:F0:7D:C2:83:ED:8F
            X509v3 Authority Key Identifier:
                keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:30:b8:1b:39:f5:dd:b4:f6:8a:65:b2:ad:c7:a6:c6:dd:a9:
         dd:0b:ef:00:29:dd:3e:2c:4c:a7:e5:46:86:21:cf:e7:e8:fe:
         bc:5a:43:c2:35:22:e8:37:52:a8:8c:ab:97:21:f2:32:ff:e5:
         cb:26:f0:ed:f9:56:99:ff:33:79:5b:b4:41:aa:7f:e2:65:bb:
         fc:8c:9a:e5:e3:fa:ea:df:80:8e:39:f0:7e:2c:42:9a:33:d5:
         18:a1:6a:cd:6f:74:06:7a:23:f5:4c:7e:e7:3d:05:c6:25:1d:
         c0:70:96:e0:58:42:ef:4f:21:1b:ca:c2:4d:b6:b5:41:ac:79:
         c2:93:30:9c:53:94:1e:82:e7:e3:06:e6:a5:f0:8e:62:ef:9d:
         b6:e9:48:0e:54:fc:97:f5:fc:37:6f:24:45:9c:0a:60:e6:d1:
         20:f2:87:63:40:92:d5:0a:ff:81:81:69:c2:9d:05:5f:11:f8:
         cc:ea:91:d7:bc:fa:67:b2:5d:7a:9a:2b:4f:05:9e:3c:ad:22:
         2c:9a:a9:04:c6:21:72:1f:aa:0d:0f:17:f9:2b:16:98:1a:9a:
         60:92:71:31:5c:96:0b:f7:df:c5:74:db:8b:10:89:bc:f5:3e:
         6c:56:6b:4e:fc:d4:42:cc:11:09:e3:d8:31:83:f1:4b:ec:54:
         77:c1:37:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:07:09 2026 by rpki-client