Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
File:                     Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json)
Hash identifier:          I6QNk3tKwAd6DaYRVPeJ962vr40fbD9h2ng7NDf3LQE=
Subject key identifier:   5B:5C:BA:46:B2:25:B7:57:DE:3F:2B:B7:89:68:F8:79:A9:66:DB:CB
Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E
Certificate issuer:       /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E
Certificate serial:       0C02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
Manifest number:          1505
Signing time:             Sat 18 Apr 2026 18:44:04 +0000
Manifest this update:     Sat 18 Apr 2026 18:44:04 +0000
Manifest next update:     Sat 25 Apr 2026 18:44:04 +0000
Files and hashes:         1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: Ntu7WdL+z6Vj1vygnZx8uzu3KfctgVd64xFQP6HXVYI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl
                          rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 18:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3074 (0xc02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7315, serialNumber=63EBA48502511340B825261D5EC20A9127AF295E
        Validity
            Not Before: Apr 18 18:44:04 2026 GMT
            Not After : Apr 25 18:44:04 2026 GMT
        Subject: CN=69e3d0f4-da49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:1d:ac:b0:fc:e7:dd:06:e6:3e:bd:e8:26:
                    ee:dc:d2:e0:13:ea:8c:32:ea:a3:86:84:e6:8b:3f:
                    09:76:ce:64:5b:35:d6:e5:c3:13:73:01:cc:fa:a2:
                    95:8b:f4:d6:f1:aa:c5:a9:fe:6d:01:e6:b1:37:6d:
                    2a:66:3d:34:7c:47:4b:c5:02:6a:fe:d6:64:60:9d:
                    3b:7a:05:1d:6a:65:21:f9:a1:98:56:0a:dd:fe:08:
                    d4:06:31:66:66:68:02:54:bf:e2:fc:7b:cd:29:91:
                    87:84:e5:b2:70:15:f2:38:3e:76:36:ad:dd:63:72:
                    cf:f2:7d:a0:95:dc:25:64:aa:60:8b:a0:9d:c1:26:
                    24:13:9b:e1:6d:8b:a9:30:df:aa:1f:de:27:72:93:
                    14:45:85:03:e6:e0:d7:53:3a:d7:04:8e:01:97:80:
                    a9:fd:3c:2b:7a:7e:41:03:0c:b9:95:34:e3:c0:cb:
                    30:bd:fa:87:2d:ca:0c:af:00:fc:ea:be:49:20:33:
                    b1:e8:59:8a:74:07:6e:dc:69:ad:f4:28:5d:88:40:
                    19:2f:e4:c6:04:3a:d2:1e:36:f4:a1:06:7d:c5:c4:
                    87:9a:65:51:42:45:af:f8:26:33:ae:9f:b8:f8:aa:
                    a5:01:32:9b:66:c1:2e:8c:10:79:c4:b9:10:8f:15:
                    d4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5C:BA:46:B2:25:B7:57:DE:3F:2B:B7:89:68:F8:79:A9:66:DB:CB
            X509v3 Authority Key Identifier:
                keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:8d:d7:d8:9b:bb:de:dc:fa:6b:7a:bd:0b:a2:16:a3:54:44:
         ec:0b:b9:35:33:e8:a9:d0:c4:06:12:7d:e7:44:6f:73:44:a2:
         3e:3f:bd:db:68:17:4d:92:8b:dd:fc:3c:ac:ca:a5:b4:00:e2:
         02:a9:9e:47:0d:d8:c6:9f:3b:81:02:dc:a0:7f:c3:b2:49:9a:
         38:d3:58:7c:cf:1c:28:b4:13:5b:c9:9d:23:0f:94:30:cb:ce:
         fc:fd:ea:81:2d:e7:ff:a0:93:0c:eb:76:50:e9:89:42:d8:b6:
         85:b2:a7:0d:71:a4:af:ff:4a:11:06:e2:f3:8e:82:39:dc:2f:
         b5:62:aa:b4:37:a3:6b:fd:a8:f0:3c:be:d2:98:70:31:7e:c9:
         a0:83:ea:e9:08:09:75:de:da:59:d3:6f:aa:07:9d:c6:2b:99:
         0d:3e:05:d2:25:5e:4d:d2:13:2b:72:82:e8:e0:37:21:57:1b:
         eb:6c:1c:6e:de:a1:a6:6a:39:15:8d:e5:54:52:0b:2d:6a:22:
         bc:02:2c:3a:72:6c:bb:11:f1:85:c2:d0:33:95:0d:09:29:55:
         0a:bb:57:3f:f4:94:64:ce:da:73:9a:e0:38:21:f0:4a:8f:6f:
         c3:bb:9a:63:b4:c3:97:3e:fa:bf:e4:b5:4d:79:8e:f5:40:ac:
         6a:7e:d7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:14 2026 by rpki-client