Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
File:                     YU0eyLaT57tfMs-lJ7UCgyad_is.mft (raw, json)
Hash identifier:          Z8+q/GXt3IHJeDzKuJvr2s5gwPUl02lO4+DGsV9uIGQ=
Subject key identifier:   09:A4:4B:50:44:AD:3A:77:F1:3E:28:8C:0F:A4:9F:32:C1:44:DF:EA
Authority key identifier: 61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B
Certificate issuer:       /CN=A91FBD7B/serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
Manifest number:          E9
Signing time:             Fri 17 Apr 2026 06:09:56 +0000
Manifest this update:     Fri 17 Apr 2026 06:09:55 +0000
Manifest next update:     Fri 24 Apr 2026 06:09:55 +0000
Files and hashes:         1: YU0eyLaT57tfMs-lJ7UCgyad_is.crl (hash: ggoo3iSajPF/eOAtH7dNjS3Db2t8DqxUczDjz4oOd64=)
                          2: EE380826D87211EFBAE0FC19C4F9AE02.roa (hash: eYKV4envgCgs3WvH6pBo9YBy1q8A8VpKoNaaI9QRSww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl
                          rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBD7B, serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B
        Validity
            Not Before: Apr 17 06:09:55 2026 GMT
            Not After : Apr 24 06:09:55 2026 GMT
        Subject: CN=69e1ceb3-836e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:17:d3:c5:1d:9c:eb:7c:62:88:a5:a9:4f:
                    ec:4e:b3:82:1d:52:89:74:55:77:5d:b7:4d:79:54:
                    6a:51:c0:3d:4e:44:e8:95:e7:55:ff:8a:7d:34:1f:
                    5c:6f:28:23:1f:e7:c0:3e:ef:74:31:63:a3:1e:aa:
                    7f:0f:bb:50:be:15:d1:4c:28:6b:d7:65:4d:ab:38:
                    c5:dc:33:fe:79:a6:87:f6:e5:da:74:81:e7:68:ec:
                    f5:3e:87:89:7c:3c:37:3c:bc:05:32:50:24:57:f3:
                    83:47:52:57:80:28:26:2b:33:8b:4c:18:cb:2b:c7:
                    cc:db:62:24:30:0e:4f:23:ba:12:ca:dc:0d:fc:fb:
                    cc:42:76:f5:38:b8:f9:22:12:47:6f:ac:8a:e2:2e:
                    a5:9b:9c:1d:91:46:ac:a0:5b:b3:10:ff:0d:a5:b4:
                    74:a5:9d:96:08:79:b4:e8:80:19:c1:f9:ab:b7:25:
                    11:32:37:7b:3f:08:39:3c:ab:8f:a1:aa:10:f7:2b:
                    bc:86:88:24:42:a6:3b:b9:1b:fa:05:c4:9f:8d:90:
                    48:9c:d2:4a:2e:e1:ee:34:a3:b2:23:8d:2e:7d:cf:
                    88:a6:31:a3:c7:5c:12:91:a6:e4:b1:d2:00:73:5e:
                    0c:b6:72:c2:94:a4:25:65:dc:e8:f7:e1:11:0b:38:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A4:4B:50:44:AD:3A:77:F1:3E:28:8C:0F:A4:9F:32:C1:44:DF:EA
            X509v3 Authority Key Identifier:
                keyid:61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b9:e5:4c:bd:32:62:bb:13:92:f6:7e:26:53:71:9c:50:7c:
         fc:11:10:0c:51:94:86:4b:7a:d2:c5:1f:e6:b2:77:c7:9f:98:
         58:b2:e0:50:e2:f1:9a:b8:f8:28:b5:d8:d0:cd:07:b7:a0:6e:
         10:9b:fd:75:53:73:b9:85:e6:53:81:22:6e:a7:e6:0a:d6:18:
         05:6d:20:05:a9:91:ae:0a:b4:58:06:78:a2:bb:fe:42:ee:0c:
         b2:4e:81:08:2b:5a:07:59:33:e4:09:38:0f:fe:da:d3:60:39:
         c5:76:0e:41:40:b6:af:f7:ed:5b:aa:bb:21:25:06:c4:df:d4:
         74:c3:e8:66:85:84:e5:6e:55:c9:06:b4:00:ad:a4:34:4c:2d:
         c2:8c:08:5e:21:f5:fc:ab:0a:0a:cb:2c:78:7f:9c:f1:03:0a:
         e2:3d:5b:c5:10:1e:6a:db:0e:62:68:71:2f:67:56:06:af:d0:
         f4:0c:33:78:f4:d1:61:9b:8d:d5:ec:33:73:39:29:1f:67:77:
         d4:dd:6a:f4:11:9c:ed:94:b3:3e:5c:67:19:0a:ff:b2:1c:e8:
         0e:28:dc:ef:31:93:b8:9a:d0:fb:ad:59:3f:20:9c:72:a3:5d:
         1c:7b:a2:9b:16:44:5d:2d:fe:11:40:2a:47:23:7d:34:92:30:
         6d:23:d8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:48:48 2026 by rpki-client