Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
File:                     Y4g-TKLI593aw5h-SE_R1nLZOUk.mft (raw, json)
Hash identifier:          Mwsk9SV9h8nPa542FTBnbw14QFlTkAUlZYXhJDYpAN4=
Subject key identifier:   AC:84:BC:7E:EC:4C:27:12:75:73:CE:CD:3F:56:27:2F:4F:DB:C4:9C
Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49
Certificate issuer:       /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949
Certificate serial:       0CBD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
Manifest number:          0CAE
Signing time:             Sat 04 Apr 2026 18:20:57 +0000
Manifest this update:     Sat 04 Apr 2026 18:20:56 +0000
Manifest next update:     Sat 11 Apr 2026 18:20:56 +0000
Files and hashes:         1: Y4g-TKLI593aw5h-SE_R1nLZOUk.crl (hash: RPMUB1jWzAsg91vwYIAh4P3sHckjp4UgZjeBYfiCq3k=)
                          2: DF7C7778A97711F0A76BF369C4F9AE02.roa (hash: BQ60yu99DWJ9CNKy9x/LydxX4YGxdVFeZGopEZ5WrOo=)
                          3: 3C48E7BECA0E11F0B519EA6AC4F9AE02.roa (hash: BJhR7XO5jBVX7pJopEIukYOW4YF8aEvCYgvTMv/w/5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl
                          rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3261 (0xcbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949
        Validity
            Not Before: Apr  4 18:20:56 2026 GMT
            Not After : Apr 11 18:20:56 2026 GMT
        Subject: CN=69d15689-02b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:d9:63:cc:95:f6:ce:7c:df:d6:c8:dd:91:
                    b6:ab:24:0b:37:1b:9f:e9:22:1b:0b:7b:7d:f8:d3:
                    70:5c:18:44:76:ff:d3:a9:68:58:d2:e4:0b:a2:05:
                    4c:86:44:50:64:45:39:84:59:5d:96:bc:dd:b3:5f:
                    98:b5:c2:3c:a7:a5:06:50:57:0d:27:f8:54:10:16:
                    25:d0:39:16:83:5e:62:18:e6:88:50:e8:74:23:8b:
                    ce:a6:cf:2c:de:e5:6c:72:53:9f:bc:f1:eb:3d:97:
                    08:91:f6:57:1f:e8:2f:0c:ec:59:3f:71:39:e0:bf:
                    10:4e:3b:fc:8a:7c:74:8f:db:90:fd:99:36:f5:94:
                    8e:5f:58:66:09:3e:12:d5:aa:3c:1b:6f:a1:cc:ea:
                    3f:01:70:4c:32:4c:9a:76:82:9b:f6:8e:4e:9a:1c:
                    4b:d5:88:de:d7:f4:70:a4:e5:7d:44:c7:33:8e:b7:
                    2c:03:e2:56:96:c0:e6:bf:84:9f:b4:14:a5:e6:f2:
                    53:11:c3:be:f5:73:41:46:1e:35:55:62:95:ba:89:
                    13:70:11:64:7f:20:1d:86:f0:04:a2:82:86:e0:4a:
                    ab:e4:79:19:77:a5:41:85:1b:ae:7d:62:12:53:5f:
                    8a:1f:f4:4c:6e:9c:82:94:f5:08:cb:dd:c3:ff:27:
                    af:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:84:BC:7E:EC:4C:27:12:75:73:CE:CD:3F:56:27:2F:4F:DB:C4:9C
            X509v3 Authority Key Identifier:
                keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:9a:13:9e:cb:b1:0f:be:63:d8:a5:cd:a8:94:9e:93:94:1f:
         a3:c0:0d:90:f3:2a:7d:2b:28:ce:d9:42:1b:07:dd:ec:64:b4:
         60:e2:ea:98:55:7d:5e:48:0a:98:3f:eb:52:35:62:e8:f8:c8:
         37:bf:fd:f0:51:8f:8a:e7:5e:3e:4a:c5:55:1e:1e:cc:c9:7f:
         71:0e:f3:cb:c0:30:1d:1a:a9:26:e7:b0:cb:3a:6f:62:89:05:
         a2:e5:fd:fd:52:b6:e2:f7:29:ad:1e:cb:0c:b3:ce:16:7d:eb:
         92:25:c5:f6:71:88:07:93:de:d2:41:57:10:55:0c:b6:37:f9:
         bf:71:c2:ea:9e:8b:e6:5f:18:56:b2:f7:18:c9:c9:d8:ad:27:
         72:e9:59:09:d2:7e:2e:b3:bb:62:29:a0:45:b1:27:6c:bc:de:
         22:72:4a:0c:7c:c9:88:95:34:e3:96:92:fa:c1:2f:b3:c0:24:
         c8:4b:78:00:56:b8:e5:50:2b:ff:35:e2:d5:13:97:0d:62:e9:
         43:a9:95:4a:1d:08:61:35:ba:14:93:17:56:20:0a:ec:6e:f5:
         93:3c:b7:30:f7:a8:53:3a:47:6f:5f:0f:e2:7b:29:95:e2:36:
         3b:ad:11:b4:80:52:78:58:6a:b5:62:a4:bd:36:0c:ee:d4:a2:
         f7:50:c9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 02:23:21 2026 by rpki-client