Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
File:                     Y8QELC5YMug5UaBUZeiB1qfd0CI.mft (raw, json)
Hash identifier:          2fW/epGRcRZrw1Of4n7IxeP3wM+v3erAcO8pTx7twT0=
Subject key identifier:   67:DD:D0:2F:93:5E:94:45:72:41:B7:93:3C:A5:0B:84:D9:91:86:13
Authority key identifier: 63:C4:04:2C:2E:58:32:E8:39:51:A0:54:65:E8:81:D6:A7:DD:D0:22
Certificate issuer:       /CN=A9146039/serialNumber=63C4042C2E5832E83951A05465E881D6A7DDD022
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
Manifest number:          0F
Signing time:             Sun 05 Apr 2026 08:24:39 +0000
Manifest this update:     Sun 05 Apr 2026 08:24:38 +0000
Manifest next update:     Sun 12 Apr 2026 08:24:38 +0000
Files and hashes:         1: Y8QELC5YMug5UaBUZeiB1qfd0CI.crl (hash: yeza9/ajgqOG3BymzJa0x4SpwJqM9PrdEa9w+z8avns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.crl
                          rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146039, serialNumber=63C4042C2E5832E83951A05465E881D6A7DDD022
        Validity
            Not Before: Apr  5 08:24:38 2026 GMT
            Not After : Apr 12 08:24:38 2026 GMT
        Subject: CN=69d21c46-d3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:32:11:8a:48:f4:5a:80:33:db:b4:ec:ea:8f:
                    88:0b:31:c7:73:c8:bc:7e:a3:4f:ab:7b:17:25:1d:
                    ec:67:7a:61:27:4d:fe:b7:64:bc:9f:4c:f6:c0:5b:
                    7c:53:fe:61:8b:8b:cb:a8:bb:0e:94:93:a3:9c:5a:
                    06:ee:7b:8a:62:a2:eb:91:08:66:00:98:8b:cc:62:
                    b8:6d:1e:f5:76:17:16:f3:2d:ba:0f:03:0e:df:2a:
                    5d:67:3b:56:52:34:fa:4b:14:15:9b:bc:1f:ff:d0:
                    ee:a7:bd:12:ca:f7:fa:e3:7a:66:a6:4c:3f:25:12:
                    93:ba:57:1c:ce:67:c3:76:96:d9:94:2d:2f:2f:0b:
                    b6:ee:19:d6:48:be:04:8c:31:79:0d:2c:4e:89:37:
                    23:e3:3c:33:45:2c:f7:2e:2b:00:8d:d3:d9:d8:d5:
                    86:12:08:d2:82:34:c3:75:d5:9d:96:6f:8a:4a:7e:
                    89:9b:b2:9e:f3:90:b7:31:24:7c:81:53:77:9d:10:
                    8b:17:d2:08:c6:65:0d:a8:16:3c:4e:da:23:ae:68:
                    6c:72:9e:ce:d3:0b:cc:29:db:4e:6b:8e:e4:bf:72:
                    f5:9d:7a:fc:8b:60:b2:b3:da:52:94:a5:2a:1e:16:
                    f5:2e:f2:e5:67:2e:47:09:62:d2:ab:b8:79:70:b0:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DD:D0:2F:93:5E:94:45:72:41:B7:93:3C:A5:0B:84:D9:91:86:13
            X509v3 Authority Key Identifier:
                keyid:63:C4:04:2C:2E:58:32:E8:39:51:A0:54:65:E8:81:D6:A7:DD:D0:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f4:e5:32:b6:42:da:41:01:04:b3:03:dc:a8:f3:db:4f:4e:
         11:e7:df:a5:90:01:92:8a:0c:9c:03:8f:52:3b:50:4e:5d:b1:
         cb:e4:23:f3:69:ad:ba:b5:18:2d:7b:d9:90:d9:fb:59:18:2b:
         0d:f0:1d:0f:f1:fc:9c:82:2b:bf:cd:22:92:7a:53:bc:00:6c:
         2f:fc:32:f6:19:05:86:38:c6:e4:65:34:69:b6:a2:28:49:12:
         30:df:99:14:29:f0:31:7f:40:4e:58:ee:b5:e2:7a:3e:cf:ce:
         a5:4c:09:f4:6b:d6:1d:e7:63:99:0f:e1:c5:1d:ec:13:de:d9:
         36:0b:55:66:a6:db:51:2e:bb:38:f1:93:55:7f:a5:fb:d1:03:
         a7:73:8e:b0:79:2e:2a:9b:86:2e:fe:66:80:a1:04:b8:bb:09:
         a7:7a:29:ea:8e:74:7b:a0:ea:fb:26:ca:f4:e7:93:fb:6d:57:
         b3:00:01:5f:54:20:35:32:21:69:cb:70:16:e7:37:21:69:f0:
         16:00:53:7b:52:cc:e2:af:18:83:e4:0b:e6:98:4f:58:93:32:
         d5:f7:7e:de:c8:7c:bf:d6:ab:bc:a7:51:04:05:56:f7:46:0b:
         2e:ca:67:8a:45:7c:11:e4:4e:e5:18:11:70:db:fa:b6:5f:c1:
         ff:fa:ef:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:39 2026 by rpki-client