Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
File:                     gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft (raw, json)
Hash identifier:          81YWuVWcL1ldY03CeXU0oEZ2dyHpx7ib21Lq4qwhg6U=
Subject key identifier:   5B:FB:3F:D5:5F:80:42:C2:EB:D3:7C:4A:00:AE:22:0B:73:F7:C3:3D
Authority key identifier: 83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4
Certificate issuer:       /CN=A9171669/serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
Certificate serial:       031D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
Manifest number:          0317
Signing time:             Sun 05 Apr 2026 00:55:12 +0000
Manifest this update:     Sun 05 Apr 2026 00:55:12 +0000
Manifest next update:     Sun 12 Apr 2026 00:55:12 +0000
Files and hashes:         1: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl (hash: mtGLCDVYEHJY1yPRBCjxRGtA1ok8RlZCaq3Wz+hXD8s=)
                          2: 91BBC8880D9711ED8F09C27DC4F9AE02.roa (hash: 1aa3czYkpSyqjPONv8BwygAakzboZ9Kn6LCrFEhTJOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl
                          rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 797 (0x31d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171669, serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
        Validity
            Not Before: Apr  5 00:55:12 2026 GMT
            Not After : Apr 12 00:55:12 2026 GMT
        Subject: CN=69d1b2f0-ede6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8a:d2:44:c1:9a:48:68:be:ea:0c:3d:0b:9e:
                    05:dd:a7:30:54:6e:3c:41:b2:03:9a:49:8d:26:7c:
                    17:d5:e5:f6:cb:ce:af:f1:e9:e1:8b:05:93:68:27:
                    2c:a0:de:67:76:1f:29:c6:67:c3:f7:8e:d9:7e:76:
                    0d:4b:7e:19:b1:6d:4a:67:ab:71:e6:8a:95:7e:a3:
                    9a:b6:55:eb:55:e0:02:82:34:4d:bb:90:fd:f9:88:
                    48:ea:65:e8:62:da:0e:6f:57:90:eb:0c:2d:95:47:
                    26:d9:c5:0e:b4:68:3c:9d:7e:c5:41:2c:e8:a9:9a:
                    80:c7:df:2a:84:25:a6:2e:ab:d4:fe:b9:e1:e7:0c:
                    a4:83:ca:f8:39:92:4e:91:09:d5:7c:c4:c9:c6:af:
                    e0:95:f7:7f:b6:67:bd:7f:e9:71:e6:02:98:7a:73:
                    c8:6c:bb:c9:4a:c3:f9:9b:4f:c0:36:74:12:90:8f:
                    5f:15:b8:6b:3a:4a:a6:a2:eb:74:ab:f9:cb:b2:b4:
                    12:70:3f:da:31:e5:7f:7d:03:b9:f0:4a:c0:f1:2d:
                    ef:c1:3e:66:0b:a5:e1:eb:ca:0b:20:84:dd:21:59:
                    5d:79:be:d1:25:40:6b:43:03:b1:1b:00:50:be:75:
                    65:8d:4d:83:7a:d8:3e:95:a5:9a:d7:0b:a8:de:41:
                    7e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FB:3F:D5:5F:80:42:C2:EB:D3:7C:4A:00:AE:22:0B:73:F7:C3:3D
            X509v3 Authority Key Identifier:
                keyid:83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e4:85:a8:58:8f:11:ba:2d:2e:08:60:7c:a6:8b:3a:a1:eb:
         da:75:a1:ef:b7:fe:f7:6c:68:6a:6f:7e:cd:c2:d0:b9:0b:05:
         d8:4c:70:39:95:ea:1b:c8:9d:02:62:0e:3d:21:a7:da:cd:34:
         95:12:6e:03:5b:c2:ae:b5:21:bf:7d:06:c8:4d:a6:95:e1:30:
         92:72:7a:28:f4:e4:c2:c1:51:65:96:bc:7e:41:e2:3d:83:76:
         b2:05:e1:b8:e9:ab:c7:97:fb:8f:6a:08:a5:55:b6:be:fa:a4:
         9f:a6:f1:14:a4:14:2e:cb:99:7d:08:73:29:60:59:a1:f1:3b:
         eb:2c:e3:7e:d4:0e:da:30:09:16:06:45:94:06:27:37:1c:83:
         39:4b:e8:45:73:8b:1d:56:67:0f:80:e9:17:37:87:38:b2:ff:
         b0:bf:59:34:30:54:03:45:38:38:f4:15:67:22:71:bd:c3:33:
         e1:b6:16:5e:3c:e3:c4:c6:d8:53:3f:91:0a:c2:c9:67:9f:57:
         ff:ef:97:24:42:3b:d2:af:46:e6:fb:e4:00:10:e5:d3:63:72:
         2f:b7:88:37:c6:bf:c0:c9:41:95:65:b4:9e:58:e6:7c:da:22:
         b3:01:cf:40:17:5a:c8:2a:e0:a0:9f:83:aa:7e:f9:c2:6c:dd:
         f4:49:3a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:23 2026 by rpki-client