Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft
File:                     yhlef9JZjYWjbJnsSBs1dMBuOxc.mft (raw, json)
Hash identifier:          hCo4FYK3QMsV6H5mmHGv9AVMxKUFx7/bWaUicTKFlhs=
Subject key identifier:   26:CC:B8:47:AB:F6:B5:61:A5:6E:23:A2:D8:72:2F:AE:E8:27:D1:F5
Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17
Certificate issuer:       /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17
Certificate serial:       08A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft
Manifest number:          089C
Signing time:             Sat 04 Apr 2026 20:18:46 +0000
Manifest this update:     Sat 04 Apr 2026 20:18:45 +0000
Manifest next update:     Sat 11 Apr 2026 20:18:45 +0000
Files and hashes:         1: yhlef9JZjYWjbJnsSBs1dMBuOxc.crl (hash: +KITbuVvTZeQ66hhMeNRpVdgSNmQSP7x1gWj6rk0hb8=)
                          2: B65C355AE1E411EAAD5D8545C4F9AE02.roa (hash: a0ikFcPtz4uKTdxcDLlrrrB8ZBAu38Rn0L19Tx4gd1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl
                          rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2212 (0x8a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DA63, serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17
        Validity
            Not Before: Apr  4 20:18:45 2026 GMT
            Not After : Apr 11 20:18:45 2026 GMT
        Subject: CN=69d17226-291a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1d:10:ec:8c:ff:f1:f5:fa:1d:f0:fe:70:4a:
                    70:da:3b:1c:72:2c:22:99:07:c5:1d:c4:56:47:57:
                    cf:86:8d:81:1a:76:3c:13:33:1c:6a:bc:b2:fd:49:
                    d3:35:6a:8c:87:62:ed:75:f5:95:5a:40:d0:0a:ec:
                    4d:52:00:32:be:8d:6b:e2:38:d0:54:d2:32:1d:0f:
                    ca:7e:6d:d2:6c:58:1c:a8:73:22:95:62:b6:a6:91:
                    b9:d9:8a:94:30:ad:d4:23:51:94:40:7e:20:2f:7f:
                    f8:1f:0d:0e:56:41:56:8a:1a:f6:ac:f8:3c:39:a5:
                    c5:aa:24:94:3b:cb:71:c8:90:07:1f:16:a2:85:ab:
                    29:c1:10:9b:63:c1:dd:10:d1:3f:37:cd:43:39:a8:
                    41:3a:e9:30:ae:6e:86:36:50:5d:03:fb:3c:f3:28:
                    30:36:9b:f8:d9:f5:7c:6f:77:47:f6:19:ce:80:b3:
                    2a:e5:34:27:10:c3:c6:b4:dc:3f:9f:1d:b6:88:6a:
                    18:76:6d:ed:02:01:96:33:41:8e:1a:1a:38:dd:8b:
                    c0:79:8e:c6:b6:8e:0c:5f:dc:b7:2d:c9:bf:2d:48:
                    4b:1d:53:a6:5c:d2:ab:86:0d:95:f3:f5:39:5b:f5:
                    fe:5b:96:86:41:8c:32:a9:b9:47:8a:54:b8:ac:86:
                    2c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CC:B8:47:AB:F6:B5:61:A5:6E:23:A2:D8:72:2F:AE:E8:27:D1:F5
            X509v3 Authority Key Identifier:
                keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4b:06:84:43:59:8a:45:f7:88:d8:be:01:e9:b3:19:05:c8:
         7c:41:05:4e:93:1d:be:a4:4c:f3:4a:6c:c3:9d:df:09:7f:44:
         e2:72:1e:2b:70:cc:b5:10:63:17:d5:9f:64:5c:3a:f7:85:77:
         85:e8:7f:fb:c4:f3:c7:61:61:fe:d1:2d:ee:9f:08:4e:f7:75:
         6b:8a:eb:b0:20:9e:c7:80:e9:72:1a:4f:07:0b:9d:de:ed:dc:
         7e:ab:9a:ff:23:b3:38:00:e3:a9:71:59:f5:45:00:0e:af:60:
         fd:ab:9f:8b:57:ff:dc:30:84:1c:8f:21:9e:75:fa:16:86:82:
         2f:b3:60:f6:02:9e:ec:33:b6:29:76:36:e9:43:99:fa:55:1e:
         cf:85:60:3d:7d:15:94:36:ec:bb:6e:8c:87:94:f8:3b:4a:26:
         47:51:5f:ad:7f:3b:88:a3:d4:b4:f5:b1:b2:e8:9a:2f:8f:56:
         f2:30:ae:b3:4d:8f:cf:d0:2f:0a:ab:18:ca:80:35:fb:55:ee:
         23:3c:0c:a5:df:14:68:7f:d1:d8:93:ee:f0:e7:bd:2c:b1:12:
         57:60:46:c8:c8:88:b2:16:3d:05:4f:3b:a1:dc:c6:7b:d8:13:
         c1:dc:de:54:50:17:6c:a3:5e:78:92:78:bb:01:68:c7:e6:3a:
         e6:a1:20:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURBNjMxMTAvBgNVBAUTKENBMTk1RTdGRDI1OThEODVBMzZDOTlFQzQ4MUIzNTc0
QzA2RTNCMTcwHhcNMjYwNDA0MjAxODQ1WhcNMjYwNDExMjAxODQ1WjAYMRYwFAYD
VQQDEw02OWQxNzIyNi0yOTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhh0Q7Iz/8fX6HfD+cEpw2jscciwimQfFHcRWR1fPho2BGnY8EzMcaryy/UnT
NWqMh2LtdfWVWkDQCuxNUgAyvo1r4jjQVNIyHQ/Kfm3SbFgcqHMilWK2ppG52YqU
MK3UI1GUQH4gL3/4Hw0OVkFWihr2rPg8OaXFqiSUO8txyJAHHxaihaspwRCbY8Hd
ENE/N81DOahBOukwrm6GNlBdA/s88ygwNpv42fV8b3dH9hnOgLMq5TQnEMPGtNw/
nx22iGoYdm3tAgGWM0GOGho43YvAeY7Gto4MX9y3Lcm/LUhLHVOmXNKrhg2V8/U5
W/X+W5aGQYwyqblHilS4rIYsFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCbMuEer
9rVhpW4jothyL67oJ9H1MB8GA1UdIwQYMBaAFMoZXn/SWY2Fo2yZ7EgbNXTAbjsX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REE2My8wMUJGN0JFRUUx
RTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZV2piSm5zU0JzMWRNQnVP
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lobGVmOUpaallXamJKbnNTQnMxZE1CdU94Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
REE2My8wMUJGN0JFRUUxRTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZ
V2piSm5zU0JzMWRNQnVPeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARUsGhENZikX3iNi+AemzGQXIfEEFTpMdvqRM80psw53fCX9E4nIeK3DMtRBj
F9WfZFw694V3heh/+8Tzx2Fh/tEt7p8ITvd1a4rrsCCex4DpchpPBwud3u3cfqua
/yOzOADjqXFZ9UUADq9g/aufi1f/3DCEHI8hnnX6FoaCL7Ng9gKe7DO2KXY26UOZ
+lUez4VgPX0VlDbsu26Mh5T4O0omR1FfrX87iKPUtPWxsuiaL49W8jCus02Pz9Av
CqsYyoA1+1XuIzwMpd8UaH/R2JPu8Oe9LLESV2BGyMiIshY9BU87odzGe9gTwdze
VFAXbKNeeJJ4uwFox+Y65qEgSw==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:44:15 2026 by rpki-client