Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
File:                     yl96MSHB9fmJUgx6UZcT-zpoyn4.mft (raw, json)
Hash identifier:          b/Y5/uoL1eI2kOFMUWeaX5/++BuGKLugYLKD39CBquQ=
Subject key identifier:   14:FA:39:5D:F4:DB:91:27:15:CC:5E:C0:B0:4F:FA:83:AD:2E:F0:AC
Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E
Certificate issuer:       /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
Manifest number:          DE
Signing time:             Tue 07 Apr 2026 06:04:38 +0000
Manifest this update:     Tue 07 Apr 2026 06:04:37 +0000
Manifest next update:     Tue 14 Apr 2026 06:04:37 +0000
Files and hashes:         1: yl96MSHB9fmJUgx6UZcT-zpoyn4.crl (hash: kQfzg/5TP90w0nQ2V2bMDnZ3MvKqtXkikE6LvGVVHxM=)
                          2: 09852FF6E9FC11EF9D3DE972C4F9AE02.roa (hash: +Guf8goiy81fZQZko9cL1+fi1M4VlxC1TorsAeBwzhI=)
                          3: F70CBA98E9B911EFB5B54650C4F9AE02.roa (hash: ApqLcBimI49Avn0PuHyRPruV4UszM9ORBkBlkObwqEY=)
                          4: 0A34182CE9FC11EF9D3DE972C4F9AE02.roa (hash: 5aZLhkHexwZy2OGn8j73qB9Fr54SX5MLYLq1gSETLgc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl
                          rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E1FC, serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
        Validity
            Not Before: Apr  7 06:04:37 2026 GMT
            Not After : Apr 14 06:04:37 2026 GMT
        Subject: CN=69d49e76-1261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:5c:78:87:61:3f:9d:c3:c2:2b:0d:90:02:
                    b3:37:89:4d:6a:c3:a2:41:71:20:d7:f7:e1:c0:f3:
                    65:99:3d:ca:f5:2c:68:2c:3b:63:ef:3f:6a:0a:e9:
                    a3:b3:76:e0:94:d0:bc:2b:66:12:1b:80:72:a3:18:
                    e7:af:2c:55:ea:09:09:15:c6:d9:1e:18:03:12:ba:
                    86:8c:48:9a:a2:73:c9:37:f2:f4:5d:32:cd:d8:8d:
                    89:2a:0b:86:b3:7f:b0:3f:a0:ea:52:6d:27:05:ba:
                    ad:d6:1c:7c:c1:26:f9:0b:ff:93:d8:88:69:f4:5e:
                    af:17:cd:32:fe:41:26:02:ab:7d:e8:f2:60:fd:8b:
                    d4:00:59:e6:83:83:b2:e4:0a:c7:6a:f2:cb:3f:4b:
                    99:d8:5e:14:b9:dd:f6:ef:7e:92:dc:07:b8:ed:6d:
                    a5:4a:eb:dd:61:14:9b:b3:32:2d:69:ac:17:1c:6a:
                    20:a9:85:12:f7:e1:b5:93:cc:10:21:f4:3c:39:d8:
                    97:ff:5e:84:99:9f:19:27:c6:ed:c9:b7:2d:c9:b3:
                    11:93:6c:62:58:fb:4a:4f:13:9e:90:d3:62:86:14:
                    6e:c9:cc:c5:ac:1a:fa:30:5c:e3:a4:97:26:51:a2:
                    0f:d0:eb:4c:2c:1e:d8:52:1b:08:3b:cc:ec:ac:25:
                    1c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FA:39:5D:F4:DB:91:27:15:CC:5E:C0:B0:4F:FA:83:AD:2E:F0:AC
            X509v3 Authority Key Identifier:
                keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f9:09:e2:4c:29:ca:11:88:7a:29:97:fe:56:9d:db:df:4a:
         79:ea:de:98:bf:f2:2f:fe:3e:95:05:93:89:ea:de:95:00:7b:
         0c:18:2e:44:55:aa:b7:19:16:89:67:00:c1:51:e7:e2:b4:f0:
         56:70:d7:02:43:d2:3c:08:e7:7d:87:e8:75:8c:1a:11:56:5b:
         86:60:34:d7:93:8b:6c:8e:2e:89:5a:04:89:03:64:cc:ce:61:
         f8:44:ca:b9:4a:0f:31:a3:70:fe:fb:5d:f8:01:7e:9a:ce:a4:
         4b:c7:a8:74:5b:ce:ff:ba:f7:98:49:24:4b:a2:7f:81:58:08:
         9d:06:b7:84:5c:55:42:ce:ad:c3:3a:fb:1e:37:69:dd:d7:23:
         3d:15:e7:be:79:32:75:00:d0:76:bf:8d:06:65:c9:43:cd:73:
         f3:65:8e:79:af:96:38:d6:7f:99:5b:19:00:eb:c4:f7:42:22:
         cd:ee:d6:67:2d:12:d5:db:d8:ef:8a:9f:8e:79:60:2e:a9:bf:
         00:fd:7d:64:f9:f0:bc:d6:a2:03:7c:29:44:ec:69:57:64:96:
         f7:cb:45:c9:74:15:09:a4:36:d1:94:09:e4:8f:31:1f:1d:22:
         17:f6:fb:1f:92:ff:a8:f8:62:f6:1b:98:49:ac:d0:f8:cf:52:
         e9:3d:b8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:08:41 2026 by rpki-client