Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft
File:                     Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft (raw, json)
Hash identifier:          Nupx2HiBLRhht+Rd9jhvvSNKsHfvZkxd5htFUYo7jgo=
Subject key identifier:   A8:80:8F:A3:FD:C8:91:61:7D:23:0F:27:EC:AB:53:93:DA:EA:1E:13
Authority key identifier: 63:F7:8D:50:20:55:B6:CB:F0:7C:EC:A1:43:7B:56:02:A8:F2:4C:75
Certificate issuer:       /CN=A91D69B9/serialNumber=63F78D502055B6CBF07CECA1437B5602A8F24C75
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft
Manifest number:          0B
Signing time:             Sun 05 Apr 2026 08:27:15 +0000
Manifest this update:     Sun 05 Apr 2026 08:27:15 +0000
Manifest next update:     Sun 12 Apr 2026 08:27:15 +0000
Files and hashes:         1: Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.crl (hash: KDddatRV3K1Gyl34kYnQyXscTuh6KfTnDMmq3lkFqhI=)
                          2: 743D4A1A245F11F1B445E15AC5833773.roa (hash: I1pnbFkaRNRmC3NYqt0+dVRJnrgUwzqm0Vjq3Hx70aI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.crl
                          rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D69B9, serialNumber=63F78D502055B6CBF07CECA1437B5602A8F24C75
        Validity
            Not Before: Apr  5 08:27:15 2026 GMT
            Not After : Apr 12 08:27:15 2026 GMT
        Subject: CN=69d21ce3-0daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:46:9e:25:2c:30:e4:4f:46:85:84:cf:d1:36:
                    4a:cc:e4:7a:aa:a5:95:6f:58:2e:c1:b0:8b:56:0c:
                    22:08:ba:79:18:53:97:b2:03:d6:9c:5f:ac:8b:9b:
                    db:4b:ed:de:1d:7d:b0:c0:08:f2:00:3b:5b:b3:ca:
                    20:c9:27:8b:d7:5b:07:e6:8e:83:c4:7f:4b:9b:2e:
                    0f:7a:52:70:6c:3d:37:95:73:9e:d3:b8:61:7a:7b:
                    76:66:0e:40:f5:81:4b:37:4d:e4:dd:e1:0b:30:21:
                    fb:ce:6f:b5:bc:c7:cd:42:b1:cf:66:1b:6f:4d:e2:
                    2c:7e:db:fa:4a:8a:16:4f:fc:d9:54:b9:06:64:0c:
                    58:a1:b6:8c:45:69:03:39:85:e5:6a:ea:2f:a6:bc:
                    5c:ac:a1:53:8b:75:8e:4b:e8:9d:9a:69:dd:2b:18:
                    ba:e2:8a:55:30:f8:bd:22:59:0f:4c:9a:fb:7a:d7:
                    c4:52:22:2f:00:e8:72:77:fd:cf:3a:49:0a:06:de:
                    c5:26:b2:ee:bc:48:c8:16:47:2a:57:53:bd:c6:c5:
                    72:82:80:79:06:a8:90:78:b0:1d:09:33:5d:8d:f7:
                    f5:fe:bd:99:cc:43:97:b5:5d:de:ad:6b:67:f8:91:
                    e0:fc:9b:60:b1:f1:d2:fb:06:36:89:04:cd:f6:97:
                    5e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:80:8F:A3:FD:C8:91:61:7D:23:0F:27:EC:AB:53:93:DA:EA:1E:13
            X509v3 Authority Key Identifier:
                keyid:63:F7:8D:50:20:55:B6:CB:F0:7C:EC:A1:43:7B:56:02:A8:F2:4C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:76:c5:02:75:f6:1e:7a:f2:07:f8:a0:76:11:db:e7:55:32:
         26:68:5e:00:b4:68:31:97:64:73:2d:cb:82:e4:d0:de:22:d2:
         aa:86:b8:cd:a6:1b:1d:08:00:d6:ca:97:d4:ac:06:64:46:62:
         4b:69:06:f4:5b:84:09:77:4f:81:30:95:c4:38:30:66:b3:d2:
         d5:96:a3:4b:39:55:e9:3e:48:ef:30:5b:70:a8:24:ff:c4:f1:
         b2:80:66:3c:8e:61:ec:43:43:27:77:46:58:19:98:04:1a:e6:
         ec:70:8c:c6:82:e1:75:76:29:0b:f4:e3:96:07:bd:ad:54:b6:
         01:c5:d4:1b:7c:71:4e:a4:3e:06:7a:82:47:06:53:19:e7:40:
         bd:5f:3f:bc:b2:53:5a:d6:0a:50:06:3f:4b:97:ab:96:79:ca:
         fb:ed:03:fe:da:31:99:58:ef:f8:6e:e8:a9:41:94:5e:08:dc:
         1d:a2:89:54:31:5c:fe:5f:73:12:09:39:ad:69:bf:f7:a4:9b:
         fb:46:56:b4:34:83:b1:db:d7:68:af:a9:bc:e9:7e:cd:93:db:
         71:ed:7b:c6:37:86:50:17:7d:19:52:4e:e4:1f:66:04:eb:e1:
         00:fa:12:21:1f:1b:b9:98:ce:6d:4d:e9:11:a1:e4:b2:20:a3:
         1f:37:a4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:21 2026 by rpki-client