Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft
File:                     YOVPYFHttB6nqVCJbNm71nASDWM.mft (raw, json)
Hash identifier:          jiQvZDdNuxRhFYVw5fc5mQdY6U25mQyMpPNT7QH2/SE=
Subject key identifier:   58:8A:A7:24:7E:49:45:F7:49:98:F2:21:67:78:7E:AF:30:A4:CB:15
Authority key identifier: 60:E5:4F:60:51:ED:B4:1E:A7:A9:50:89:6C:D9:BB:D6:70:12:0D:63
Certificate issuer:       /CN=A91FF89A/serialNumber=60E54F6051EDB41EA7A950896CD9BBD670120D63
Certificate serial:       017D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft
Manifest number:          0174
Signing time:             Sun 05 Apr 2026 04:09:20 +0000
Manifest this update:     Sun 05 Apr 2026 04:09:20 +0000
Manifest next update:     Sun 12 Apr 2026 04:09:20 +0000
Files and hashes:         1: YOVPYFHttB6nqVCJbNm71nASDWM.crl (hash: ifGF+n+nBwdsbH3c3++by76qDPesyEi2yMLSZ4NswAI=)
                          2: 99AA3580F88611EE8E9B3E71C4F9AE02.roa (hash: bPEX0dVvMeMHuF9ZTGsIQels0ly/XiaUVU8i8aAIXrw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.crl
                          rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF89A, serialNumber=60E54F6051EDB41EA7A950896CD9BBD670120D63
        Validity
            Not Before: Apr  5 04:09:20 2026 GMT
            Not After : Apr 12 04:09:20 2026 GMT
        Subject: CN=69d1e070-f81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:66:78:49:43:3b:c7:64:66:b4:d5:9a:a1:c5:
                    0d:68:21:11:dd:b5:1a:d0:85:72:fc:77:82:20:38:
                    b6:1b:13:b4:f8:f3:cf:5c:91:98:ff:93:e8:56:2b:
                    8d:4f:0d:e8:55:f1:41:c6:3a:d8:65:1d:3a:9e:52:
                    1c:2f:fb:ce:39:e3:48:e0:b5:0b:25:4d:43:b2:26:
                    36:5a:85:0e:43:bf:9e:a9:73:50:01:ae:3e:eb:56:
                    a5:69:c1:1d:ef:39:a7:39:9d:98:a8:8c:7e:76:8b:
                    3b:df:09:07:f5:7e:2f:a0:16:d6:6b:6d:1f:fe:a4:
                    a7:1a:69:d8:f5:2d:b9:1f:5d:36:84:21:47:ad:2f:
                    53:d5:7e:30:7f:36:fb:1b:34:fb:d2:06:2b:49:cd:
                    76:5b:d6:fd:28:90:a8:0b:6c:80:2a:05:a6:6f:b0:
                    19:4c:75:d0:5a:ff:67:95:4f:59:5b:f0:0e:0d:aa:
                    3e:7e:ba:e7:69:f1:cf:26:87:59:e2:b2:34:15:cf:
                    2b:de:3f:d3:1c:37:8f:8a:da:e1:a3:01:31:1d:4d:
                    64:3a:17:92:c1:19:5e:24:9b:30:83:2b:29:98:c5:
                    a4:88:40:89:a8:92:ab:9f:37:6b:10:9e:76:30:28:
                    5d:d1:48:07:66:6b:8d:ea:fc:2b:53:3f:b1:d0:2c:
                    38:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8A:A7:24:7E:49:45:F7:49:98:F2:21:67:78:7E:AF:30:A4:CB:15
            X509v3 Authority Key Identifier:
                keyid:60:E5:4F:60:51:ED:B4:1E:A7:A9:50:89:6C:D9:BB:D6:70:12:0D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:a5:f3:17:cb:11:bb:ab:19:d5:6e:8d:1f:66:23:0e:ce:62:
         06:1a:2a:7d:be:6a:c2:94:24:19:64:73:5a:6e:20:91:e8:cf:
         05:cd:22:d5:db:2f:73:c7:7f:e8:6a:9f:31:34:49:a5:2c:a5:
         d6:ce:83:21:ae:1f:39:f0:8a:91:ad:19:18:12:e6:bd:5b:1e:
         ab:ba:38:e4:58:ea:ed:17:b4:0d:67:9d:eb:a3:67:f9:30:16:
         22:5b:6e:be:92:9a:3a:b6:1a:fc:af:4d:51:a1:c0:9d:47:f5:
         77:76:4f:42:1a:11:82:33:79:46:fd:61:34:cd:10:ce:e7:b9:
         2f:55:6a:6c:96:3c:6b:cf:cd:45:c3:99:55:42:1e:51:21:ca:
         1f:e9:08:08:c8:25:a5:33:9d:bc:bd:68:bf:c2:c8:d7:55:16:
         b6:fd:30:ff:9e:85:c7:22:a0:57:b0:a7:0d:aa:0a:4e:89:26:
         83:68:18:b4:40:cb:08:b1:a1:86:9b:f8:2e:be:a0:14:c6:e0:
         25:ab:f8:24:7c:34:a1:82:9d:d3:1d:78:18:cf:f2:16:71:68:
         e5:df:ee:94:79:52:57:f7:51:0f:92:46:26:77:39:88:d3:9e:
         7a:9c:7f:30:95:01:da:35:ee:53:9f:9e:75:0a:ed:df:71:7f:
         68:05:bd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:08:28 2026 by rpki-client