Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
File:                     YGWA927TklN9X8ollpTPkmFBfEE.mft (raw, json)
Hash identifier:          BduqKXQJlQ1IcHbZbPB3YpMgOOIrKS7ztFGjpt9Z110=
Subject key identifier:   FB:B6:17:8E:A4:23:2C:7D:66:4D:5B:B2:87:86:10:83:89:FB:AD:CC
Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41
Certificate issuer:       /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41
Certificate serial:       0672
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
Manifest number:          065B
Signing time:             Thu 02 Apr 2026 22:37:23 +0000
Manifest this update:     Thu 02 Apr 2026 22:37:23 +0000
Manifest next update:     Thu 09 Apr 2026 22:37:23 +0000
Files and hashes:         1: YGWA927TklN9X8ollpTPkmFBfEE.crl (hash: DlvcdLTkcSaqN5eYmRqXw2Ldlst5tdFUSrW6lKk8eaA=)
                          2: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (hash: oYSfn8Lw7ZTaZnCe3VDuK6B1QgB0S+Rqon8qQPIAWtk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl
                          rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 Apr 2026 22:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1650 (0x672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41
        Validity
            Not Before: Apr  2 22:37:23 2026 GMT
            Not After : Apr  9 22:37:23 2026 GMT
        Subject: CN=69ceefa3-ecf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:6e:eb:2e:70:59:6d:68:bd:9a:5f:13:7c:
                    44:74:17:0d:ee:f3:a8:ca:ac:44:dc:cc:c5:d8:0b:
                    ec:ac:0d:0a:a6:90:0f:0c:ca:bd:20:89:62:59:27:
                    82:4c:65:df:52:bb:23:00:b5:cf:66:5e:76:92:d8:
                    43:9f:31:33:00:74:83:17:a9:18:7e:2a:3e:a8:2a:
                    e5:b3:ae:82:eb:6a:5c:74:1a:5d:e4:08:81:7f:97:
                    5b:dc:78:81:26:4e:e6:a1:ff:2a:1a:79:b2:73:a3:
                    03:c8:01:6b:e1:c9:35:55:08:ab:60:9b:10:00:00:
                    6b:4c:1b:bd:ab:bf:90:14:54:97:78:94:ef:ce:84:
                    14:97:f8:10:92:59:83:dc:ea:a0:83:3b:09:15:8b:
                    a3:e3:e4:7f:f2:12:cd:ff:f4:44:31:1f:3e:ef:f7:
                    21:af:55:59:37:9c:31:c7:ab:99:85:05:f8:1e:78:
                    f6:ec:2e:61:08:4b:0c:ce:1c:b4:6e:92:8a:e7:45:
                    00:8c:fd:52:f6:83:91:ea:de:d7:39:9b:90:ae:b3:
                    56:85:0c:cf:28:09:eb:1a:11:5a:61:a7:d4:6d:dd:
                    25:06:2b:6f:54:0f:ad:4e:94:26:3a:68:49:85:dd:
                    4d:51:98:cc:cd:ae:78:95:8c:9c:ef:78:5f:31:c6:
                    a0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B6:17:8E:A4:23:2C:7D:66:4D:5B:B2:87:86:10:83:89:FB:AD:CC
            X509v3 Authority Key Identifier:
                keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ea:6d:38:4a:32:20:ba:64:ad:1b:82:4c:53:7e:cc:43:62:
         c6:b1:da:10:16:12:14:89:c8:3c:bb:bd:51:ba:dc:be:3a:06:
         29:c4:53:e0:c1:1b:c0:5e:b6:3a:be:fd:26:5e:45:15:7b:ad:
         f7:3f:65:11:03:6f:e3:6a:e8:fe:03:47:4b:11:7d:15:e1:2a:
         6f:1e:60:78:2a:b3:e5:26:cf:df:3c:19:1f:0e:ed:48:cd:6e:
         61:8f:32:02:29:ca:f0:d8:6e:69:71:d7:d7:79:8b:5e:1a:5e:
         bc:43:81:9e:e7:01:1c:bb:2f:25:2c:c9:06:2a:7c:77:d4:fa:
         d5:4c:0e:d1:e0:f4:ae:ad:cd:27:78:64:1a:64:a2:e4:6c:0d:
         f9:34:4b:b3:39:62:e7:99:9a:19:a0:53:b8:a5:4f:f6:3f:bb:
         51:07:8d:62:86:cc:66:d1:b4:86:48:fa:a6:6d:a3:69:93:b1:
         ef:82:59:90:f8:78:ad:69:c2:8e:82:9c:01:cf:4f:c0:9d:c1:
         3a:3e:d9:b0:4d:00:c7:b0:36:05:2d:90:0f:8d:b7:ec:f2:7d:
         56:32:07:03:6b:23:c4:94:80:37:63:fa:02:84:ca:d3:c9:09:
         bf:3c:07:b3:64:b5:cf:99:66:fb:13:3d:90:2a:49:b4:c3:64:
         b0:e7:8e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 20:15:30 2026 by rpki-client