Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
File:                     yNpkCWcTSBB928ixg_VavykxJVY.mft (raw, json)
Hash identifier:          DO0/remODcxi/3/0GwnBiret6KQwkBJyHl1TSnQX1Pk=
Subject key identifier:   97:2D:24:95:57:EE:E7:6C:EC:B8:6E:4D:8C:AD:A4:9A:22:51:F0:17
Authority key identifier: C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56
Certificate issuer:       /CN=A9120974/serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556
Certificate serial:       10E6
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
Manifest number:          10E6
Signing time:             Fri 20 Mar 2026 17:07:38 +0000
Manifest this update:     Fri 20 Mar 2026 17:07:37 +0000
Manifest next update:     Fri 27 Mar 2026 17:07:37 +0000
Files and hashes:         1: yNpkCWcTSBB928ixg_VavykxJVY.crl (hash: 4mLrF0RQE0lP7VfJzUsm7/2tW35oYGH7As1FcOl4vZc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 17:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4326 (0x10e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556
        Validity
            Not Before: Mar 20 17:07:37 2026 GMT
            Not After : Mar 27 17:07:37 2026 GMT
        Subject: CN=69bd7ed9-0e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cb:dd:c9:32:95:53:77:d4:13:aa:2d:43:f0:
                    84:36:7d:37:54:91:ef:61:7d:b0:f5:46:96:ed:c0:
                    ac:07:7b:cf:dd:c5:eb:79:4f:da:34:e0:ff:fe:88:
                    a6:8f:82:5a:ec:a0:a9:44:5c:f8:83:1b:e8:e0:4e:
                    e8:7a:98:2a:e8:2c:f0:4a:14:a6:4d:8e:0d:66:61:
                    44:bf:98:86:47:6c:3d:61:bf:fc:d3:2a:e7:c0:31:
                    9b:1c:37:16:b3:c8:ab:fc:27:5f:35:fd:6f:64:79:
                    4a:63:6d:3f:72:4a:56:c3:89:ee:f4:88:ea:25:57:
                    b6:63:54:d1:0c:0c:24:21:6e:3b:75:d1:1a:cb:52:
                    a2:6a:f8:f0:8d:04:d2:af:98:c6:cc:95:e1:85:30:
                    3f:0f:03:6a:3c:e4:60:01:4e:fd:22:f6:fe:4b:e0:
                    ae:5c:6a:39:c6:10:86:4e:e8:de:1b:91:36:56:1b:
                    ed:dd:d9:b3:10:d0:62:e5:b9:f0:97:fa:f7:89:77:
                    88:da:0a:f2:0b:64:2f:ad:22:6f:d7:29:23:64:e2:
                    04:df:e4:18:04:96:78:65:e2:d3:d6:81:67:13:dc:
                    c0:45:f0:ee:06:4c:f6:2e:92:a9:db:ab:45:dd:56:
                    18:cf:9b:b4:1a:6e:68:7d:f3:5e:51:f1:97:5e:46:
                    17:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2D:24:95:57:EE:E7:6C:EC:B8:6E:4D:8C:AD:A4:9A:22:51:F0:17
            X509v3 Authority Key Identifier:
                keyid:C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:67:01:5a:29:f9:8a:83:49:44:5b:e5:e0:f1:44:e2:23:11:
         53:43:fe:0a:24:45:8c:43:f1:a7:9c:0b:ca:77:34:b0:28:16:
         1c:81:ac:26:2e:54:0f:87:13:24:ea:31:13:60:24:b7:36:89:
         87:25:76:29:f2:9d:91:5a:24:88:13:6c:e0:74:a8:11:f7:2e:
         f3:cb:2f:b1:f5:e7:04:a7:82:12:eb:9a:a9:c8:70:16:69:3a:
         f4:02:1b:1e:3f:cd:a6:57:1d:24:68:72:5d:d4:d0:72:38:c2:
         48:75:aa:d5:2a:b4:0d:df:a8:da:cb:41:c2:40:b7:c2:5f:dd:
         e1:fe:3d:ee:5c:fe:9b:fc:49:17:bd:f2:56:ed:5a:a5:5a:24:
         d0:d3:74:e9:db:4f:2f:44:57:1e:bf:df:8b:02:e6:af:cc:63:
         a2:72:72:8c:ea:b4:49:ef:f9:dc:ce:97:8a:31:8f:61:d5:dc:
         d6:f2:c6:26:4e:0a:e8:0a:e8:dc:17:cf:4b:5f:13:ef:54:0a:
         34:23:92:0c:bf:a7:bb:82:f9:d5:8c:fd:fd:f0:13:f0:d3:bc:
         b6:aa:99:c0:df:67:12:e7:9e:ef:88:d0:07:4f:6c:61:ab:e8:
         e7:b7:7a:f5:36:1b:9f:43:14:72:cc:01:bc:5c:57:69:da:e5:
         3a:f5:10:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 16:33:56 2026 by rpki-client