Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft
File:                     yyTPMxKhYnFYzDraiI5bywxnzqE.mft (raw, json)
Hash identifier:          jAIV3J668ShGT96u+ljzXnLQTI7XRn8qQxxf9nscb1M=
Subject key identifier:   3A:AB:77:E8:93:71:AC:C2:BB:5A:04:11:FD:76:99:84:74:D3:1F:9A
Authority key identifier: CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1
Certificate issuer:       /CN=A9122342/serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1
Certificate serial:       0A2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft
Manifest number:          0A24
Signing time:             Sat 04 Apr 2026 19:34:13 +0000
Manifest this update:     Sat 04 Apr 2026 19:34:12 +0000
Manifest next update:     Sat 11 Apr 2026 19:34:12 +0000
Files and hashes:         1: yyTPMxKhYnFYzDraiI5bywxnzqE.crl (hash: 660S6jQuUFvkG4KdHSvDun3Mnse1xE0j9Ej4rIJaSKs=)
                          2: 4D23A77E8E8F11EAB30DCA1AC4F9AE02.roa (hash: 0KyBtVxlmiU4yD9g8RswElbHQYxJyKsb4zJLZ1lp6S4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl
                          rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:34:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2604 (0xa2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122342, serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1
        Validity
            Not Before: Apr  4 19:34:12 2026 GMT
            Not After : Apr 11 19:34:12 2026 GMT
        Subject: CN=69d167b5-8b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bb:d9:a0:93:af:d6:10:43:91:60:d3:8d:ac:
                    ab:ef:c3:02:8d:3c:4d:c0:59:09:94:a5:d4:a3:91:
                    f1:c7:8f:7d:4c:56:d2:c1:f2:43:2e:30:43:dc:0e:
                    2b:5a:e2:1c:3e:70:b6:66:4e:d4:e3:72:4e:48:8d:
                    0e:71:30:0c:29:72:9d:13:65:f2:92:ed:e3:f7:04:
                    66:59:7d:dd:5a:02:9a:56:ce:9d:c3:eb:10:51:7e:
                    b8:3b:58:5c:8d:b1:b7:10:af:de:cd:a2:8c:f6:c6:
                    ac:a3:53:c4:5c:8e:5f:e2:c2:2c:00:d4:d0:31:05:
                    2c:6f:4a:b3:16:2d:b4:2a:70:34:c8:29:87:19:78:
                    04:d8:cd:25:f5:f9:5f:3f:89:f7:89:c3:97:c7:61:
                    2a:30:67:d6:af:ef:2d:6b:16:6f:17:94:ef:54:5e:
                    7d:31:b2:a7:39:8a:44:a0:16:f2:14:38:32:74:48:
                    ec:d8:39:82:79:d7:d4:2c:b1:77:e3:0a:b6:0e:00:
                    e3:32:13:3b:55:64:44:4f:8c:e0:05:d6:ce:0d:5e:
                    a9:62:d8:1e:66:a9:cb:dd:fa:69:ad:0d:35:d7:55:
                    bc:7c:cd:85:99:d9:42:8c:fa:9e:30:7a:61:82:9f:
                    58:1f:4a:14:2c:8c:9a:f0:d1:9d:77:f1:89:4a:3f:
                    71:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AB:77:E8:93:71:AC:C2:BB:5A:04:11:FD:76:99:84:74:D3:1F:9A
            X509v3 Authority Key Identifier:
                keyid:CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:42:de:da:36:dd:c8:c2:20:86:22:47:5d:af:1e:1f:e9:83:
         5c:4a:ae:fa:57:07:b0:4e:e1:4b:5c:94:10:6a:c4:e9:c7:15:
         94:e9:80:ad:8c:da:c5:a6:e1:a4:02:50:f5:65:9d:ec:1d:1f:
         eb:15:3e:c8:6a:65:0b:58:19:01:cc:e9:39:cf:20:49:b6:65:
         03:cf:0b:62:a1:b8:96:3a:cd:f1:74:6b:03:bd:42:ef:45:c4:
         00:e7:8c:49:61:0a:f7:40:ff:ac:99:81:8d:65:7f:6d:67:f8:
         33:ba:c5:7a:db:70:85:60:65:66:2a:e5:e7:fd:93:28:c0:3a:
         92:61:d6:bb:d9:a9:17:fd:86:52:06:ca:a6:f3:3e:65:33:89:
         8c:1c:95:dd:e1:4b:6a:e1:b9:64:f9:77:6b:a6:c8:43:ec:01:
         be:06:56:e2:2d:62:14:62:be:35:be:12:59:4a:e9:be:62:b8:
         31:8c:d5:b3:61:91:e2:eb:8c:49:dd:97:b2:a0:f6:6c:47:54:
         65:f8:aa:f1:f6:90:40:55:8e:29:42:bf:ca:81:a9:39:1e:01:
         f0:56:05:a5:b1:fc:2f:bb:01:8a:bf:0e:24:38:14:7b:c3:1e:
         16:78:18:9d:f0:60:f3:23:47:21:65:66:ac:48:ff:2b:7b:6e:
         7c:d2:5a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:48 2026 by rpki-client