Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
File:                     YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft (raw, json)
Hash identifier:          HfuT+7vUk5FtTPybVePVlReQAvwLgTXNd8LhwT88Tmo=
Subject key identifier:   D2:10:9F:56:03:C1:07:0A:05:E3:06:26:5E:0D:C9:39:E1:38:8C:A3
Authority key identifier: 63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
Certificate issuer:       /CN=A9144C70/serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
Manifest number:          0597
Signing time:             Sun 05 Apr 2026 00:11:14 +0000
Manifest this update:     Sun 05 Apr 2026 00:11:13 +0000
Manifest next update:     Sun 12 Apr 2026 00:11:13 +0000
Files and hashes:         1: YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl (hash: vr25YlcvhHLC96vKuvSszJtgUQNVdAwN++juYHM7AR0=)
                          2: 2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa (hash: Qj7+4DVUCuo+XKpk6kPAWlDfbi1GJFCenpHteTcWifg=)
                          3: B39CC5D0999C11F0B916112DC4F9AE02.roa (hash: G79QDfoI4Z2O2HdywLlewm1mSw0BHbCZUp009tKKDn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl
                          rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144C70, serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
        Validity
            Not Before: Apr  5 00:11:13 2026 GMT
            Not After : Apr 12 00:11:13 2026 GMT
        Subject: CN=69d1a8a2-8ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:56:cd:cb:e0:07:ac:a8:b7:f1:f2:cc:c5:77:
                    78:b2:62:29:96:a1:86:8e:71:53:5b:34:99:5a:1d:
                    13:60:50:83:f5:f8:59:1b:73:f6:05:84:96:8c:de:
                    a3:ce:a5:2e:26:8f:a7:c9:7a:5f:ea:94:60:0f:5d:
                    03:cc:b8:db:7c:05:17:90:49:d3:9b:dd:92:10:de:
                    2e:5c:ac:27:dc:c5:04:55:ba:48:f8:48:f7:47:05:
                    4b:c8:b6:4b:63:3f:a2:aa:04:31:c5:1d:0a:ed:74:
                    40:b8:5c:b1:79:ea:7e:49:dd:e7:ce:bb:31:1d:76:
                    c1:37:7d:02:40:34:c6:23:ac:3c:59:28:61:99:c8:
                    29:f6:6e:d7:31:7f:21:d8:2b:69:67:db:12:b5:3f:
                    2b:d6:7d:bb:e3:72:79:19:4b:fd:df:b0:b1:c1:95:
                    64:52:7d:15:6a:07:b5:b9:b1:70:ec:77:f6:32:80:
                    e7:38:c0:78:46:84:35:fc:8a:0a:3c:e6:bb:9b:1e:
                    a4:0c:33:41:57:a6:85:50:6b:e7:1e:dd:6e:7e:7d:
                    5b:72:1f:1c:46:75:e9:00:32:bd:27:c3:3b:b4:13:
                    c7:1b:de:ce:5e:7d:94:3d:c3:b4:ce:7f:76:3b:f1:
                    76:cf:bb:e4:2b:1e:d9:22:38:45:6d:a0:3a:a2:aa:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:10:9F:56:03:C1:07:0A:05:E3:06:26:5E:0D:C9:39:E1:38:8C:A3
            X509v3 Authority Key Identifier:
                keyid:63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:89:44:87:34:9f:3c:ed:7d:02:60:0b:55:51:0c:8a:d4:b6:
         12:5c:dc:d0:99:a9:a7:fd:4c:0a:2b:d3:2f:57:82:35:c6:32:
         a7:d7:ce:61:25:f2:79:4e:21:32:15:76:c0:9d:ac:e2:22:2e:
         13:ba:05:49:eb:9b:f5:f2:bf:ce:df:e7:40:da:6d:92:ea:b8:
         b4:f4:28:22:72:ac:8e:53:61:fa:f4:14:4f:9d:0f:cc:7c:d0:
         09:98:1a:73:32:d8:52:f5:3e:12:70:c9:56:b5:5f:a8:69:99:
         ba:6d:8f:8f:c2:40:76:5f:b8:0d:95:6f:08:01:48:ca:a1:38:
         b6:00:6c:9a:11:9e:76:57:8d:99:c5:4e:09:ca:0d:99:0e:b1:
         8a:b7:92:c0:22:d2:ce:b1:3a:43:c2:e5:9b:73:12:ea:05:bc:
         24:94:05:3b:e1:02:9a:9c:6a:59:19:cd:ad:df:29:51:6d:5d:
         95:21:df:b6:84:1f:c7:40:2d:28:8f:4b:4c:bc:16:e1:1d:b5:
         e7:d3:27:8a:a2:7e:65:89:a4:8e:38:93:8d:6c:55:bd:0a:44:
         6d:f1:36:51:a5:31:d4:3f:c8:f9:1f:9b:50:ac:4e:0c:61:ae:
         8f:12:c9:69:1c:b1:c8:a4:4f:3c:21:5d:b2:ec:0f:47:e4:12:
         bd:52:cc:6f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NEM3MDExMC8GA1UEBRMoNjMyM0U1NkNEOTkyQUI4RkNFMzg3NTMxNUFFNjFBQzVF
NDcxQUNCRDAeFw0yNjA0MDUwMDExMTNaFw0yNjA0MTIwMDExMTNaMBgxFjAUBgNV
BAMTDTY5ZDFhOGEyLThhYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbVs3L4AesqLfx8szFd3iyYimWoYaOcVNbNJlaHRNgUIP1+Fkbc/YFhJaM3qPO
pS4mj6fJel/qlGAPXQPMuNt8BReQSdOb3ZIQ3i5crCfcxQRVukj4SPdHBUvItktj
P6KqBDHFHQrtdEC4XLF56n5J3efOuzEddsE3fQJANMYjrDxZKGGZyCn2btcxfyHY
K2ln2xK1PyvWfbvjcnkZS/3fsLHBlWRSfRVqB7W5sXDsd/YygOc4wHhGhDX8igo8
5rubHqQMM0FXpoVQa+ce3W5+fVtyHxxGdekAMr0nwzu0E8cb3s5efZQ9w7TOf3Y7
8XbPu+QrHtkiOEVtoDqiqhYxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0hCfVgPB
BwoF4wYmXg3JOeE4jKMwHwYDVR0jBBgwFoAUYyPlbNmSq4/OOHUxWuYaxeRxrL0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0QzcwLzgyQkM4NEVFQUM2
NzExRUNCNzVDREEyNEM0RjlBRTAyL1l5UGxiTm1TcTRfT09IVXhXdVlheGVSeHJM
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWXlQbGJObVNxNF9PT0hVeFd1WWF4ZVJ4ckwwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0
QzcwLzgyQkM4NEVFQUM2NzExRUNCNzVDREEyNEM0RjlBRTAyL1l5UGxiTm1TcTRf
T09IVXhXdVlheGVSeHJMMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAtiUSHNJ887X0CYAtVUQyK1LYSXNzQmamn/UwKK9MvV4I1xjKn185hJfJ5TiEy
FXbAnaziIi4TugVJ65v18r/O3+dA2m2S6ri09CgicqyOU2H69BRPnQ/MfNAJmBpz
MthS9T4ScMlWtV+oaZm6bY+PwkB2X7gNlW8IAUjKoTi2AGyaEZ52V42ZxU4Jyg2Z
DrGKt5LAItLOsTpDwuWbcxLqBbwklAU74QKanGpZGc2t3ylRbV2VId+2hB/HQC0o
j0tMvBbhHbXn0yeKon5liaSOOJONbFW9CkRt8TZRpTHUP8j5H5tQrE4MYa6PEslp
HLHIpE88IV2y7A9H5BK9Usxv
-----END CERTIFICATE-----
Generated at Mon Apr 6 10:09:33 2026 by rpki-client