Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
File:                     YhmdhUkwna_yWfpPdr5svUb3VDA.mft (raw, json)
Hash identifier:          812gI1PbROvDBx9FK/KdzwYFd1dUfabtqNsDNXmQl0Y=
Subject key identifier:   F0:1E:77:F1:0F:D5:DB:42:70:C1:E7:FF:31:D0:A6:9C:40:D5:75:99
Authority key identifier: 62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
Certificate issuer:       /CN=A9147A12/serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
Manifest number:          37
Signing time:             Fri 17 Apr 2026 08:16:27 +0000
Manifest this update:     Fri 17 Apr 2026 08:16:27 +0000
Manifest next update:     Fri 24 Apr 2026 08:16:27 +0000
Files and hashes:         1: YhmdhUkwna_yWfpPdr5svUb3VDA.crl (hash: zOWH+Bc1tvlffv5uHqdQtenaAOy3seDH9eFyWnjrE7o=)
                          2: 7C0561D8F10111F088AEA117476F56BC.roa (hash: tZCMHU0FsD0B7efnDx5vqTfypD0ywjof7SVcOsAh5iE=)
                          3: 8CCD4284ECEB11F08F189C11746F56BC.roa (hash: B9wwelihVNbWqG3EWwGK+ZW8jF7M6pX43MoH5Y0lk+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl
                          rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147A12, serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
        Validity
            Not Before: Apr 17 08:16:27 2026 GMT
            Not After : Apr 24 08:16:27 2026 GMT
        Subject: CN=69e1ec5b-a97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:86:c6:22:f2:70:2b:70:01:af:6e:d4:e5:
                    f2:0f:3c:04:34:ed:75:5b:de:52:a0:11:a6:7e:c1:
                    83:17:b4:da:ca:1e:00:2d:35:41:d2:a5:8b:27:cb:
                    20:55:e0:5e:86:a7:74:6c:f3:fb:e3:05:53:e8:56:
                    18:a3:79:49:0b:1e:f4:e6:fa:8b:b4:03:4c:22:34:
                    48:51:21:51:d9:45:56:98:36:3c:ac:8c:a2:96:07:
                    a5:fb:bb:34:1c:0c:2d:c5:e8:5a:77:4e:2e:e9:44:
                    42:c9:e3:a0:8b:8f:7d:73:90:3c:fc:73:33:27:d3:
                    ea:42:12:af:df:85:f8:86:cd:02:ec:de:fb:32:c7:
                    fe:10:36:df:7a:22:ed:7d:35:d1:29:fe:a4:ae:ce:
                    ed:8c:d1:61:19:76:af:50:fd:cb:43:43:09:b0:6c:
                    fb:0a:e2:3b:07:97:5a:92:e3:6d:6f:cb:0d:41:af:
                    78:b4:36:68:d2:e1:29:49:43:a6:7c:af:c7:43:48:
                    01:64:3b:47:e6:cb:86:77:0e:b2:6e:ec:b9:a3:07:
                    7c:0e:7b:af:c5:be:b7:b5:81:3c:4e:1e:bd:c7:ad:
                    31:b6:58:28:ab:cc:f8:90:ae:03:1d:63:25:21:7e:
                    1a:bc:e8:b3:1e:47:d8:0b:00:75:9d:0b:b4:73:36:
                    11:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1E:77:F1:0F:D5:DB:42:70:C1:E7:FF:31:D0:A6:9C:40:D5:75:99
            X509v3 Authority Key Identifier:
                keyid:62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:75:42:23:13:6b:44:28:f6:98:3d:fd:c5:55:b5:55:ee:c4:
         b2:4e:7f:e2:96:a8:f6:7f:9b:35:34:f9:f0:0a:6b:a7:7c:29:
         cb:3b:0f:f4:52:7b:eb:a4:44:f5:00:75:92:6c:bc:b6:78:b2:
         e0:6a:3a:4d:e0:d7:a1:26:85:4c:9e:48:9e:0f:16:80:5b:96:
         42:c7:aa:d5:80:4e:c3:bd:ad:c7:37:e4:46:c2:4b:5a:06:54:
         50:bb:b7:7f:95:38:b7:dc:16:fd:76:91:19:a6:1e:f4:27:fb:
         f6:aa:5c:1c:a2:d8:aa:a7:1b:43:34:dd:c7:47:72:18:93:6b:
         b1:0c:95:ed:99:52:67:0f:3c:71:0e:d4:30:2e:82:32:47:64:
         2c:a2:cc:4c:b0:da:25:b3:93:35:22:67:3a:02:e7:49:72:c1:
         74:8e:b0:40:d7:51:d6:ab:e6:26:0a:47:d9:c1:1b:e2:ed:82:
         49:4c:86:6a:c5:c0:ed:53:b4:b7:fb:b7:00:f2:2e:c1:17:b2:
         55:2d:86:18:3d:5d:30:19:94:22:3c:cd:ac:77:ef:cd:ec:83:
         92:cb:fc:fb:e1:e9:6f:f9:ee:81:00:ab:91:f3:21:b3:c9:ea:
         41:9f:de:8c:5a:17:11:23:af:b3:1a:1b:3e:60:c2:79:f8:c8:
         d0:58:a5:a9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
N0ExMjExMC8GA1UEBRMoNjIxOTlEODU0OTMwOURBRkYyNTlGQTRGNzZCRTZDQkQ0
NkY3NTQzMDAeFw0yNjA0MTcwODE2MjdaFw0yNjA0MjQwODE2MjdaMBgxFjAUBgNV
BAMTDTY5ZTFlYzViLWE5N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEFIbGIvJwK3ABr27U5fIPPAQ07XVb3lKgEaZ+wYMXtNrKHgAtNUHSpYsnyyBV
4F6Gp3Rs8/vjBVPoVhijeUkLHvTm+ou0A0wiNEhRIVHZRVaYNjysjKKWB6X7uzQc
DC3F6Fp3Ti7pRELJ46CLj31zkDz8czMn0+pCEq/fhfiGzQLs3vsyx/4QNt96Iu19
NdEp/qSuzu2M0WEZdq9Q/ctDQwmwbPsK4jsHl1qS421vyw1Br3i0NmjS4SlJQ6Z8
r8dDSAFkO0fmy4Z3DrJu7LmjB3wOe6/Fvre1gTxOHr3HrTG2WCirzPiQrgMdYyUh
fhq86LMeR9gLAHWdC7RzNhHrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8B538Q/V
20Jwwef/MdCmnEDVdZkwHwYDVR0jBBgwFoAUYhmdhUkwna/yWfpPdr5svUb3VDAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3QTEyL0UzQjEzQjZFRUNF
MTExRjBCNTM4QkE5QzcxNkY1NkJDL1lobWRoVWt3bmFfeVdmcFBkcjVzdlViM1ZE
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWWhtZGhVa3duYV95V2ZwUGRyNXN2VWIzVkRBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3
QTEyL0UzQjEzQjZFRUNFMTExRjBCNTM4QkE5QzcxNkY1NkJDL1lobWRoVWt3bmFf
eVdmcFBkcjVzdlViM1ZEQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBSdUIjE2tEKPaYPf3FVbVV7sSyTn/ilqj2f5s1NPnwCmunfCnLOw/0UnvrpET1
AHWSbLy2eLLgajpN4NehJoVMnkieDxaAW5ZCx6rVgE7Dva3HN+RGwktaBlRQu7d/
lTi33Bb9dpEZph70J/v2qlwcotiqpxtDNN3HR3IYk2uxDJXtmVJnDzxxDtQwLoIy
R2QsosxMsNols5M1Imc6AudJcsF0jrBA11HWq+YmCkfZwRvi7YJJTIZqxcDtU7S3
+7cA8i7BF7JVLYYYPV0wGZQiPM2sd+/N7IOSy/z74elv+e6BAKuR8yGzyepBn96M
WhcRI6+zGhs+YMJ5+MjQWKWp
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:56 2026 by rpki-client