Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft
File:                     yukPRsIh0AstoIB61MSwZQM3Q0Q.mft (raw, json)
Hash identifier:          gZc1vAQ/NBHrn/Qv0UFr7x8uqq1h/y+Sfv0WW74QB6M=
Subject key identifier:   E3:31:E0:58:E5:D1:72:66:AD:B0:FC:0B:7C:2E:9C:35:69:87:0F:B8
Authority key identifier: CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44
Certificate issuer:       /CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344
Certificate serial:       01A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft
Manifest number:          01A3
Signing time:             Sun 05 Apr 2026 03:38:32 +0000
Manifest this update:     Sun 05 Apr 2026 03:38:31 +0000
Manifest next update:     Sun 12 Apr 2026 03:38:31 +0000
Files and hashes:         1: yukPRsIh0AstoIB61MSwZQM3Q0Q.crl (hash: 8PYR4j83KL8WOzntdA3r4UjZNz6ynA9FSnIO7+KHTgs=)
                          2: 40F782C8B4AA11EEB330C137C4F9AE02.roa (hash: IvRWmE6+mjTb8POgLSJTClOjuqFSP0R7sU/me4/1UO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl
                          rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:38:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148526, serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344
        Validity
            Not Before: Apr  5 03:38:31 2026 GMT
            Not After : Apr 12 03:38:31 2026 GMT
        Subject: CN=69d1d938-b29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bf:b7:64:fc:7a:58:1a:1e:11:e4:62:b7:5c:
                    78:4e:af:fc:b2:b1:88:b2:34:58:5e:4b:90:87:bc:
                    7e:0f:54:0d:83:10:e9:68:aa:c3:a3:ef:ad:2c:c4:
                    b8:c9:f3:3f:14:d1:7d:7b:a1:60:12:c3:b3:ee:40:
                    ac:52:bc:7b:a1:a6:5f:94:80:0d:8d:ce:06:0f:bc:
                    95:9a:b0:c9:3e:f6:46:28:17:d8:6d:9d:b4:78:13:
                    4d:43:42:81:e0:de:99:9a:f3:0b:e5:4b:c7:69:51:
                    55:9d:f9:4e:de:17:81:37:c1:0a:0c:a6:b0:20:9e:
                    6f:9d:75:78:63:ce:3b:09:af:61:c8:a5:01:9e:7a:
                    1e:2e:bd:42:0f:26:49:33:e5:8a:b9:df:55:ac:97:
                    7f:79:42:29:02:cf:28:05:5c:7c:98:15:8c:e4:64:
                    9b:8a:e4:2e:63:f9:97:f9:0d:9b:64:84:d3:d4:3b:
                    28:65:7f:f9:c6:c3:4f:e7:d9:a2:40:55:11:41:58:
                    c8:8a:24:e7:9c:4d:a2:0a:8b:ac:b2:34:8b:ab:85:
                    c4:72:a9:39:00:cc:ad:01:4d:42:aa:41:98:7a:87:
                    f8:35:dc:60:8f:11:25:a3:26:0b:96:18:43:c3:f7:
                    9e:18:5a:cd:a8:52:51:49:f3:8c:8e:88:d8:24:7b:
                    99:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:31:E0:58:E5:D1:72:66:AD:B0:FC:0B:7C:2E:9C:35:69:87:0F:B8
            X509v3 Authority Key Identifier:
                keyid:CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:9f:fd:18:4d:90:eb:a1:90:93:ab:99:4a:f2:c6:98:35:69:
         96:5c:93:2e:da:bb:91:36:8b:82:56:83:f1:fc:01:d9:b7:67:
         dd:99:d8:9c:67:1b:f1:ce:e9:7d:4a:d3:06:15:eb:a8:69:17:
         81:fc:67:b8:93:e7:ea:df:ba:48:da:19:ac:75:a2:8f:5e:ec:
         c1:3f:4d:13:37:d3:77:b2:68:ec:b3:a6:8e:e5:79:37:01:11:
         f9:24:77:d9:5c:6a:20:af:cc:4f:0c:76:9d:dd:ac:d5:e9:cf:
         b3:a7:8e:c7:e3:0a:3a:2e:4d:6d:3b:10:79:2f:aa:6c:9b:ea:
         18:cd:5b:99:9d:7a:89:fe:aa:45:4b:82:b9:4e:9d:60:74:e5:
         31:ea:5d:e8:17:a4:83:4f:a7:09:fd:ee:f1:5e:76:4a:74:d2:
         78:35:35:ea:bd:0e:94:1e:23:79:de:5f:cb:03:1c:4a:d7:b3:
         17:b3:7a:a3:7d:22:71:d0:38:93:1b:31:65:99:74:61:f1:78:
         66:08:9c:f5:7a:8c:fa:90:e6:81:6c:69:ee:b8:13:b2:9d:aa:
         1f:9c:e4:1a:b2:d4:64:52:44:4d:c3:15:37:5a:fc:7f:07:2a:
         04:9e:54:b7:30:b7:ed:d3:1d:76:90:4e:89:a5:02:2f:ae:9f:
         26:68:32:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:32 2026 by rpki-client