Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
File:                     YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft (raw, json)
Hash identifier:          jIleirB+R1jHVwk9NDTgjExDk7ror+g3VcpEAuPZqms=
Subject key identifier:   29:1F:F6:E4:C8:58:DE:73:4D:C8:EB:3E:2F:5F:02:39:8C:EA:E9:73
Authority key identifier: 61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40
Certificate issuer:       /CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
Manifest number:          013D
Signing time:             Sun 05 Apr 2026 04:48:49 +0000
Manifest this update:     Sun 05 Apr 2026 04:48:49 +0000
Manifest next update:     Sun 12 Apr 2026 04:48:49 +0000
Files and hashes:         1: YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl (hash: 8CE3TNIJsHUpOGi6tAtqI8LKJu1h6BD90OpA0c9i6+w=)
                          2: 9A826D9059D611EF814F004DC4F9AE02.roa (hash: HZDNvMXF2Ddy6vd2h5W5yFnu+C+QnMlW7ipSlMoj5As=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl
                          rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F7F0, serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
        Validity
            Not Before: Apr  5 04:48:49 2026 GMT
            Not After : Apr 12 04:48:49 2026 GMT
        Subject: CN=69d1e9b1-88b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8f:ff:88:3a:32:70:3b:de:0a:e1:c6:3b:82:
                    36:e2:7f:25:99:51:ff:f6:f3:68:8c:86:a0:2c:30:
                    e1:2c:dc:5c:a3:19:fd:6d:dc:8a:bf:38:44:ab:1d:
                    da:8e:55:9e:72:fa:77:9c:dd:16:fa:e5:1c:71:54:
                    76:3e:50:28:61:b0:4f:8c:dc:b2:73:f7:e7:e4:2c:
                    f6:4c:21:c6:00:1c:e1:82:76:df:81:67:91:b7:4c:
                    a9:5d:49:35:95:1a:a9:10:dd:32:ca:af:0b:2c:0d:
                    e2:9b:b6:c0:b4:84:ec:60:b8:db:04:c2:1d:ec:c4:
                    c2:bc:63:86:6c:6a:d1:f4:a7:91:13:80:f2:89:8a:
                    37:9e:2f:b1:ea:f0:6d:f0:00:72:3c:d2:dc:f9:e4:
                    2f:cc:fa:70:d1:ba:c4:75:fd:c3:3c:fc:70:77:e5:
                    59:73:f2:4c:08:76:98:6b:cf:b0:4b:04:3f:63:68:
                    fc:6d:7d:ee:32:4d:6a:35:8d:3f:6f:95:ed:04:0e:
                    cd:9d:00:48:e8:29:f5:eb:e0:cc:a6:06:55:a8:74:
                    87:f8:28:83:ee:ae:e2:2b:17:ad:34:4b:9a:37:7c:
                    2c:e3:55:22:67:b1:00:ef:68:c9:24:44:3a:e7:31:
                    50:61:0e:16:e9:93:08:bf:ee:c9:60:a4:26:34:c4:
                    53:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1F:F6:E4:C8:58:DE:73:4D:C8:EB:3E:2F:5F:02:39:8C:EA:E9:73
            X509v3 Authority Key Identifier:
                keyid:61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4a:c3:ca:14:1d:23:99:17:33:e6:59:04:06:c0:9e:55:67:
         f1:bc:69:c5:1c:23:01:31:eb:64:db:6b:6d:4b:bd:b0:ec:fe:
         c8:7a:18:b5:fd:f7:0b:38:4d:81:f7:f5:08:9d:3b:77:50:74:
         62:7f:6d:4c:66:4e:e8:33:2e:9a:88:90:05:a6:b7:b9:49:0a:
         e1:66:02:b1:f0:bd:30:b2:1a:78:c0:3c:1a:ec:37:bc:1b:c0:
         00:2c:cf:05:1f:e2:4f:a1:db:c1:8f:30:5b:7c:4e:ee:f3:b7:
         a2:82:18:46:d4:8e:4a:77:6d:e2:d6:5a:78:bd:15:15:2f:73:
         fa:74:69:78:ad:e5:2e:d1:5f:50:28:d1:02:48:51:b5:15:06:
         7f:4e:30:29:70:04:e7:46:3d:2f:79:40:02:97:1e:f6:74:90:
         06:38:82:67:c1:2c:d5:d0:96:b0:ed:dd:18:d8:3b:d3:13:f3:
         ec:88:94:92:b1:1f:d1:95:17:2d:ac:95:3d:61:cb:ca:13:e2:
         14:1a:3f:6f:81:95:f8:44:1d:59:72:00:d1:2c:d5:bc:9e:e2:
         44:f6:62:a9:0a:e8:0f:f0:8d:ae:12:fb:b1:20:69:5d:7f:6b:
         21:e0:65:4c:4e:89:f4:09:03:e7:ec:6e:f8:76:48:86:d6:0f:
         72:47:99:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:51 2026 by rpki-client