Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
File:                     yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft (raw, json)
Hash identifier:          V6uZ5vQGhtCKOOSFSoDnxen9AjryeHzPKIgEk18JeSg=
Subject key identifier:   75:72:5B:F2:7A:B7:EB:03:2E:01:E7:A8:E3:46:92:50:6E:FC:0D:40
Authority key identifier: CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF
Certificate issuer:       /CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
Manifest number:          0167
Signing time:             Sun 05 Apr 2026 04:17:37 +0000
Manifest this update:     Sun 05 Apr 2026 04:17:36 +0000
Manifest next update:     Sun 12 Apr 2026 04:17:36 +0000
Files and hashes:         1: yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl (hash: oC7qPlYmQTr2gnW6phIpU72ubHeXNPc5+vC1TQwskr4=)
                          2: F8636CC60F9D11EFA1E14343C4F9AE02.roa (hash: X4Op/fuW4L375YAqKPF9gb1HDQe8/nejgu/NPMQbeNw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl
                          rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153675, serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
        Validity
            Not Before: Apr  5 04:17:36 2026 GMT
            Not After : Apr 12 04:17:36 2026 GMT
        Subject: CN=69d1e260-8fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:06:d4:ba:f3:09:18:16:73:de:15:ab:a4:15:
                    c2:44:c1:75:b4:c3:21:4c:1d:26:03:6a:d6:f9:3f:
                    4a:b0:47:5f:13:18:8f:d8:8c:32:72:e3:c3:d2:c1:
                    b8:a7:cc:93:b1:29:25:de:f9:98:2e:70:b2:93:86:
                    c0:19:d5:74:f6:9e:d7:d1:da:18:9c:47:6f:7b:2e:
                    f9:62:e9:11:41:18:38:49:16:57:b5:e8:26:8a:91:
                    f3:e4:fb:53:16:2c:dd:24:e7:f7:06:15:4a:26:7d:
                    d5:88:fb:2c:5b:28:6c:de:d4:9d:5e:7e:a8:0c:29:
                    0f:d1:3e:94:72:d3:9c:b4:45:09:36:48:d7:e9:f0:
                    7b:9e:8e:23:74:c3:cd:d8:c6:09:e4:ea:1f:3b:7c:
                    ec:36:52:91:95:95:86:fc:f3:c9:58:f6:3f:d8:f5:
                    33:b2:4f:0c:7e:69:fe:b8:d6:4c:1c:29:0a:3b:83:
                    89:c0:85:a9:c4:73:67:24:0d:36:9d:7e:77:71:25:
                    6f:3a:b1:49:a8:30:48:12:0d:4a:26:a9:e5:e9:8f:
                    17:d5:76:b3:7d:4d:d0:2a:fe:ec:ff:d7:d6:d0:b5:
                    b8:5e:a7:48:dd:2d:35:8b:52:e8:28:ad:08:52:f3:
                    4b:06:3f:18:3b:49:07:d8:90:40:ec:e3:b9:5a:05:
                    01:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:72:5B:F2:7A:B7:EB:03:2E:01:E7:A8:E3:46:92:50:6E:FC:0D:40
            X509v3 Authority Key Identifier:
                keyid:CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:fe:3e:3b:02:25:f5:8c:79:bd:2d:79:9b:e5:c1:e2:32:56:
         05:6d:86:f6:e5:23:9d:3c:55:79:f9:b9:56:dd:52:18:28:bb:
         23:87:23:7b:1b:80:38:13:48:25:5c:be:9a:87:8a:2c:f9:e7:
         f4:94:88:a5:bf:7e:97:fb:6a:04:62:12:aa:ba:e9:83:ad:46:
         fe:6b:ba:de:1e:2b:e8:1a:b8:1b:04:27:94:99:95:1c:16:fe:
         c7:db:c9:b3:25:51:90:99:f9:dc:a3:01:f2:44:32:8a:c4:88:
         fc:9b:d9:46:95:be:08:ca:69:92:a9:32:67:a1:60:72:4f:ff:
         11:8d:be:1b:35:22:af:ad:37:bb:38:02:95:c4:28:a2:7f:85:
         08:eb:cc:c2:2a:78:7b:8f:d2:73:37:05:45:c6:f7:0e:a6:10:
         68:95:41:c0:9d:3f:a6:f4:79:ca:af:82:96:b8:fa:66:c1:56:
         51:db:90:03:d1:ef:f0:d6:3d:a3:15:47:97:c6:36:31:da:dd:
         e4:3b:d4:01:49:4d:29:4e:8d:26:a9:af:e0:6d:dd:04:4c:bf:
         f2:39:a2:7c:4e:93:f4:05:e4:b5:5b:58:bb:41:15:ac:72:c4:
         2d:67:49:a2:d4:51:6d:7e:16:60:f8:8a:74:c0:ba:24:48:5f:
         44:7f:df:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:52:13 2026 by rpki-client