Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
File:                     ry1FO-u_318ptjrBZ1THjRsPy4g.mft (raw, json)
Hash identifier:          TWWoLq+nsN65RrMPippbfATj7wj8TuikXx5KKO+6Wtw=
Subject key identifier:   52:1F:A2:F1:2D:E0:70:84:9E:50:5A:04:45:F0:22:1E:79:7E:75:08
Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
Certificate issuer:       /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
Certificate serial:       0CFC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
Manifest number:          0CF0
Signing time:             Sat 18 Apr 2026 18:06:50 +0000
Manifest this update:     Sat 18 Apr 2026 18:06:49 +0000
Manifest next update:     Sat 25 Apr 2026 18:06:49 +0000
Files and hashes:         1: ry1FO-u_318ptjrBZ1THjRsPy4g.crl (hash: N1HCYX2OTN4TuTOizFVSw4SFpbLOLS5KUx9qKmKUkOU=)
                          2: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (hash: Rdzf+qY0rc3ljoOiOxZKwXFF+npaW6qfoR/HzxroHsY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl
                          rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3324 (0xcfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91557BA, serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
        Validity
            Not Before: Apr 18 18:06:49 2026 GMT
            Not After : Apr 25 18:06:49 2026 GMT
        Subject: CN=69e3c839-fab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:38:bc:97:3e:d1:43:89:34:66:31:6f:fd:fe:
                    35:5e:ea:5f:63:f1:fb:ea:0d:80:67:10:f5:05:c3:
                    01:8b:3e:45:08:44:14:91:dd:55:4d:68:66:89:5e:
                    d3:a2:3a:f2:80:2b:49:28:26:5b:5a:6d:1e:88:3a:
                    7a:e3:7d:da:58:ec:e0:6d:d7:69:22:2e:cb:d8:d0:
                    d5:6c:c0:62:70:3f:4e:02:e2:2d:ed:9a:cb:93:f9:
                    86:f4:c5:ac:60:0b:f9:29:fc:bc:a9:c6:e2:e2:b8:
                    98:fa:da:6e:76:27:81:78:9e:15:24:98:ba:2d:39:
                    74:eb:e6:45:05:98:a0:ee:57:02:8a:23:79:35:44:
                    24:ad:bb:5c:c9:5d:df:5d:62:ce:f8:ab:13:37:35:
                    87:f2:ab:51:98:48:2b:d4:12:c9:96:72:68:c0:78:
                    2a:00:df:90:5e:5c:f3:aa:14:ac:e2:e2:65:aa:d0:
                    61:45:74:b5:d1:46:1e:13:df:1a:79:7c:d8:58:79:
                    7b:c7:10:af:c9:7e:36:bd:f5:07:a3:e6:5b:59:b9:
                    5d:ae:d1:4b:ab:e0:69:be:f8:c1:ed:75:2c:b3:0e:
                    23:c5:93:5f:f7:3d:66:9a:90:5a:b3:77:3c:7b:95:
                    ce:74:29:e0:df:a1:38:a5:9a:9a:c9:29:34:65:73:
                    e6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1F:A2:F1:2D:E0:70:84:9E:50:5A:04:45:F0:22:1E:79:7E:75:08
            X509v3 Authority Key Identifier:
                keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:72:6c:63:bc:8d:91:e7:97:a9:5a:38:00:92:e5:2f:aa:a9:
         c5:ac:d6:e2:ad:7b:ef:4f:10:ab:87:34:46:4b:c4:61:3f:40:
         e9:37:cb:3b:bd:3c:e1:91:81:3d:4c:ea:87:f4:31:52:f2:8e:
         fd:7d:e9:fa:1c:4e:48:8d:3c:2c:19:7d:e7:f8:86:47:63:29:
         8e:58:a6:63:4e:b5:81:25:c7:d0:b3:55:ed:e7:20:e3:5a:30:
         9c:c7:b1:e3:e1:eb:cf:68:69:50:23:6a:63:3d:f4:4b:13:04:
         e2:ab:3f:02:96:09:1b:6c:62:f1:4f:b3:26:d7:db:a9:14:cb:
         56:67:97:8c:04:03:9e:77:a8:82:ee:28:a7:b0:f6:0a:7e:f8:
         83:64:af:bc:19:3b:9b:81:96:02:e5:21:77:eb:f8:9c:28:62:
         a1:55:62:bb:9c:0d:df:b2:b3:3d:03:86:ef:d7:d8:69:ba:f8:
         b0:aa:b3:4c:40:d3:54:35:a3:a9:68:3f:64:9e:2d:e5:91:6b:
         c3:b9:f4:f7:c9:3c:8b:d7:1c:dc:34:06:48:ed:51:5a:0d:75:
         a8:13:72:bd:f3:b2:a6:55:5d:89:dd:03:f2:c5:e0:d2:ad:aa:
         71:97:a5:b3:c2:ac:51:e1:33:9a:a8:36:4f:eb:b1:fd:f2:91:
         a6:bc:2a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:40 2026 by rpki-client