Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
File:                     ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft (raw, json)
Hash identifier:          jELpKl0oM7+hE71mY6NByHGfhJeGnKYaFyR0QAFni0k=
Subject key identifier:   9B:38:DD:50:A1:43:25:F9:40:83:48:2D:2D:69:D2:C4:FD:54:B6:EB
Authority key identifier: CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14
Certificate issuer:       /CN=A915C645/serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
Manifest number:          0123
Signing time:             Sun 05 Apr 2026 05:10:34 +0000
Manifest this update:     Sun 05 Apr 2026 05:10:33 +0000
Manifest next update:     Sun 12 Apr 2026 05:10:33 +0000
Files and hashes:         1: ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl (hash: dTpzJ6yl+oAZbfX1wxlhoE2dY0Nz1WKV+NJyx0FpItg=)
                          2: 86998830806F11EF91F9E57CC4F9AE02.roa (hash: 1GRip7NQnd6QQ1qm7v8jCcLgM1fnAudwCzVQRzqvkLc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl
                          rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C645, serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814
        Validity
            Not Before: Apr  5 05:10:33 2026 GMT
            Not After : Apr 12 05:10:33 2026 GMT
        Subject: CN=69d1eeca-820a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9c:f2:f2:dc:5a:fa:ce:a6:fe:a2:77:96:af:
                    b8:33:49:ea:a8:59:f8:de:d1:1d:70:c5:8f:81:ad:
                    e3:7d:19:85:f6:e4:4a:b1:c1:4a:a7:3d:b1:a8:de:
                    e7:62:4b:e5:82:d5:de:d7:79:54:56:83:30:9c:88:
                    a2:69:1c:c1:93:40:67:03:0c:60:64:49:15:b2:a8:
                    0e:fd:18:bd:66:ed:05:00:7d:89:4c:1c:ab:6d:5c:
                    55:10:64:de:89:7c:0e:34:12:78:74:91:f5:1c:7f:
                    f1:91:cd:0d:96:08:c5:3c:7c:df:01:b4:09:9e:18:
                    95:6c:4f:35:ce:50:0c:25:29:32:00:7b:22:2c:a8:
                    34:6f:1a:47:cb:14:25:34:c1:95:09:0b:3e:1e:87:
                    45:73:fb:4d:a6:2f:25:ca:f1:7b:51:ec:48:0c:0f:
                    a1:9c:17:91:3b:da:3f:0e:f7:01:ec:12:89:c3:3c:
                    a2:d5:98:82:26:f4:d5:9c:ff:0c:8c:4e:6b:6d:f9:
                    be:97:a0:3d:b3:a6:cf:61:5a:4c:8f:fc:80:e6:60:
                    db:12:eb:42:ca:d3:66:d2:25:12:d3:fb:6b:a9:f2:
                    49:55:45:93:66:af:bd:60:fb:5c:1e:32:96:5b:b4:
                    f3:f6:e0:3c:a9:6d:d3:7b:43:13:30:31:df:0b:81:
                    54:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:38:DD:50:A1:43:25:F9:40:83:48:2D:2D:69:D2:C4:FD:54:B6:EB
            X509v3 Authority Key Identifier:
                keyid:CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5e:ef:29:76:8f:b5:8d:fc:86:35:fc:0a:5d:9e:7a:22:4d:
         d4:5b:47:80:49:fa:ba:1c:b3:a8:a5:07:a9:93:9d:03:e8:48:
         e1:b0:fc:06:42:18:a1:10:c6:a0:b8:c0:fd:e6:b7:d4:f4:e0:
         11:8e:1e:57:3b:75:f5:80:29:80:0e:e8:89:87:7a:ec:69:26:
         95:08:ca:5b:8a:b3:e1:a5:88:b4:e3:6b:fa:dc:1e:fc:c5:36:
         00:3f:f3:8f:51:9f:11:39:66:fe:bc:b2:03:f5:ea:50:53:f3:
         9d:b1:17:de:14:e7:b2:c6:c7:5f:74:2a:cf:ea:31:0f:3a:f3:
         2d:4f:c6:c6:ec:4b:f2:1c:c4:50:38:e7:04:27:98:38:24:c3:
         b4:b2:07:ea:cb:b2:72:73:2e:2a:2c:4d:47:37:e2:5e:f1:74:
         2e:6d:32:0e:68:1b:17:3b:bb:3a:d5:ce:da:1e:d2:df:30:82:
         89:92:15:f4:8f:71:2e:7d:f0:56:bd:89:10:57:31:76:ca:08:
         a7:66:70:aa:63:ef:de:ba:76:b1:bc:70:fc:ae:ee:b1:75:27:
         40:c4:10:0f:55:6a:73:72:d0:7e:04:ef:da:1c:13:ac:b4:99:
         96:52:e6:d6:48:19:3b:91:f5:da:7c:22:39:17:11:f7:63:a7:
         b0:f0:ab:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:05:31 2026 by rpki-client