Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
File:                     vY9TgeGI5FgPskcsJxoFQp4tXCI.mft (raw, json)
Hash identifier:          JePFzKMdkWxvWCZLKyWldW0YnUk9/MR2y/6WsGqSq+U=
Subject key identifier:   94:6B:82:FF:C4:7B:41:5C:A8:48:41:43:2F:E0:9D:A3:F0:F5:D7:3A
Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22
Certificate issuer:       /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22
Certificate serial:       1BA3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
Manifest number:          1B95
Signing time:             Sat 04 Apr 2026 16:10:17 +0000
Manifest this update:     Sat 04 Apr 2026 16:10:16 +0000
Manifest next update:     Sat 11 Apr 2026 16:10:16 +0000
Files and hashes:         1: vY9TgeGI5FgPskcsJxoFQp4tXCI.crl (hash: b8JbAldJ+ZikwKGh9uLgiEjARq2c8AEnC0rkuSoGozU=)
                          2: 59029A32233A11E78D48837AC4F9AE02.roa (hash: WIpg/C0+mdeSedmqfZ06RVv1H9xr5zVXBw6+Fs0Ejjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl
                          rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7075 (0x1ba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D66D, serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22
        Validity
            Not Before: Apr  4 16:10:16 2026 GMT
            Not After : Apr 11 16:10:16 2026 GMT
        Subject: CN=69d137e8-162c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:69:77:92:f9:9a:be:40:21:be:05:57:8d:f6:
                    84:73:38:95:00:aa:6c:6e:25:35:0b:5e:be:5e:c6:
                    3b:fc:f0:62:73:25:ba:b5:d6:0b:fc:de:58:24:4d:
                    2f:82:3f:a6:05:41:3d:bb:61:ee:b8:54:17:86:0a:
                    82:4f:93:09:1a:0e:e8:20:30:64:80:f2:cb:65:5a:
                    a4:c7:27:70:a9:96:a6:a9:c9:71:4c:39:bf:d7:31:
                    28:ee:7b:a9:7c:e2:cf:88:72:31:e5:4e:5a:3f:10:
                    11:af:af:e2:9e:1c:96:ec:b0:8c:18:6d:e9:6d:c1:
                    15:ce:d2:ba:3b:14:ff:d6:c5:d0:76:84:dc:ab:65:
                    55:cb:84:14:88:fe:23:12:07:2b:9a:de:5d:a2:ff:
                    74:c3:a2:9b:c1:91:cd:58:6b:14:5b:9a:33:d1:7d:
                    db:47:b6:17:11:ac:2a:82:8d:be:a3:fb:37:03:64:
                    fe:0a:c6:cb:cd:ea:da:b7:5d:79:9c:67:23:2b:4d:
                    1d:2b:8a:41:f4:17:c7:7a:54:e5:ca:e4:a2:ea:d7:
                    de:37:7a:95:b2:ca:b0:24:bd:76:60:ab:b6:b1:95:
                    86:ef:73:b4:72:5a:c9:58:54:7d:76:7c:e7:1a:4e:
                    4b:b5:9e:a5:7d:e1:f7:a5:50:8d:74:30:0c:ec:d6:
                    58:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6B:82:FF:C4:7B:41:5C:A8:48:41:43:2F:E0:9D:A3:F0:F5:D7:3A
            X509v3 Authority Key Identifier:
                keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:5e:ee:6f:6a:6d:d1:3a:70:eb:2f:0d:9c:97:8d:90:d3:d5:
         33:bd:95:61:5e:0b:d2:d5:50:f7:0e:01:5e:b4:9c:a4:57:65:
         78:f5:25:d2:70:e1:60:75:e3:c9:14:16:a0:57:f5:df:0f:3e:
         9e:f4:f9:0d:85:60:f9:dd:01:cc:df:26:01:59:8b:3f:91:99:
         a4:57:00:3f:a1:d7:bc:f8:fb:4e:69:aa:35:b3:ad:bb:7f:6a:
         11:3f:85:ae:e0:df:85:ef:8a:b8:46:88:5e:91:ad:42:97:ce:
         30:24:1c:7c:6a:e4:a4:16:67:7f:fd:67:18:aa:4e:c0:9a:de:
         51:a0:e9:2e:85:85:20:af:89:7f:b6:c3:3c:96:f6:cb:c7:94:
         3b:d6:64:e6:a1:57:22:88:65:16:08:3b:8f:24:ad:06:89:13:
         ba:67:5a:e5:3a:f8:2b:97:ec:22:c8:d0:9d:12:70:75:71:78:
         04:be:e6:fe:f9:3b:04:b3:fc:e6:05:35:9f:da:de:b5:f5:57:
         b4:13:eb:ae:d7:e9:46:dd:d9:a6:ca:29:68:73:35:af:8b:aa:
         dc:aa:59:a0:2d:e1:c3:55:bf:2f:67:2b:6c:07:f1:68:8c:dd:
         1e:bd:88:14:fb:84:43:9d:df:b0:d0:9d:d4:ab:8c:36:52:14:
         d5:91:f3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:30:30 2026 by rpki-client