Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
File:                     yYWS4c0LLnYQyEsC5mHL8zb_r10.mft (raw, json)
Hash identifier:          SysjQ5iqo9eaz3LT/tkM+sQJSuRL108hxzLURIDu4Wc=
Subject key identifier:   3C:1C:59:26:55:49:79:8C:3D:B2:AE:7D:03:4A:93:BB:D8:BC:FE:85
Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D
Certificate issuer:       /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D
Certificate serial:       0886
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
Manifest number:          087E
Signing time:             Sat 04 Apr 2026 20:23:27 +0000
Manifest this update:     Sat 04 Apr 2026 20:23:26 +0000
Manifest next update:     Sat 11 Apr 2026 20:23:26 +0000
Files and hashes:         1: yYWS4c0LLnYQyEsC5mHL8zb_r10.crl (hash: gA+6wrKyu7nHykG+cmrKs/oAAiDTJKbx5M/R5tVrSLw=)
                          2: 789C2BD0ECCA11EAAE025C70C4F9AE02.roa (hash: 0TZ+IPVq2PyEH3z0mkv5wkypdQxnIpbwSO1lkLL1ZHU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl
                          rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182 (0x886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168E98, serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D
        Validity
            Not Before: Apr  4 20:23:26 2026 GMT
            Not After : Apr 11 20:23:26 2026 GMT
        Subject: CN=69d1733f-1907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:91:03:72:06:1e:16:ed:c8:90:90:c6:26:dd:
                    2e:23:0f:74:e7:0a:4c:c0:3c:aa:5b:b3:68:37:39:
                    8c:fb:61:8e:d5:85:33:fe:41:4c:cb:c6:ad:31:05:
                    e6:79:66:1b:a6:c2:78:0c:13:bb:5b:48:7b:f5:c7:
                    ac:9a:78:96:28:76:1b:64:95:73:bd:f1:49:f3:f1:
                    41:2f:e7:92:8c:51:b0:2a:20:44:8e:50:ae:9d:51:
                    9e:75:5d:f3:a0:5e:e5:f8:f8:9d:89:ef:7a:9b:de:
                    e3:b3:a4:94:28:78:9b:3b:5a:f3:e5:54:c7:9c:f2:
                    52:76:ff:95:6d:2b:d0:b7:f7:90:31:7c:df:23:39:
                    59:cb:f1:e7:23:ad:e4:63:c1:bd:e8:8f:2a:00:02:
                    98:33:7d:38:98:c5:ff:da:02:03:0e:6e:ec:ab:58:
                    c8:93:3e:69:1a:cc:ac:58:dd:b9:76:77:37:db:e5:
                    01:e7:14:92:02:70:66:b7:62:34:fc:e3:83:90:78:
                    b2:eb:38:af:5e:8f:8d:7e:44:cd:17:63:53:16:ea:
                    6a:15:86:3f:32:b6:52:c3:6d:dd:dd:2b:db:ab:88:
                    68:72:05:d8:0b:41:d4:ae:28:ff:f7:3e:db:e8:9a:
                    e9:ef:af:b5:3a:03:e3:c6:71:c3:14:cc:fb:53:fd:
                    1f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1C:59:26:55:49:79:8C:3D:B2:AE:7D:03:4A:93:BB:D8:BC:FE:85
            X509v3 Authority Key Identifier:
                keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2d:37:fe:5d:b9:b9:b3:62:cb:36:c9:22:3f:d6:d2:03:39:
         ea:6d:af:fc:e2:68:4f:d5:ba:46:1d:d7:c4:d1:97:0e:29:83:
         a1:17:ca:10:ed:61:b0:ab:74:99:8a:02:fb:1c:76:fe:63:79:
         47:2c:99:92:b8:ee:27:f0:c8:89:43:ef:96:db:39:97:db:ed:
         29:3a:65:a9:da:21:e5:8a:af:0b:52:5f:50:75:0e:bb:84:b3:
         ca:7b:aa:46:a8:3e:c6:cb:45:43:eb:04:21:2c:d3:a5:6f:fd:
         f2:5c:f4:ff:b8:bc:8e:64:72:f5:bc:b8:94:02:bf:1a:8f:86:
         57:98:36:8a:a7:02:cf:9a:f8:bc:8f:68:0d:d3:e9:8d:65:64:
         88:52:e4:bf:c2:9a:53:c9:3a:64:40:f7:fc:7e:cc:7a:2c:93:
         9c:e7:42:da:e6:61:48:ca:00:fc:bd:b2:6b:19:23:0f:30:8c:
         01:52:f0:0f:50:c9:d0:51:e8:8d:24:47:8c:a1:41:31:34:4f:
         45:43:de:e1:11:f4:a5:8f:d5:93:74:72:70:ea:a3:88:b6:f5:
         1b:fe:29:2d:57:e0:5d:5a:f8:21:b7:09:f3:c6:95:ec:32:b7:
         a0:64:78:29:b6:76:21:d9:c0:bf:36:30:87:7f:11:f0:a1:c7:
         b5:65:af:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:50 2026 by rpki-client