Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
File:                     YiOr1va2e6_v4-c2Rv16ZuECFL4.mft (raw, json)
Hash identifier:          hxm+uzJa1JJSZbaiyTitc8k2tncYst5Xdv0u30bGIrM=
Subject key identifier:   6E:B4:AD:75:0E:8E:30:01:17:F8:41:DA:EC:15:46:BC:89:FD:AA:4B
Authority key identifier: 62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
Certificate issuer:       /CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
Manifest number:          0168
Signing time:             Sun 05 Apr 2026 04:18:04 +0000
Manifest this update:     Sun 05 Apr 2026 04:18:03 +0000
Manifest next update:     Sun 12 Apr 2026 04:18:03 +0000
Files and hashes:         1: YiOr1va2e6_v4-c2Rv16ZuECFL4.crl (hash: avsd2V3gMre6XXcHn7o/IOZywKnUbGLn0Qirf8TnxY8=)
                          2: 878615B88D3211EF9E092384C4F9AE02.roa (hash: +Oriw3lUJw94Q18jNkVCiDGs/4UmxApuASFaCH+rWfE=)
                          3: A937C2200FA511EFBDB06936C4F9AE02.roa (hash: g2XOcezvQ7KxIm645xlMyxErFktIXV60RTFqR5uY2Hw=)
                          4: 884A59828D3211EF9E092384C4F9AE02.roa (hash: 6cl4hRPCA+MAEDHJqAR36U+3vHDUJ12lZhGnjQOUElU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
                          rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176FD9, serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
        Validity
            Not Before: Apr  5 04:18:03 2026 GMT
            Not After : Apr 12 04:18:03 2026 GMT
        Subject: CN=69d1e27c-fbde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b8:03:8e:62:99:c6:f0:be:bb:f8:1e:07:d1:
                    76:08:cc:f8:b8:f8:d9:87:bc:95:70:70:98:a3:bd:
                    45:bc:22:a6:8d:0a:4c:3f:7d:07:b5:12:b3:11:ee:
                    d2:5b:1d:d9:93:1c:28:85:f7:49:33:f5:dc:04:39:
                    ac:79:64:c2:68:a4:df:32:8d:01:2d:23:f7:e1:47:
                    a7:e2:6f:d5:0f:89:fc:f3:2c:e8:bf:38:58:3c:11:
                    29:29:71:d0:e4:5f:ef:c8:fe:e7:2e:67:f3:74:8e:
                    a4:e3:cc:46:32:94:3d:4e:02:d1:29:d6:04:9e:51:
                    76:04:89:36:30:69:35:7c:b3:c7:6c:64:de:23:26:
                    8d:70:90:84:c4:d5:44:b3:9b:b1:26:b6:d7:7d:b3:
                    ac:57:bb:f5:66:fc:d9:98:35:fc:42:cb:0d:f2:75:
                    8d:ce:63:fc:3f:c8:94:c2:13:79:a9:56:2d:9b:d7:
                    26:da:b2:05:5e:d8:32:bb:5f:ce:1d:a1:43:b6:f0:
                    06:c5:5b:a1:48:63:fe:45:73:eb:b3:9a:74:2a:c2:
                    c0:96:c3:d4:64:72:23:ac:a4:66:c0:61:3d:58:7d:
                    d9:4c:12:1d:de:de:ad:16:29:da:d0:a1:50:f3:9e:
                    58:05:b6:1f:9c:1e:90:c7:f1:5e:fb:23:f4:6e:bb:
                    20:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B4:AD:75:0E:8E:30:01:17:F8:41:DA:EC:15:46:BC:89:FD:AA:4B
            X509v3 Authority Key Identifier:
                keyid:62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:75:1e:da:37:0b:f8:93:fe:01:2d:ec:7c:84:c5:78:0d:ee:
         a2:88:fb:45:cf:17:e8:a9:c9:fb:dc:80:05:e0:f5:7b:96:ec:
         a3:5f:43:ae:c5:48:4d:90:1d:d0:72:60:b7:90:67:10:dd:75:
         61:72:1a:ff:70:b8:ed:72:f1:f7:46:d1:84:62:23:52:8f:c2:
         1d:8e:3a:1d:84:2f:d8:ba:93:11:55:d2:7d:57:02:7e:47:ec:
         e8:8e:8a:1d:4c:00:ce:88:f7:de:3c:bd:08:7f:49:76:62:51:
         4f:58:d6:3d:04:06:4a:21:9d:8a:bd:ce:19:e6:6b:10:ed:a9:
         07:08:65:cd:df:ae:63:ae:a0:22:0a:17:49:7d:09:93:84:a2:
         a5:f9:51:71:fd:82:8d:23:eb:77:30:e0:66:25:4b:e1:e8:fa:
         20:52:dd:40:79:f4:30:88:38:b3:9b:11:59:ba:0f:f8:3d:b4:
         7c:50:e5:25:c1:8f:e4:09:a4:f6:94:ef:28:e2:b0:f6:3d:ed:
         58:1b:47:1f:3e:58:0c:b3:df:9c:e3:51:45:83:1f:84:2b:65:
         ea:28:d0:4d:77:18:84:3a:1c:7b:a2:7b:4b:e4:ab:a3:1b:87:
         41:4b:c9:c1:ee:d4:ff:76:ed:23:18:ed:cc:b9:5a:74:be:d5:
         1e:0c:a3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:18 2026 by rpki-client