Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/Yewaa4pOxxLD0XuRX-mFLyhkFnk.mft
File:                     Yewaa4pOxxLD0XuRX-mFLyhkFnk.mft (raw, json)
Hash identifier:          xdyktoiuOwPPM1U1QLGJJYEB4cjh9kd4LX1LxLk2Gwc=
Subject key identifier:   9F:7A:D5:FF:6C:2F:09:18:A8:83:94:4B:92:17:C4:94:63:3C:1A:0B
Authority key identifier: 61:EC:1A:6B:8A:4E:C7:12:C3:D1:7B:91:5F:E9:85:2F:28:64:16:79
Certificate issuer:       /CN=A9181375/serialNumber=61EC1A6B8A4EC712C3D17B915FE9852F28641679
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Yewaa4pOxxLD0XuRX-mFLyhkFnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/Yewaa4pOxxLD0XuRX-mFLyhkFnk.mft
Manifest number:          1A
Signing time:             Tue 21 Apr 2026 04:39:37 +0000
Manifest this update:     Tue 21 Apr 2026 04:39:36 +0000
Manifest next update:     Tue 28 Apr 2026 04:39:36 +0000
Files and hashes:         1: Yewaa4pOxxLD0XuRX-mFLyhkFnk.crl (hash: zRctI26fu15ImO9+nDOKGA0uXs6sYcyq7s6V+HrepJw=)
                          2: 6DF7303E323E11F1B86DA8DBAB833773.roa (hash: MdrLW8ywMVq5tsi7jv5uczK1ifHiOQnmNab/XIHfwz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/Yewaa4pOxxLD0XuRX-mFLyhkFnk.crl
                          rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/Yewaa4pOxxLD0XuRX-mFLyhkFnk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Yewaa4pOxxLD0XuRX-mFLyhkFnk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 04:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181375, serialNumber=61EC1A6B8A4EC712C3D17B915FE9852F28641679
        Validity
            Not Before: Apr 21 04:39:36 2026 GMT
            Not After : Apr 28 04:39:36 2026 GMT
        Subject: CN=69e6ff89-366b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:86:e4:32:a9:10:c1:a7:0c:c4:64:b5:a2:
                    55:5d:56:a6:e6:c2:b3:cc:ca:0e:42:4f:bd:a7:52:
                    e7:a5:71:8f:98:d9:e8:63:56:a4:bd:55:d0:2d:46:
                    2e:34:bf:ea:c7:50:25:bb:f7:7a:64:be:89:4c:60:
                    a4:1f:c4:07:73:c1:64:83:27:c8:f2:fc:d9:87:90:
                    63:48:25:a2:cd:19:e3:02:15:f9:eb:68:55:64:f4:
                    d2:ef:27:b3:97:5a:a7:f3:87:2a:f9:d1:c5:f9:1c:
                    f6:f1:b7:5f:07:e6:16:b3:4a:6a:cb:8f:15:84:ac:
                    b9:1c:cc:b0:05:5c:be:2d:85:93:aa:44:5b:35:83:
                    af:7f:12:7b:c9:8c:99:24:92:81:4e:94:1f:a3:28:
                    95:f3:aa:9b:61:68:e0:2d:8e:2b:fa:c3:bd:76:f2:
                    fe:ab:b7:d4:88:a1:2e:7c:4c:00:79:54:f2:d7:81:
                    fd:34:d7:3a:9d:bb:c9:42:2e:12:39:d1:2e:e2:03:
                    0b:8e:4c:0e:9f:24:c9:03:e4:3e:2f:d3:5c:77:aa:
                    09:46:37:31:bd:aa:2e:73:d7:19:c1:98:e1:b2:22:
                    9b:e9:4f:eb:8b:bc:97:09:5a:a0:54:d2:dd:75:56:
                    82:29:72:1e:91:96:42:b0:d2:f7:ba:15:0f:dd:e2:
                    5e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7A:D5:FF:6C:2F:09:18:A8:83:94:4B:92:17:C4:94:63:3C:1A:0B
            X509v3 Authority Key Identifier:
                keyid:61:EC:1A:6B:8A:4E:C7:12:C3:D1:7B:91:5F:E9:85:2F:28:64:16:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/Yewaa4pOxxLD0XuRX-mFLyhkFnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Yewaa4pOxxLD0XuRX-mFLyhkFnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/871E17E0184811F187D54B24B7EE528E/Yewaa4pOxxLD0XuRX-mFLyhkFnk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3e:3f:7e:95:7e:fc:d7:cb:aa:c6:c6:71:82:a9:de:e3:dd:
         b7:db:83:3c:24:24:72:9e:39:d1:43:1c:af:c9:ed:0d:03:b2:
         dd:e6:5e:33:cd:e7:2b:56:8f:81:eb:92:19:59:db:c3:54:d4:
         17:48:3b:cd:2a:12:13:25:39:b9:00:ce:dc:45:8c:3d:bc:06:
         0f:bc:cf:74:76:ca:8a:3a:94:6f:f2:61:5d:ca:28:2d:f8:a2:
         35:d5:10:48:35:29:8e:ce:45:c2:2e:67:af:a9:43:f9:19:98:
         02:13:73:03:bd:39:b7:0a:29:58:37:3d:81:66:54:c6:80:b3:
         0c:c2:42:99:22:2b:47:3b:ce:ec:2b:9d:86:db:ba:52:14:b0:
         33:52:1a:6a:ee:38:95:a7:e2:3f:4d:23:84:aa:85:29:fc:12:
         ba:69:04:fd:9d:f3:6f:96:d2:22:1f:74:96:b5:45:60:7b:ce:
         88:84:f7:63:e2:3b:bc:d8:30:bc:97:92:6e:1b:43:42:45:d7:
         55:c3:92:92:d4:56:73:c5:2e:ba:3f:13:b8:ad:40:9a:f9:1c:
         6c:59:68:fe:f0:29:ae:88:a5:76:47:b0:ed:9e:21:4e:76:ed:
         6c:05:84:58:75:10:97:97:89:e9:7c:d7:81:7b:ec:c3:8e:14:
         72:03:0a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:40:39 2026 by rpki-client