Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
File:                     YHYovkVe83m-Zq-dbKm6js3tPwQ.mft (raw, json)
Hash identifier:          2ZdX3+j0AbsxrcN5uvuBgyOhUQMpEJiOxp/b6Kuci3w=
Subject key identifier:   6D:96:68:79:0E:74:3E:B9:C2:51:C5:03:85:E2:58:61:97:35:CD:F1
Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04
Certificate issuer:       /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
Certificate serial:       01BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
Manifest number:          0C24
Signing time:             Sat 04 Apr 2026 19:53:59 +0000
Manifest this update:     Sat 04 Apr 2026 19:53:59 +0000
Manifest next update:     Sat 11 Apr 2026 19:53:59 +0000
Files and hashes:         1: YHYovkVe83m-Zq-dbKm6js3tPwQ.crl (hash: LRTUj3xdG9HPeQKQp1hwWILkmA7vKdEts2/GG81Kd2g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
        Validity
            Not Before: Apr  4 19:53:59 2026 GMT
            Not After : Apr 11 19:53:59 2026 GMT
        Subject: CN=69d16c57-fc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:95:18:46:b3:a4:31:03:c2:d8:53:45:aa:96:
                    10:6a:1d:5e:d9:85:56:10:3b:12:86:b9:59:7a:ad:
                    f2:a3:d7:b6:22:c9:93:11:14:76:65:03:cd:4f:78:
                    06:b7:f7:44:53:65:47:0b:00:73:b2:86:b5:fd:0e:
                    4b:53:ba:01:88:44:d9:63:6f:0d:ff:8a:3a:e6:4f:
                    9f:68:3f:45:2e:7f:2a:92:79:f2:60:9b:0a:c9:7a:
                    dd:cb:b6:2f:95:2a:2b:dc:6f:13:f0:4e:4c:98:65:
                    49:80:b5:0d:1f:0b:70:5a:b4:36:17:93:24:33:00:
                    80:4c:5d:7d:21:6a:e8:95:60:9e:da:32:e4:ba:cf:
                    f0:24:8d:7e:65:f1:e4:6b:e1:c0:0a:c2:dc:76:3e:
                    85:2a:d8:b0:2e:28:93:2b:bd:20:29:d7:09:0c:44:
                    86:5a:6b:76:31:62:10:46:d0:4b:60:b0:f1:62:e4:
                    57:2a:a7:b2:db:60:72:ff:de:53:5b:a8:85:bf:b4:
                    45:81:93:04:72:74:6c:88:d2:3f:80:f4:2a:db:ff:
                    af:0f:ae:5f:38:22:51:b1:82:68:95:ac:ca:d5:02:
                    26:97:f3:98:36:65:77:ba:00:3d:f6:4f:4c:cc:bb:
                    2e:2b:86:21:06:82:c5:84:13:f3:21:e8:aa:ea:70:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:96:68:79:0E:74:3E:B9:C2:51:C5:03:85:E2:58:61:97:35:CD:F1
            X509v3 Authority Key Identifier:
                keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:57:8d:35:8e:71:8e:53:e6:b9:e8:50:61:a8:20:86:4e:38:
         d4:b3:f2:66:54:99:18:fe:8e:6a:b0:1d:50:09:66:31:1f:d3:
         92:3c:9f:b4:8a:aa:11:47:81:d8:de:d6:06:78:83:fd:92:52:
         44:9e:0a:15:c6:c3:e4:29:4a:73:5e:b7:0a:81:6d:ac:29:9b:
         05:52:15:0a:e1:6b:2f:dc:6f:75:be:58:3c:44:2f:b9:93:9d:
         07:88:4b:ee:0e:d0:4d:43:d5:4c:81:21:38:29:21:33:06:c2:
         2b:c9:99:f0:ac:27:80:53:19:7c:ae:7e:98:bd:69:e3:10:08:
         bc:5a:45:6c:01:0f:f5:87:2e:68:75:a0:66:7a:63:74:77:d1:
         16:97:da:38:5b:dd:41:a0:6d:d1:a6:f5:da:e9:97:28:0e:bb:
         f9:60:d3:f6:a5:c2:fb:2a:93:a1:70:0d:fc:c8:31:ad:72:e5:
         b0:0a:fe:3b:09:9c:a2:42:8c:11:93:79:c7:6d:5c:ef:04:74:
         6e:b2:e6:1c:ee:74:05:d2:5e:e1:c0:ce:0b:eb:cf:40:6f:f2:
         5a:bb:85:75:e5:df:c4:07:a5:db:01:8a:46:b7:ec:3c:cf:74:
         01:97:e0:ab:47:42:38:47:af:6d:99:eb:72:87:9b:86:bd:cb:
         10:14:a3:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE3RTYxMTAvBgNVBAUTKDYwNzYyOEJFNDU1RUYzNzlCRTY2QUY5RDZDQTlCQThF
Q0RFRDNGMDQwHhcNMjYwNDA0MTk1MzU5WhcNMjYwNDExMTk1MzU5WjAYMRYwFAYD
VQQDEw02OWQxNmM1Ny1mYzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoZUYRrOkMQPC2FNFqpYQah1e2YVWEDsShrlZeq3yo9e2IsmTERR2ZQPNT3gG
t/dEU2VHCwBzsoa1/Q5LU7oBiETZY28N/4o65k+faD9FLn8qknnyYJsKyXrdy7Yv
lSor3G8T8E5MmGVJgLUNHwtwWrQ2F5MkMwCATF19IWrolWCe2jLkus/wJI1+ZfHk
a+HACsLcdj6FKtiwLiiTK70gKdcJDESGWmt2MWIQRtBLYLDxYuRXKqey22By/95T
W6iFv7RFgZMEcnRsiNI/gPQq2/+vD65fOCJRsYJolazK1QIml/OYNmV3ugA99k9M
zLsuK4YhBoLFhBPzIeiq6nDg9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2WaHkO
dD65wlHFA4XiWGGXNc3xMB8GA1UdIwQYMBaAFGB2KL5FXvN5vmavnWypuo7N7T8E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTdFNi81NTc0MEU3MEIz
QjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgzbS1acS1kYkttNmpzM3RQ
d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lIWW92a1ZlODNtLVpxLWRiS202anMzdFB3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTdFNi81NTc0MEU3MEIzQjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgz
bS1acS1kYkttNmpzM3RQd1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGleNNY5xjlPmuehQYagghk441LPyZlSZGP6OarAdUAlmMR/TkjyftIqqEUeB
2N7WBniD/ZJSRJ4KFcbD5ClKc163CoFtrCmbBVIVCuFrL9xvdb5YPEQvuZOdB4hL
7g7QTUPVTIEhOCkhMwbCK8mZ8KwngFMZfK5+mL1p4xAIvFpFbAEP9YcuaHWgZnpj
dHfRFpfaOFvdQaBt0ab12umXKA67+WDT9qXC+yqToXAN/MgxrXLlsAr+OwmcokKM
EZN5x21c7wR0brLmHO50BdJe4cDOC+vPQG/yWruFdeXfxAel2wGKRrfsPM90AZfg
q0dCOEevbZnrcoebhr3LEBSjCQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:17 2026 by rpki-client