Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
File:                     yUpKujMViTObRlHAW5L_4BvLNMk.mft (raw, json)
Hash identifier:          JeGvuLxweeuFo2O1L5KRT62I8vNLn34T0yKBQqWydMM=
Subject key identifier:   9C:A1:32:FC:21:FD:3E:42:AA:07:B5:6A:95:EB:A4:E8:EC:CF:94:71
Authority key identifier: C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9
Certificate issuer:       /CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9
Certificate serial:       01CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
Manifest number:          01C5
Signing time:             Sun 05 Apr 2026 03:16:03 +0000
Manifest this update:     Sun 05 Apr 2026 03:16:02 +0000
Manifest next update:     Sun 12 Apr 2026 03:16:02 +0000
Files and hashes:         1: yUpKujMViTObRlHAW5L_4BvLNMk.crl (hash: YKBIn6g1LVNMTBA5sF0L/xnpLKmmPII+ty/jKM6BwWk=)
                          2: 3863960C7E0311EE8BCA7D33C4F9AE02.roa (hash: KgGijW2soQRzCpn/hhV4Vag0nXvvNHm3EmDe2YvYSfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl
                          rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187E23, serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9
        Validity
            Not Before: Apr  5 03:16:02 2026 GMT
            Not After : Apr 12 03:16:02 2026 GMT
        Subject: CN=69d1d3f3-b2aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4c:e8:17:dd:7e:78:c5:aa:3f:cc:bc:f1:51:
                    06:5e:53:6a:80:c7:97:b5:c5:33:cc:2a:f7:13:25:
                    f8:e1:57:02:89:2a:2c:01:91:55:76:23:13:0d:dc:
                    db:4b:04:c1:7e:62:aa:10:f9:10:0b:cb:d4:5f:50:
                    82:84:49:82:d5:df:5d:a6:54:44:a6:73:fa:47:8e:
                    40:2d:7b:9e:8d:ff:19:04:67:fb:ce:96:9d:87:f1:
                    9e:d3:f1:2e:44:4b:0e:e7:00:58:cd:55:a8:2f:6b:
                    5b:89:91:81:3f:17:62:0f:24:84:ac:62:7a:73:6a:
                    76:c8:72:6d:8a:0a:5c:16:ce:6b:48:81:6f:cf:71:
                    9b:cf:b1:cd:0a:90:3c:e1:cd:38:0a:e9:94:7e:e2:
                    8c:3c:b4:8a:a4:71:ee:af:10:7f:b8:45:c0:6a:2c:
                    cf:e5:30:0b:50:48:06:02:54:e0:64:9c:ff:5f:b4:
                    30:4f:02:0b:51:4b:00:d4:b2:79:d9:54:4e:85:3d:
                    aa:b6:98:75:1f:73:5d:cd:b2:02:ee:bd:b1:d1:90:
                    73:6a:9c:3b:23:6d:50:5d:49:0d:9b:f6:04:12:b7:
                    ac:22:79:35:7d:cc:2b:99:77:dd:d4:c1:68:14:a0:
                    69:7f:65:60:05:78:e0:fd:96:bb:25:f9:d0:3d:c8:
                    17:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A1:32:FC:21:FD:3E:42:AA:07:B5:6A:95:EB:A4:E8:EC:CF:94:71
            X509v3 Authority Key Identifier:
                keyid:C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ba:74:06:89:12:07:cc:53:b1:8e:79:8c:07:c2:87:11:33:
         8e:c2:78:e0:46:ce:75:2d:d3:81:8a:43:60:83:15:5e:52:c6:
         53:20:a5:15:66:7f:22:a7:2a:1e:22:c2:08:ce:99:23:5d:6c:
         01:ad:2e:45:6e:18:0f:80:5a:2b:8f:fa:2e:c5:2d:51:4d:68:
         7b:91:32:f4:13:51:eb:f3:a8:71:6e:9d:02:55:27:fe:b5:bc:
         7f:ed:5f:6c:3f:9f:aa:22:34:a8:c2:a9:91:9e:76:b8:7f:ff:
         d3:a1:60:65:80:78:99:1e:ce:8e:cc:ec:02:af:43:f9:bb:ac:
         fd:79:2e:ef:d5:c5:2d:02:07:45:ea:ae:b7:5a:94:85:ee:b2:
         25:fb:a0:ae:52:5f:63:fd:80:85:03:42:8d:a1:02:9c:22:c2:
         93:d8:f5:b3:08:73:c0:3f:64:0b:9e:76:c4:be:4d:54:47:4e:
         15:9a:18:62:ae:9a:03:26:5f:f1:5d:07:e3:aa:ac:ad:0b:db:
         75:54:54:1e:83:0e:13:d3:1e:fd:9f:45:ff:d8:a4:2a:ae:64:
         87:03:16:a5:ab:53:e9:ab:f5:fe:84:36:37:77:98:88:8e:29:
         43:bb:c7:3b:5f:9f:bb:bf:00:8b:c4:21:58:98:99:e8:89:03:
         52:20:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:02 2026 by rpki-client