Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft
File:                     Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft (raw, json)
Hash identifier:          Wkp47f5OYX8AGNMJugxL7hxVx8ZOlrlrLfHSHNZ8ilQ=
Subject key identifier:   C9:5D:62:4D:24:CE:3C:0E:07:DC:7C:36:F1:3E:36:B8:E6:DF:82:2E
Authority key identifier: 62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04
Certificate issuer:       /CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104
Certificate serial:       0CEA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft
Manifest number:          0CD7
Signing time:             Sat 04 Apr 2026 18:15:11 +0000
Manifest this update:     Sat 04 Apr 2026 18:15:11 +0000
Manifest next update:     Sat 11 Apr 2026 18:15:11 +0000
Files and hashes:         1: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl (hash: Q0Hdv/IRmNtWuhd5QtlyEXhHytUI+M1kWh6J6p9bl2c=)
                          2: EC7403A0B20711EFAADEFA2CC4F9AE02.roa (hash: Azg5yZbf5Y5bjwiFAjkue69nJWXBVYpeDFXI1xdKjfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl
                          rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3306 (0xcea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190FEA, serialNumber=627FA9960EA283AA239213CACD37504D2460A104
        Validity
            Not Before: Apr  4 18:15:11 2026 GMT
            Not After : Apr 11 18:15:11 2026 GMT
        Subject: CN=69d1552f-86dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:f2:9b:5f:9a:b3:48:7c:71:82:da:7b:95:
                    49:5d:e2:99:74:6e:d0:d1:7c:3d:b3:d3:ee:5c:d3:
                    ef:06:99:46:ef:97:67:1b:f4:99:cd:9e:3b:ae:86:
                    dc:eb:bb:28:b9:32:04:15:ce:87:9a:d2:fd:93:a2:
                    dc:ae:7d:d8:15:4d:00:0c:b9:eb:d7:f4:43:3f:fa:
                    85:58:27:c3:62:5d:ed:8c:1c:fd:5d:f5:94:ab:dc:
                    1f:da:36:fc:cb:1e:79:de:1d:eb:d8:79:86:39:e3:
                    48:8e:96:ce:ad:c7:52:e8:10:b8:31:bb:3e:30:59:
                    c1:45:3a:36:f5:55:cb:c5:aa:7c:74:6d:2c:57:1f:
                    b9:ef:6d:29:6b:a3:c5:8d:e2:01:77:3b:aa:18:30:
                    69:7e:41:53:9f:42:af:37:3b:19:c6:5d:7e:40:d4:
                    cd:5d:d8:76:c2:c4:1d:06:05:54:f8:d7:ce:72:4c:
                    e2:35:d9:b3:f3:43:30:4e:07:1b:ed:d2:af:5d:3f:
                    1d:14:d5:da:55:63:af:57:23:16:f9:54:57:e3:38:
                    4b:72:8a:fe:16:b3:06:21:7e:39:f9:63:f2:0f:a5:
                    3a:24:60:5f:76:f2:87:0c:f2:e1:95:4c:1b:7b:b0:
                    32:a7:f9:b9:76:34:11:fa:97:0f:3e:6b:a5:94:8e:
                    c1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5D:62:4D:24:CE:3C:0E:07:DC:7C:36:F1:3E:36:B8:E6:DF:82:2E
            X509v3 Authority Key Identifier:
                keyid:62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:0c:22:ce:79:41:33:69:8a:b3:cf:f9:23:3f:8a:32:e3:fa:
         d6:42:39:2a:1a:ec:53:82:87:c3:63:5b:a6:81:a2:f9:5a:40:
         ea:9c:5a:dc:9d:30:43:c9:da:92:fe:dd:a0:34:25:f5:62:bd:
         25:26:39:d9:d0:c6:37:9f:50:be:fb:1e:46:65:8e:bb:a9:0f:
         73:5e:f8:f1:40:d0:43:1f:16:90:82:ef:12:14:10:55:96:e2:
         86:46:6f:3d:e4:5f:2a:7f:e9:87:96:b4:ff:c4:47:0f:c3:71:
         0a:03:a7:80:b0:a7:81:bc:e9:5d:9c:40:e8:3b:80:5c:d4:58:
         38:a1:02:13:e0:3c:3b:aa:b7:c0:f4:25:12:f2:73:d0:b3:37:
         66:6a:11:14:99:b4:74:55:cf:86:2f:81:6a:18:a5:a9:d4:4e:
         7e:f5:42:5e:60:80:c6:1d:d7:8b:43:ad:bb:78:da:6e:53:1b:
         75:b3:3e:30:72:83:54:77:17:39:00:a3:fd:8b:81:ed:06:4f:
         91:4c:f4:f3:e8:a2:b1:4e:02:48:cd:29:9f:29:a5:ab:be:63:
         1b:04:a2:f3:9f:7c:fe:ef:b3:fe:34:30:e5:a5:bd:2f:f5:44:
         d0:06:56:6d:7e:f2:30:25:34:6c:50:e6:90:e3:7c:12:07:7f:
         ab:2c:68:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBGRUExMTAvBgNVBAUTKDYyN0ZBOTk2MEVBMjgzQUEyMzkyMTNDQUNEMzc1MDRE
MjQ2MEExMDQwHhcNMjYwNDA0MTgxNTExWhcNMjYwNDExMTgxNTExWjAYMRYwFAYD
VQQDEw02OWQxNTUyZi04NmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAttHym1+as0h8cYLae5VJXeKZdG7Q0Xw9s9PuXNPvBplG75dnG/SZzZ47robc
67souTIEFc6HmtL9k6Lcrn3YFU0ADLnr1/RDP/qFWCfDYl3tjBz9XfWUq9wf2jb8
yx553h3r2HmGOeNIjpbOrcdS6BC4Mbs+MFnBRTo29VXLxap8dG0sVx+5720pa6PF
jeIBdzuqGDBpfkFTn0KvNzsZxl1+QNTNXdh2wsQdBgVU+NfOckziNdmz80MwTgcb
7dKvXT8dFNXaVWOvVyMW+VRX4zhLcor+FrMGIX45+WPyD6U6JGBfdvKHDPLhlUwb
e7Ayp/m5djQR+pcPPmullI7BQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMldYk0k
zjwOB9x8NvE+Nrjm34IuMB8GA1UdIwQYMBaAFGJ/qZYOooOqI5ITys03UE0kYKEE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEZFQS8yNDBEQUNFQTBC
NzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2b2praFBLelRkUVRTUmdv
UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1luLXBsZzZpZzZvamtoUEt6VGRRVFNSZ29RUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MEZFQS8yNDBEQUNFQTBCNzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2
b2praFBLelRkUVRTUmdvUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHAwiznlBM2mKs8/5Iz+KMuP61kI5KhrsU4KHw2NbpoGi+VpA6pxa3J0wQ8na
kv7doDQl9WK9JSY52dDGN59QvvseRmWOu6kPc1748UDQQx8WkILvEhQQVZbihkZv
PeRfKn/ph5a0/8RHD8NxCgOngLCngbzpXZxA6DuAXNRYOKECE+A8O6q3wPQlEvJz
0LM3ZmoRFJm0dFXPhi+BahilqdROfvVCXmCAxh3Xi0Otu3jablMbdbM+MHKDVHcX
OQCj/YuB7QZPkUz08+iisU4CSM0pnymlq75jGwSi8598/u+z/jQw5aW9L/VE0AZW
bX7yMCU0bFDmkON8Egd/qyxosg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:13:16 2026 by rpki-client