Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
File:                     ybbzh3rMoIEu_42KP1wESgwwvIA.mft (raw, json)
Hash identifier:          G+E3gogWDGEqTZrkvF0cWmIaQvhlPQ9FJ1EjLsFASxs=
Subject key identifier:   9C:EC:95:76:DA:22:DE:73:D7:7F:CE:09:EC:C9:00:CB:51:DC:23:5D
Authority key identifier: C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80
Certificate issuer:       /CN=A91A77C2/serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
Certificate serial:       065F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
Manifest number:          0658
Signing time:             Sat 04 Apr 2026 22:26:16 +0000
Manifest this update:     Sat 04 Apr 2026 22:26:15 +0000
Manifest next update:     Sat 11 Apr 2026 22:26:15 +0000
Files and hashes:         1: ybbzh3rMoIEu_42KP1wESgwwvIA.crl (hash: PnPbtOSvPB2NK9gcroOt8T/DauDmzw12668VqF8+NK0=)
                          2: E5692882C63411EB9E5F5F30C4F9AE02.roa (hash: Bfub3yt6yxVtW1jhLiJdVPcr/N44DddSwKU3KzJPUtY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl
                          rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631 (0x65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A77C2, serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
        Validity
            Not Before: Apr  4 22:26:15 2026 GMT
            Not After : Apr 11 22:26:15 2026 GMT
        Subject: CN=69d19008-237c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:fb:ec:e2:ed:20:b5:4a:9b:ed:a3:9b:3b:
                    a0:ed:77:82:57:e8:79:97:3b:5f:3b:4e:a3:b8:1f:
                    7b:e9:65:b6:ef:58:f0:bb:f9:f5:82:05:30:66:e2:
                    9f:ee:e1:4e:8c:6a:18:c2:bb:37:79:10:b4:17:9f:
                    60:9c:be:24:8b:8b:18:6f:43:50:ce:5a:a3:34:4e:
                    18:1b:53:13:cf:f3:da:17:82:60:35:87:4d:c0:57:
                    35:49:6e:92:f6:ef:33:f6:3d:e5:a8:41:53:cc:ea:
                    33:35:c4:a9:68:42:4f:76:56:56:85:1c:47:7d:da:
                    e3:56:19:68:ac:8b:5e:10:cc:84:9d:ff:43:1c:ea:
                    9f:e0:b5:ca:91:8b:ae:3d:c8:61:2d:7b:73:15:4a:
                    7c:04:2e:a9:f2:7f:75:06:75:e9:12:d7:a7:27:52:
                    e7:32:19:40:58:cc:60:45:6d:54:ea:92:ab:9b:53:
                    ef:63:8e:65:4f:cf:84:c6:63:c4:e3:6e:d7:66:6b:
                    65:44:95:e8:9a:5d:47:2e:cb:a3:34:2a:e8:59:f4:
                    0b:03:80:c0:87:a9:05:6f:e7:28:ce:ce:8c:7b:5b:
                    ac:9d:02:82:ff:67:91:ce:3b:a0:30:19:40:8b:76:
                    12:6f:e6:7a:05:f7:b6:84:e1:fd:a5:4e:39:01:bf:
                    c7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EC:95:76:DA:22:DE:73:D7:7F:CE:09:EC:C9:00:CB:51:DC:23:5D
            X509v3 Authority Key Identifier:
                keyid:C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8b:4a:e0:38:24:d0:9e:bf:b3:78:bd:c1:44:dc:d7:af:4d:
         0a:ba:b7:cf:37:6e:16:d4:67:84:c5:a6:32:72:f6:21:9a:59:
         f5:3e:72:d4:4d:d2:47:af:4c:14:9b:70:48:a2:90:3c:12:98:
         8d:f1:96:98:55:5a:c4:84:88:07:46:b9:51:75:33:99:cf:35:
         ed:f2:3c:78:19:82:41:d1:6d:3b:80:87:8b:ed:14:df:1f:5e:
         96:93:e0:09:01:b9:af:76:e2:eb:84:db:ac:40:17:cc:45:64:
         6b:23:33:2b:ba:87:9d:32:95:bc:16:2d:7e:42:c0:93:40:95:
         9e:54:cc:86:aa:5f:e3:24:86:ff:30:c5:f1:ba:b8:ea:4a:cb:
         97:ef:0b:f6:49:33:ae:85:3b:ce:ad:a0:31:66:c4:1e:b6:3c:
         33:85:fa:09:42:fd:94:05:2f:6b:f5:75:47:26:43:d0:c2:da:
         a3:1c:4e:60:97:ba:56:da:6b:68:cc:6d:75:a2:92:bd:dc:02:
         88:b6:7f:14:78:03:6a:f0:1b:2d:19:94:6c:e0:4c:47:aa:0b:
         76:09:00:30:72:1b:01:c3:6d:a0:87:30:61:6a:ca:3c:76:b3:
         fd:f3:fe:ec:14:0f:0d:91:36:7b:94:d8:a4:d6:96:79:2e:0d:
         89:e2:82:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc3QzIxMTAvBgNVBAUTKEM5QjZGMzg3N0FDQ0EwODEyRUZGOEQ4QTNGNUMwNDRB
MEMzMEJDODAwHhcNMjYwNDA0MjIyNjE1WhcNMjYwNDExMjIyNjE1WjAYMRYwFAYD
VQQDEw02OWQxOTAwOC0yMzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAplb77OLtILVKm+2jmzug7XeCV+h5lztfO06juB976WW271jwu/n1ggUwZuKf
7uFOjGoYwrs3eRC0F59gnL4ki4sYb0NQzlqjNE4YG1MTz/PaF4JgNYdNwFc1SW6S
9u8z9j3lqEFTzOozNcSpaEJPdlZWhRxHfdrjVhlorIteEMyEnf9DHOqf4LXKkYuu
PchhLXtzFUp8BC6p8n91BnXpEtenJ1LnMhlAWMxgRW1U6pKrm1PvY45lT8+ExmPE
427XZmtlRJXoml1HLsujNCroWfQLA4DAh6kFb+cozs6Me1usnQKC/2eRzjugMBlA
i3YSb+Z6Bfe2hOH9pU45Ab/H6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzslXba
It5z13/OCezJAMtR3CNdMB8GA1UdIwQYMBaAFMm284d6zKCBLv+Nij9cBEoMMLyA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzdDMi8zRURBRDEwQ0M2
MzIxMUVCQUFENzRBMkVDNEY5QUUwMi95YmJ6aDNyTW9JRXVfNDJLUDF3RVNnd3d2
SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3liYnpoM3JNb0lFdV80MktQMXdFU2d3d3ZJQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NzdDMi8zRURBRDEwQ0M2MzIxMUVCQUFENzRBMkVDNEY5QUUwMi95YmJ6aDNyTW9J
RXVfNDJLUDF3RVNnd3d2SUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANotK4Dgk0J6/s3i9wUTc169NCrq3zzduFtRnhMWmMnL2IZpZ9T5y1E3SR69M
FJtwSKKQPBKYjfGWmFVaxISIB0a5UXUzmc817fI8eBmCQdFtO4CHi+0U3x9elpPg
CQG5r3bi64TbrEAXzEVkayMzK7qHnTKVvBYtfkLAk0CVnlTMhqpf4ySG/zDF8bq4
6krLl+8L9kkzroU7zq2gMWbEHrY8M4X6CUL9lAUva/V1RyZD0MLaoxxOYJe6Vtpr
aMxtdaKSvdwCiLZ/FHgDavAbLRmUbOBMR6oLdgkAMHIbAcNtoIcwYWrKPHaz/fP+
7BQPDZE2e5TYpNaWeS4NieKCtA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:52:10 2026 by rpki-client