Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
File:                     ycIPtAaIDHHcvabGs_umov85Kks.mft (raw, json)
Hash identifier:          iCAN52idxN78S/OeRH3EPWFaBZUvjkEL7VIOKw5J21s=
Subject key identifier:   EA:79:9F:A6:37:42:98:B2:B8:B6:44:12:66:9F:CF:6C:6E:8C:14:31
Authority key identifier: C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B
Certificate issuer:       /CN=A91B86F6/serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
Manifest number:          3C
Signing time:             Sun 05 Apr 2026 07:51:39 +0000
Manifest this update:     Sun 05 Apr 2026 07:51:39 +0000
Manifest next update:     Sun 12 Apr 2026 07:51:39 +0000
Files and hashes:         1: ycIPtAaIDHHcvabGs_umov85Kks.crl (hash: DnufutdRc6dEbpVzLSluQmES+8uDdOqnAUJVd2Pv2aM=)
                          2: 41E03246DA3E11F0A9D9994C8ED3641D.roa (hash: RSEIybSMpRGlyt7iVSAaODWDkzpxlz37Tk1zS8mwuzM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl
                          rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B86F6, serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
        Validity
            Not Before: Apr  5 07:51:39 2026 GMT
            Not After : Apr 12 07:51:39 2026 GMT
        Subject: CN=69d2148b-d363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:14:9a:23:ba:e7:ab:17:18:77:4a:36:5d:
                    5f:fc:92:e5:90:70:ce:f9:dc:24:db:7a:62:c2:1c:
                    e0:13:ea:d6:74:a1:6e:7c:ed:9c:6f:45:22:6c:8f:
                    f1:98:c0:fc:5e:c4:10:06:e2:f0:2b:41:2b:c5:e4:
                    c5:ef:7e:6a:05:0b:f4:bd:33:77:28:c8:38:f6:7a:
                    7c:a4:e0:84:a9:83:91:d7:7a:33:11:f5:f2:75:22:
                    9c:be:5b:96:4b:02:1a:59:b2:22:b4:56:29:c1:77:
                    c6:54:13:25:25:e3:e2:37:d8:35:cc:71:2e:ad:cb:
                    1e:ea:6e:b6:af:e6:7f:53:b1:31:15:55:7b:42:6f:
                    33:c1:75:be:53:c7:cb:d2:78:15:52:20:68:a9:05:
                    98:57:0c:31:40:49:92:2d:d3:7c:41:90:02:2c:d0:
                    08:87:f1:cc:7e:25:a8:96:0b:30:63:44:b4:a2:57:
                    e9:90:93:15:76:0c:80:28:e7:7f:4d:42:96:dd:e9:
                    5f:60:4b:3c:96:46:aa:ef:ac:f0:61:7a:31:1a:23:
                    dd:90:14:7a:4d:8b:12:c5:8a:7c:0c:b6:61:2d:66:
                    24:be:53:75:30:3f:f4:8c:1b:b5:38:16:77:41:35:
                    fa:23:d9:d1:2c:7d:cc:18:b4:cb:bf:b7:a3:38:31:
                    05:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:79:9F:A6:37:42:98:B2:B8:B6:44:12:66:9F:CF:6C:6E:8C:14:31
            X509v3 Authority Key Identifier:
                keyid:C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f0:c5:98:93:28:d2:26:fa:dc:eb:74:31:ac:9a:18:e8:18:
         ea:09:4c:8e:6c:2c:94:ed:2f:e3:13:a7:31:cd:8d:6e:bc:ac:
         ac:d2:85:81:06:45:f7:b3:94:11:bb:28:19:10:86:a9:06:9e:
         34:3f:c2:33:97:0c:d6:fc:98:11:02:34:5c:48:88:39:a5:17:
         66:23:c7:a4:c0:5a:ae:10:0b:a9:5b:13:ae:a6:4a:46:6b:2f:
         bd:05:c3:f0:0d:37:0c:d2:ea:19:e6:33:5c:18:9c:43:36:cc:
         2e:1b:eb:02:c4:6e:85:1f:52:df:1b:25:6c:fa:00:e5:8f:17:
         14:ff:73:73:e6:f3:b7:e9:58:95:c4:ce:ac:fd:30:7f:be:6c:
         b3:a0:72:1f:c5:f5:2e:3a:67:a3:12:23:8f:a5:a0:9b:00:06:
         b2:ee:81:61:7a:3f:4c:c1:2e:fc:7f:69:33:a1:99:2c:75:f1:
         68:1d:bf:64:c0:da:24:2e:d0:64:d4:d0:e9:1b:96:72:10:66:
         98:de:8e:49:1d:dd:44:1a:f6:f8:61:ed:82:59:23:e7:c8:5d:
         9f:e6:73:c4:a8:6d:76:7f:e7:bf:56:1e:3c:b2:d7:5e:72:a1:
         03:47:cc:45:94:82:73:34:ec:0d:f0:cd:96:fe:91:52:d3:88:
         4c:70:1d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:26 2026 by rpki-client