Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
File:                     Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft (raw, json)
Hash identifier:          1BLrCWMt+RiSXx94AzeVuXwT4Lh2hYuVyriD9owi2gU=
Subject key identifier:   0D:16:CF:45:C0:6C:93:52:8A:4E:4F:25:EB:BA:72:19:A1:6B:C7:5E
Authority key identifier: 63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C
Certificate issuer:       /CN=A91C15F2/serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C
Certificate serial:       0690
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
Manifest number:          0684
Signing time:             Sat 04 Apr 2026 22:18:26 +0000
Manifest this update:     Sat 04 Apr 2026 22:18:26 +0000
Manifest next update:     Sat 11 Apr 2026 22:18:26 +0000
Files and hashes:         1: Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl (hash: dik7jEL++dXgli47ZWh6hdhLkjEux3NKYqcsMp2G8JM=)
                          2: C8AE3C40B93811EBAC80A46DC4F9AE02.roa (hash: 1mbzzSgNt8PbQ4g3ytun+iVzC+s6rXhERemAXDwVlkg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl
                          rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1680 (0x690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C15F2, serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C
        Validity
            Not Before: Apr  4 22:18:26 2026 GMT
            Not After : Apr 11 22:18:26 2026 GMT
        Subject: CN=69d18e32-55f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:79:12:77:e6:a2:48:96:f9:28:e8:50:26:40:
                    47:da:40:ac:f7:43:75:d6:5e:0b:94:39:94:26:9c:
                    82:40:7e:49:b2:39:b7:d0:e9:3a:07:ed:a4:52:e6:
                    a9:d9:c4:7d:37:f9:6a:3c:3b:97:72:ae:24:76:3c:
                    a4:59:0a:7e:72:85:d7:99:40:0e:2e:a6:41:65:50:
                    eb:7c:a5:a3:e3:db:3b:c3:4c:c9:98:0f:e6:e9:76:
                    d1:5b:bb:d3:d3:9c:27:e1:2b:70:4b:43:e4:80:51:
                    3a:2b:f1:1d:79:fd:b6:d5:29:68:d8:9f:49:ba:bc:
                    72:27:85:b8:f8:bd:05:83:a8:33:98:a9:71:a5:34:
                    05:a4:79:b8:2a:a7:30:a1:84:28:bd:68:40:0f:5f:
                    38:7b:82:b0:ab:6f:fd:bb:42:22:79:6d:06:d5:df:
                    46:62:e5:d2:47:ac:d6:61:d6:08:9f:06:2e:09:d6:
                    d6:bd:63:f1:93:04:12:1b:1c:bc:d4:52:c7:4c:21:
                    cc:36:a7:a3:d4:86:43:b9:b1:3f:c5:4e:87:2d:be:
                    90:4c:d5:3d:da:cb:30:5e:05:78:d2:a6:48:74:b8:
                    e7:d1:e7:64:10:b6:73:f8:b4:e5:ea:f7:ed:58:77:
                    0b:75:10:78:ee:f4:11:3b:1f:3a:7b:67:74:5e:67:
                    83:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:16:CF:45:C0:6C:93:52:8A:4E:4F:25:EB:BA:72:19:A1:6B:C7:5E
            X509v3 Authority Key Identifier:
                keyid:63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e4:bf:15:4e:06:f8:41:0a:d9:93:23:5f:85:34:49:7e:b0:
         8a:42:1f:43:66:8e:15:21:58:06:d8:61:52:e2:4a:e5:1d:c7:
         15:bf:0c:91:58:bb:18:e0:6d:f2:82:7f:a7:80:2d:10:1b:07:
         68:6f:de:c2:44:a2:8f:b8:46:28:73:62:54:e1:ac:ad:5f:0b:
         6b:ce:50:b2:5e:5a:ed:9c:09:83:6d:06:98:03:77:74:ce:b8:
         34:1f:df:7d:fc:9e:35:80:26:16:8e:32:6d:a7:af:19:8a:3c:
         bd:f3:74:c5:db:c3:c9:b6:09:5c:14:04:51:63:3b:c3:01:4a:
         b9:a0:7e:69:3c:ae:9c:11:69:64:83:ed:14:dd:b7:e9:4f:08:
         5b:c4:a0:2d:cf:ff:86:b5:fb:95:17:8e:2e:20:b4:33:9a:4e:
         88:a8:8f:44:f0:a4:1e:40:0a:e0:f0:cb:f5:13:9c:b4:20:1d:
         81:94:fb:a4:6a:aa:06:b3:a1:ad:13:70:23:94:7a:4b:89:0e:
         55:58:81:bc:93:ab:bd:f1:f2:5a:e1:c8:94:14:ee:0f:60:d3:
         87:b2:37:8d:e3:58:53:ce:dc:37:a1:c5:12:0a:c0:c0:73:8b:
         4d:09:cf:77:08:92:5a:48:38:aa:68:0b:f2:4c:20:58:33:e0:
         18:07:42:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:26 2026 by rpki-client