Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
File:                     pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json)
Hash identifier:          dtXfUH8uNCCxH+sWrJf/I2aUDdls2cZol3kik6vKCjs=
Subject key identifier:   B4:FE:16:5F:59:F1:8D:46:5C:A6:D1:CB:64:C7:EA:C4:DF:D4:A2:D7
Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D
Certificate issuer:       /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
Manifest number:          FD
Signing time:             Sun 05 Apr 2026 05:38:25 +0000
Manifest this update:     Sun 05 Apr 2026 05:38:25 +0000
Manifest next update:     Sun 12 Apr 2026 05:38:25 +0000
Files and hashes:         1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: UvAb90mT02bvIoSlpRYQsJRt2lDtuaFGpOYd2ni2eGg=)
                          2: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: 6KLtFcE2fvWR+tw55m57pBI0diDqJjyzD/r4YO1tgys=)
                          3: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: zNFgnvoA/0CMs26VKwtX8JS10QHmGc04Gpc4vtJA0LQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl
                          rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D
        Validity
            Not Before: Apr  5 05:38:25 2026 GMT
            Not After : Apr 12 05:38:25 2026 GMT
        Subject: CN=69d1f551-6c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1f:34:8d:c1:a2:55:31:bc:5f:48:27:9c:7a:
                    e5:8a:7b:d1:9d:d9:08:99:7d:f3:cb:3f:47:f4:91:
                    34:4f:03:74:bf:d1:02:cf:77:03:85:ca:a8:cf:11:
                    43:d8:c0:90:a2:16:b7:98:19:e6:ec:0b:bd:c7:dd:
                    0d:2c:d0:3f:ac:37:4e:3c:13:3d:71:43:b3:05:d8:
                    2f:87:81:19:30:f0:7e:8f:bc:8e:f9:06:0e:0a:b1:
                    1d:11:1b:2e:5b:cf:c9:80:73:7b:bd:6a:4e:18:09:
                    1e:5f:b4:0f:df:cc:61:c8:d8:c7:57:88:3d:fd:c9:
                    82:d4:ae:6c:c5:1b:15:3e:01:da:8e:0c:38:3a:08:
                    9f:6a:b4:58:96:21:4e:4b:fc:68:27:59:15:d8:ca:
                    0d:cb:ac:11:88:6e:97:0a:80:26:0d:25:ef:9e:7e:
                    f4:74:3e:06:aa:c6:f0:2c:de:83:c9:11:ad:25:1f:
                    8a:f0:67:c3:08:03:97:2c:87:11:21:6c:de:b3:1e:
                    8f:6b:08:b5:16:d7:80:16:90:dd:99:32:2b:26:28:
                    5b:04:df:35:87:f7:5c:7e:b7:45:b0:05:2d:ec:cd:
                    52:62:cc:79:73:29:84:16:4c:7d:03:29:c5:84:86:
                    75:1b:9e:b4:4d:ec:f9:80:ec:47:1d:5e:8a:a3:da:
                    f1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FE:16:5F:59:F1:8D:46:5C:A6:D1:CB:64:C7:EA:C4:DF:D4:A2:D7
            X509v3 Authority Key Identifier:
                keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2b:ea:44:d6:c5:48:b2:97:7e:ae:14:8f:97:e9:e7:a8:79:
         58:5b:82:c7:d8:3c:12:e9:b8:97:71:ae:5e:e8:c9:23:13:d2:
         8a:ae:8f:a5:ed:45:dd:64:ae:ee:a1:16:fc:c4:ff:16:ee:41:
         df:a2:4d:b7:7e:df:62:eb:63:98:3a:6d:76:ef:fb:23:54:8d:
         56:e0:b0:5c:01:4a:e0:8d:81:d7:cb:b0:21:c8:f7:58:b7:fe:
         db:d3:93:b7:8c:6d:78:33:e8:f8:3b:82:c9:9f:b2:40:96:0a:
         d6:fe:e9:98:39:35:db:7b:5d:df:70:58:c7:f1:71:32:0d:06:
         79:40:d2:68:72:91:fd:96:c0:58:30:ef:3e:dd:a6:ef:cb:e0:
         55:4c:d8:e7:73:5e:66:4b:8f:d0:48:ec:4b:62:1b:12:77:b2:
         9b:3c:8f:89:f6:c3:b9:57:f7:77:0c:09:7b:d6:04:34:17:a5:
         31:06:d8:ca:5e:ae:70:79:51:f8:07:9a:b7:76:ad:6c:be:a7:
         ee:89:30:aa:36:90:88:dd:be:f5:41:e9:e5:0a:e1:ac:a4:1a:
         33:b4:75:6e:d1:52:03:e1:8f:fd:51:7b:00:28:01:cd:c5:0a:
         41:a6:af:6b:57:31:2b:1f:ca:12:7c:d3:d0:f2:f4:19:0d:c8:
         62:ff:6d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:39 2026 by rpki-client