Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft
File:                     InYg_8vfrJXUbmodsxewi6VihIA.mft (raw, json)
Hash identifier:          rQIfMIBc2qch9nz/Lc6IIX8RSskrjjbsc0A2w4lKnwI=
Subject key identifier:   FE:5D:3B:87:7B:18:8A:4E:FF:8A:E4:3E:5E:BA:E8:4E:32:29:71:1F
Authority key identifier: 22:76:20:FF:CB:DF:AC:95:D4:6E:6A:1D:B3:17:B0:8B:A5:62:84:80
Certificate issuer:       /CN=A91D4781/serialNumber=227620FFCBDFAC95D46E6A1DB317B08BA5628480
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft
Manifest number:          64
Signing time:             Fri 17 Apr 2026 07:40:32 +0000
Manifest this update:     Fri 17 Apr 2026 07:40:32 +0000
Manifest next update:     Fri 24 Apr 2026 07:40:32 +0000
Files and hashes:         1: InYg_8vfrJXUbmodsxewi6VihIA.crl (hash: YvwtnhyQTuH8pB5qtPDoLNPqHCJo0Cvm9Uxk8MRoEMk=)
                          2: 9F7CD49AA55A11F0A8F84D83C4F9AE02.roa (hash: uA1aNoLm5rRL4N33a7say9LydcTss2fD+OkvlysDqGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.crl
                          rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4781, serialNumber=227620FFCBDFAC95D46E6A1DB317B08BA5628480
        Validity
            Not Before: Apr 17 07:40:32 2026 GMT
            Not After : Apr 24 07:40:32 2026 GMT
        Subject: CN=69e1e3f0-cc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:f9:14:22:15:0e:9d:27:ef:36:4a:c0:f1:
                    6c:dd:29:72:0c:56:fc:31:4b:fe:a5:e6:2c:16:f6:
                    d0:fe:45:ec:36:7e:38:44:a7:bd:51:fa:17:c8:bd:
                    14:3c:e6:e9:4f:bc:74:f1:3e:95:0a:08:88:53:ce:
                    65:3e:bc:17:f7:9c:59:4d:b6:36:7e:95:9b:a0:c9:
                    af:7d:d7:fd:e2:ff:a4:7a:8f:17:55:23:87:57:da:
                    4a:9a:64:4c:6f:96:36:94:f3:37:d8:dc:6b:34:10:
                    0a:7e:1f:69:7f:ce:ab:79:8f:43:bc:7d:7d:10:10:
                    43:df:d8:f7:5b:fd:ef:03:d2:23:6b:7d:ff:b9:41:
                    07:55:60:a8:74:d0:27:ae:71:9d:73:07:44:03:87:
                    1a:28:84:a0:79:b1:f0:89:8a:c3:25:2f:f0:3f:e9:
                    ed:86:2a:4e:50:f4:f4:52:67:36:46:37:66:16:22:
                    d7:f2:fc:d4:0b:2b:f6:4e:5f:3e:6b:c5:ff:06:cd:
                    de:fa:7f:c7:2b:40:d2:3f:99:0a:f7:fd:49:50:3c:
                    91:e7:8e:65:86:3d:a2:6f:37:d1:87:97:5b:5b:2a:
                    46:d8:1f:9d:f9:a0:c0:65:c3:eb:06:bb:81:db:a0:
                    a2:66:2d:fd:f5:de:09:aa:f1:f6:75:e6:d7:85:f5:
                    84:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5D:3B:87:7B:18:8A:4E:FF:8A:E4:3E:5E:BA:E8:4E:32:29:71:1F
            X509v3 Authority Key Identifier:
                keyid:22:76:20:FF:CB:DF:AC:95:D4:6E:6A:1D:B3:17:B0:8B:A5:62:84:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ad:30:6a:a6:d7:74:be:bf:16:55:c8:07:b2:62:0e:e6:5c:
         27:0a:27:c6:b4:18:93:90:79:9e:e5:07:f3:bd:c7:06:62:3a:
         24:f2:73:98:26:f7:66:4e:39:33:74:5f:cf:e3:f3:34:b4:40:
         6f:ad:37:9e:44:d7:eb:97:fe:a4:f8:20:81:a1:52:57:ed:56:
         2c:e1:d8:db:4d:d0:d7:11:f4:3f:03:b1:c6:99:99:b3:66:a8:
         0b:86:ff:f0:0f:b9:97:09:4d:b3:ba:a6:a8:11:24:42:ca:e1:
         95:98:9b:71:26:eb:65:0c:91:11:d6:79:a3:0d:c6:5d:8a:14:
         52:00:c6:7f:c9:ed:62:89:2e:d0:61:b2:00:b8:b0:d0:5e:cf:
         51:99:db:27:aa:35:08:2e:9f:75:e6:bf:e3:06:66:5b:86:0e:
         61:6e:c4:27:42:43:de:e9:f1:85:45:f0:15:c7:b8:2b:34:1d:
         cf:1e:19:5f:aa:3c:e5:ba:09:a2:c8:ba:76:08:79:98:60:33:
         03:3e:46:b3:28:d4:d5:4d:39:eb:e9:04:25:f4:89:f0:74:8d:
         3b:5a:58:20:7e:8c:69:08:25:de:d4:c6:75:ab:77:6d:0a:37:
         a6:dc:97:40:f5:d0:13:11:e6:1b:e3:52:30:8c:e1:29:81:8b:
         8a:16:49:0f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
NDc4MTExMC8GA1UEBRMoMjI3NjIwRkZDQkRGQUM5NUQ0NkU2QTFEQjMxN0IwOEJB
NTYyODQ4MDAeFw0yNjA0MTcwNzQwMzJaFw0yNjA0MjQwNzQwMzJaMBgxFjAUBgNV
BAMTDTY5ZTFlM2YwLWNjMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCf8fkUIhUOnSfvNkrA8WzdKXIMVvwxS/6l5iwW9tD+Rew2fjhEp71R+hfIvRQ8
5ulPvHTxPpUKCIhTzmU+vBf3nFlNtjZ+lZugya991/3i/6R6jxdVI4dX2kqaZExv
ljaU8zfY3Gs0EAp+H2l/zqt5j0O8fX0QEEPf2Pdb/e8D0iNrff+5QQdVYKh00Ceu
cZ1zB0QDhxoohKB5sfCJisMlL/A/6e2GKk5Q9PRSZzZGN2YWItfy/NQLK/ZOXz5r
xf8Gzd76f8crQNI/mQr3/UlQPJHnjmWGPaJvN9GHl1tbKkbYH535oMBlw+sGu4Hb
oKJmLf313gmq8fZ15teF9YQ3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/l07h3sY
ik7/iuQ+XrroTjIpcR8wHwYDVR0jBBgwFoAUInYg/8vfrJXUbmodsxewi6VihIAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0NzgxL0Q5MDA0MkNFQTQ4
RDExRjBBRDk3RjAxNkM0RjlBRTAyL0luWWdfOHZmckpYVWJtb2RzeGV3aTZWaWhJ
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSW5ZZ184dmZySlhVYm1vZHN4ZXdpNlZpaElBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0
NzgxL0Q5MDA0MkNFQTQ4RDExRjBBRDk3RjAxNkM0RjlBRTAyL0luWWdfOHZmckpY
VWJtb2RzeGV3aTZWaWhJQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB4rTBqptd0vr8WVcgHsmIO5lwnCifGtBiTkHme5QfzvccGYjok8nOYJvdmTjkz
dF/P4/M0tEBvrTeeRNfrl/6k+CCBoVJX7VYs4djbTdDXEfQ/A7HGmZmzZqgLhv/w
D7mXCU2zuqaoESRCyuGVmJtxJutlDJER1nmjDcZdihRSAMZ/ye1iiS7QYbIAuLDQ
Xs9RmdsnqjUILp915r/jBmZbhg5hbsQnQkPe6fGFRfAVx7grNB3PHhlfqjzlugmi
yLp2CHmYYDMDPkazKNTVTTnr6QQl9InwdI07WlggfoxpCCXe1MZ1q3dtCjem3JdA
9dATEeYb41IwjOEpgYuKFkkP
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:40 2026 by rpki-client