Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
File:                     yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft (raw, json)
Hash identifier:          8J2p91vha1uRbdOGb4BIjGN0crh6Jjt2cDF09/zY3H0=
Subject key identifier:   92:E4:EE:37:5A:80:2C:07:DF:08:93:1B:F8:19:2C:DB:EE:28:F8:F5
Authority key identifier: CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
Certificate issuer:       /CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Certificate serial:       05C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
Manifest number:          05C0
Signing time:             Sat 04 Apr 2026 22:52:54 +0000
Manifest this update:     Sat 04 Apr 2026 22:52:54 +0000
Manifest next update:     Sat 11 Apr 2026 22:52:54 +0000
Files and hashes:         1: yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl (hash: nZgQrM3uwB8ROMaOCcmmKDJEx1KrQjEaZeaD5YT/6Pg=)
                          2: F1C77A3C73E711ECA415F87FC4F9AE02.roa (hash: ndTpDZlPiwVPJ1O58HOrjE/VLnQNPEmSoyFLTx+c11g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl
                          rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:52:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1480 (0x5c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE352, serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
        Validity
            Not Before: Apr  4 22:52:54 2026 GMT
            Not After : Apr 11 22:52:54 2026 GMT
        Subject: CN=69d19646-243e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:c9:c1:53:2e:c3:3e:ec:ed:66:a6:cb:ac:
                    5f:8d:01:3b:fe:da:d4:33:fc:50:33:92:5e:9a:57:
                    12:2f:41:dc:83:11:b8:0d:2a:6b:46:16:35:0e:02:
                    e5:b7:a4:ac:f5:d7:ec:9d:b1:3b:d2:eb:3b:73:89:
                    06:e1:60:57:11:59:9b:4d:b4:b6:2b:59:38:9d:58:
                    88:02:d1:89:14:30:93:73:82:ac:91:8b:62:07:0c:
                    0c:c8:c9:4c:bd:2a:1e:f0:ba:43:0c:d6:c2:67:a2:
                    ea:99:44:14:e4:b8:dc:99:e2:d2:08:2f:45:29:46:
                    f6:0f:f4:b0:c1:01:70:02:b7:cf:71:ed:38:c9:fc:
                    8d:af:47:b0:ec:ac:b2:73:ad:5a:30:2a:aa:a6:a6:
                    ec:41:d2:a9:e7:c7:c8:f8:05:99:5c:1a:0f:ae:92:
                    b1:6a:09:42:d5:be:db:a2:25:92:f1:ae:f5:23:3a:
                    ab:89:e5:66:26:99:e4:1e:2c:84:1f:46:6f:a4:6c:
                    9d:c8:2a:3e:8d:d1:b7:f2:90:fb:3c:f8:d0:4f:0d:
                    14:75:86:d9:d2:ae:27:0a:9b:7f:49:77:f0:9f:fd:
                    dd:34:cb:c1:4d:dc:78:61:c0:00:76:33:b5:66:18:
                    c1:80:4e:58:18:61:48:7e:86:14:17:52:42:27:35:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E4:EE:37:5A:80:2C:07:DF:08:93:1B:F8:19:2C:DB:EE:28:F8:F5
            X509v3 Authority Key Identifier:
                keyid:CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:db:ee:04:98:8d:49:42:1a:c0:09:41:71:8a:a4:8f:c9:c4:
         f1:2d:f4:39:19:6d:6a:a0:76:1b:73:76:fc:42:1f:15:5d:a0:
         74:ce:a8:93:66:9b:bd:ad:f6:6d:b9:2a:f9:83:06:c7:d7:d6:
         9e:08:29:40:73:67:75:65:0d:cf:e8:2b:e0:52:b5:dc:38:32:
         58:4e:40:cc:3a:83:94:98:67:46:d3:b4:ed:48:19:cf:d5:6c:
         fd:2d:47:81:66:9d:88:2b:11:25:c5:0e:0f:f0:17:74:ad:5c:
         01:9a:c1:18:ad:18:7a:e1:20:e9:d0:45:9a:83:a6:6a:20:a4:
         30:b7:e6:86:4d:ef:cc:ed:8e:92:ff:d7:df:95:6b:b1:02:27:
         56:74:46:83:36:27:e4:b0:41:28:cd:43:68:c7:de:dc:f1:01:
         23:c1:ec:a8:6e:98:51:fa:95:c1:35:70:ba:9c:a1:63:99:b5:
         28:96:b7:cf:a7:bf:9b:63:fd:c8:43:3d:91:52:68:0c:12:73:
         3e:d9:c1:88:c3:71:94:45:22:f7:78:3d:c4:49:24:15:54:2a:
         fe:8c:ac:e7:1c:22:11:5b:9a:2d:7e:ef:f5:fd:04:ab:3b:5e:
         23:e4:6c:a4:37:49:7a:76:e0:43:76:5a:cb:da:48:94:e5:6d:
         a5:5d:e0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:06:07 2026 by rpki-client