Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
File:                     yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json)
Hash identifier:          7cuPzYyKi9F46udP2lIZM0eWRtFcSGQzImm+KF2gZYk=
Subject key identifier:   8A:23:2C:74:CF:A6:51:98:1B:8C:BD:47:F5:F5:E2:B5:78:99:E0:5E
Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05
Certificate issuer:       /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
Certificate serial:       0766
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
Manifest number:          1761
Signing time:             Sat 04 Apr 2026 17:20:15 +0000
Manifest this update:     Sat 04 Apr 2026 17:20:14 +0000
Manifest next update:     Sat 11 Apr 2026 17:20:14 +0000
Files and hashes:         1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: 4d0GKieCeRL8pbARb2QZllJgudSv1a5sXl4iqkpduuA=)
                          2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: hwOf7SRKK2ExdUeCLcvf4HAC8wZaCK5Ulx58N9GVET8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1894 (0x766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C5F, serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
        Validity
            Not Before: Apr  4 17:20:14 2026 GMT
            Not After : Apr 11 17:20:14 2026 GMT
        Subject: CN=69d1484f-a376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:9a:06:c3:b8:54:79:84:3e:05:c6:fd:39:
                    16:c4:f7:50:eb:1e:19:c1:fe:3d:9b:20:fd:7a:4b:
                    a7:f0:41:85:d6:af:46:f0:d9:8f:e7:e2:aa:27:35:
                    ca:b1:a1:75:1d:d8:9c:8a:5a:7e:3b:89:e2:4a:44:
                    1e:3b:bb:7b:35:5d:10:51:ca:fb:4b:2d:fd:08:ba:
                    72:47:45:dd:5d:5e:31:bc:b4:92:3d:1d:9c:fb:f5:
                    4c:ca:7c:5e:7a:8b:48:c8:aa:15:24:18:4a:d6:31:
                    a6:36:10:40:95:48:60:3f:4c:41:4c:73:e0:7e:12:
                    f1:bf:fe:f4:26:b4:c4:5e:25:76:22:89:e6:39:2e:
                    58:75:66:29:c4:96:1e:7e:3f:15:36:32:6c:6f:6c:
                    6c:77:8b:c1:6e:1e:61:c0:b1:96:30:21:7d:05:d3:
                    89:7a:21:b2:34:b9:de:79:1b:75:8e:cb:92:a9:2a:
                    23:3d:b1:9f:34:f8:ea:eb:2a:be:09:b2:15:72:07:
                    cf:d9:d5:b1:e3:a2:8b:5a:e4:4a:13:cb:40:b2:73:
                    84:75:29:d1:3b:9c:85:84:be:ce:0b:36:4b:22:76:
                    38:ce:c9:02:bd:f0:63:62:2a:4a:92:2f:19:ed:12:
                    65:08:b5:b4:f0:1a:0f:3f:34:74:74:ab:fd:46:a7:
                    f4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:23:2C:74:CF:A6:51:98:1B:8C:BD:47:F5:F5:E2:B5:78:99:E0:5E
            X509v3 Authority Key Identifier:
                keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:8e:42:a7:47:74:48:58:f6:43:dd:79:70:09:41:45:71:2d:
         ae:f3:15:15:0a:78:54:ae:38:fb:bf:bd:0e:74:e2:f4:ce:05:
         0a:86:91:f1:e7:ca:a1:31:d4:37:be:03:fc:17:f2:7b:3b:25:
         b7:dc:f1:71:59:bf:0b:c7:07:b6:af:3a:3e:82:5e:7b:f5:25:
         7b:84:f0:a9:1e:c3:8f:25:12:63:70:ea:fb:0d:2a:db:ac:d5:
         90:62:75:ea:0b:5f:f1:38:60:aa:78:02:a0:46:3a:08:57:5b:
         f0:9b:b7:22:98:e0:f0:27:cf:1a:5e:6c:61:ba:4c:45:0d:b4:
         bf:05:ce:18:f2:8e:4a:da:68:c6:a6:6e:95:2e:c9:3a:d1:27:
         c4:e5:77:21:42:53:30:47:18:dd:42:ed:83:e4:81:55:4b:1e:
         cc:08:dd:8c:a7:02:05:f0:aa:0f:9a:3f:b6:d0:3e:e2:aa:2c:
         8b:5e:10:cc:fa:a7:03:0b:86:70:49:6e:1d:9d:29:36:98:a6:
         ee:cd:9a:cf:d0:23:09:9a:e7:f6:5d:73:b8:0e:f8:0c:83:96:
         81:51:d8:48:ca:bf:3d:d9:44:4e:11:c3:ab:df:a3:16:08:fa:
         78:06:76:23:12:8f:61:b1:1b:cd:ce:7a:81:d4:1f:63:9d:c4:
         7a:05:8c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:02 2026 by rpki-client