Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
File:                     YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json)
Hash identifier:          d8nGiYUh3AplF/dCu3YGcdj+TSilWRhne16ZsHFQL1Q=
Subject key identifier:   0A:68:00:BB:9C:CF:35:E4:08:04:11:A5:82:2D:CB:53:52:A0:32:05
Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
Certificate issuer:       /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
Manifest number:          F4
Signing time:             Tue 21 Apr 2026 06:15:50 +0000
Manifest this update:     Tue 21 Apr 2026 06:15:49 +0000
Manifest next update:     Tue 28 Apr 2026 06:15:49 +0000
Files and hashes:         1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: ScLKUpynvbpBTahsPy5Fw5gmzc3UlLC3SJ/4hLl3WUU=)
                          2: 5DB76F8212B211F19AC313AEB5EE528E.roa (hash: 2NaYNjJ6qjcaM0sXuJIClT+/B4+Xci+4D5hsnMlJddw=)
                          3: 5CBA651212B211F19AC313AEB5EE528E.roa (hash: OY4Fet8xm/rFRe8wVg+u3YFnbkKRJHlvjCIrVFg7MQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl
                          rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
        Validity
            Not Before: Apr 21 06:15:49 2026 GMT
            Not After : Apr 28 06:15:49 2026 GMT
        Subject: CN=69e71616-f61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e3:53:cf:ec:c9:88:ed:17:e0:a1:27:46:75:
                    af:07:69:2f:68:49:c9:68:04:bb:49:04:ca:fb:87:
                    bc:89:3e:32:21:5a:db:70:cb:53:8e:30:6d:67:30:
                    1b:13:a6:20:73:fc:a9:f6:5c:51:e3:90:a9:24:cc:
                    71:9c:49:6a:87:7e:5d:7f:79:94:27:5d:de:e7:76:
                    55:f6:90:19:48:db:31:d2:9f:e1:d2:75:fb:3b:37:
                    8a:56:0d:17:f6:52:87:90:2d:70:64:24:4a:b1:68:
                    71:50:4e:22:60:ab:53:de:8b:d9:f4:40:3c:2d:ec:
                    a0:a5:1b:03:94:54:0c:73:89:02:4a:21:25:2e:59:
                    73:ec:4b:ed:b8:ea:5e:bc:c0:79:b4:74:35:db:1d:
                    a7:7f:0a:a3:b5:a0:37:3f:30:8e:7e:c6:73:b7:27:
                    c2:f4:68:0b:6a:cd:1b:ba:a3:26:39:69:cf:2f:46:
                    6e:b7:a5:4d:23:69:a6:1c:fa:97:41:ea:d9:5a:42:
                    0a:f9:fe:dd:19:ba:c1:2d:b5:38:c9:41:5a:7f:ee:
                    ce:f2:b1:1a:a0:86:00:34:20:4b:86:c6:e7:f0:b2:
                    9f:cb:5f:4a:e3:0d:2e:66:a9:77:49:c9:f6:de:d5:
                    b2:53:19:c2:cb:4a:62:eb:73:ef:21:ad:85:96:a5:
                    16:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:68:00:BB:9C:CF:35:E4:08:04:11:A5:82:2D:CB:53:52:A0:32:05
            X509v3 Authority Key Identifier:
                keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:90:78:63:c6:be:b9:bc:b4:2c:89:e5:71:83:1a:6b:19:0e:
         c7:70:9b:f8:43:79:e1:6f:05:bc:00:f2:f1:44:35:9b:64:b4:
         67:5f:51:06:0e:80:e7:ba:8d:7a:73:94:ce:89:9c:a0:7c:f7:
         34:82:56:78:b1:41:2c:9e:9c:21:bb:9f:e8:f8:9a:bd:ee:0f:
         b6:c9:5e:21:e9:ef:1a:b9:1c:72:47:18:75:eb:dc:a9:4e:73:
         b8:e8:37:19:60:e7:26:1a:55:91:5c:35:71:bc:a5:04:a1:aa:
         58:0c:87:ca:62:42:89:dd:e4:dd:3f:80:a0:7f:4a:e6:01:18:
         a2:dc:e4:96:a2:57:7c:09:b4:e0:60:9d:7b:59:1d:4c:72:b1:
         7e:20:81:c4:a6:97:70:99:c5:b6:54:49:57:8d:e3:31:d6:8f:
         14:46:fa:00:61:3c:da:4e:32:25:65:ae:ff:40:32:d9:6e:92:
         42:ce:20:a1:d3:7b:77:0e:15:f7:60:46:a5:1a:b2:0f:2b:82:
         8c:2c:71:a9:24:cf:1e:90:03:62:3f:73:37:4b:ec:e5:66:67:
         1f:59:f4:d8:ec:80:a6:26:b1:3a:d1:ac:45:df:f0:1b:33:d6:
         27:a4:69:6e:07:fc:36:70:f0:00:e1:6d:b8:d0:1d:ea:0e:f0:
         ad:4e:2c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 09:01:30 2026 by rpki-client