Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
File:                     yL8GWnSCLvjMYvSlTlnVhxILb0c.mft (raw, json)
Hash identifier:          Mh2V/lqbGvm+2XCKUddDxdo8uZ5uUaGtsYIg83kOdrY=
Subject key identifier:   C7:C2:32:8C:45:72:C5:3A:A6:EC:F9:51:21:A4:DC:11:E2:7D:7F:CF
Authority key identifier: C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
Certificate issuer:       /CN=A91E85F1/serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
Manifest number:          C7
Signing time:             Fri 17 Apr 2026 06:36:03 +0000
Manifest this update:     Fri 17 Apr 2026 06:36:03 +0000
Manifest next update:     Fri 24 Apr 2026 06:36:03 +0000
Files and hashes:         1: yL8GWnSCLvjMYvSlTlnVhxILb0c.crl (hash: EV1ve1zRqabMjoAAwS1ZmsJ38swO3G1R69hZNS1ZhN0=)
                          2: 4D144B780DFE11F09C46E054C4F9AE02.roa (hash: ZgPtES9Kb7/bZDuku74P3oPXELpqML+BgkqSggVYIcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
                          rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E85F1, serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
        Validity
            Not Before: Apr 17 06:36:03 2026 GMT
            Not After : Apr 24 06:36:03 2026 GMT
        Subject: CN=69e1d4d3-5c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:75:fe:62:10:b2:55:f0:df:15:a9:54:af:
                    61:a9:09:2a:d5:fa:d6:25:34:9b:58:ff:26:63:ee:
                    8e:d8:45:25:82:67:db:e2:23:9b:6b:d9:5b:15:84:
                    f3:ba:4d:35:a1:28:a3:0d:49:3d:14:f3:ed:30:15:
                    56:8f:c7:26:59:3b:af:d9:0a:76:d6:d5:24:84:0c:
                    1e:33:21:3e:cd:0e:2b:12:8f:b4:dc:2d:c9:ad:21:
                    2d:fe:25:cd:bc:0c:50:9b:96:0a:96:9c:2f:0a:da:
                    2c:d8:33:c9:b3:5a:d4:6d:f3:98:63:3f:76:4f:fb:
                    b2:4a:54:42:34:ee:28:e1:7e:b6:f0:4e:10:a9:ca:
                    56:fa:98:a7:b0:05:02:1b:bb:a1:f0:26:63:37:9b:
                    0f:c0:36:62:60:94:af:1b:c3:3c:40:ce:d9:65:36:
                    46:3a:09:de:a9:9e:72:ec:fb:49:6e:5d:53:82:7f:
                    c2:89:a0:15:1e:fc:3d:13:3f:8d:af:36:0a:44:75:
                    2c:b6:29:7f:f0:17:47:da:67:2a:29:d8:25:3a:84:
                    47:a9:e5:68:54:32:9c:cc:30:45:ee:53:7c:12:ae:
                    06:d7:47:0f:2c:22:cc:68:25:5f:15:eb:18:9a:bc:
                    48:25:bd:55:c8:76:54:11:a9:44:16:85:5f:fc:b8:
                    9b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C2:32:8C:45:72:C5:3A:A6:EC:F9:51:21:A4:DC:11:E2:7D:7F:CF
            X509v3 Authority Key Identifier:
                keyid:C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:59:29:64:0d:0c:29:9b:62:9b:b4:c1:1c:22:2c:15:5f:81:
         83:76:76:61:f8:79:a2:c2:c6:8f:de:06:97:13:6e:d8:3f:b1:
         b6:86:7b:0f:4a:04:dd:6b:48:ca:7f:31:8f:1f:e7:c6:50:cc:
         8b:d9:64:32:57:b5:d6:1c:00:04:30:3a:df:eb:f3:55:38:bc:
         0d:3a:1a:25:6b:df:90:fc:a0:6d:59:b2:6d:30:5e:dc:5b:dc:
         c5:c4:16:99:ea:d0:37:8c:bc:86:a0:a8:f9:af:40:71:c1:ef:
         77:60:c4:f3:74:4f:c7:c1:d6:5f:79:9a:21:5e:8e:bc:23:0a:
         75:a6:80:f0:d6:79:1e:d6:07:7d:6e:e9:d7:3f:15:9c:53:f7:
         4f:d7:48:1e:ce:8e:d3:75:e7:3e:93:4d:36:6d:1d:33:cd:66:
         2e:0e:a6:51:36:82:6e:a7:d4:78:7a:01:7b:4b:5b:cf:9d:46:
         45:16:9d:9d:84:f1:5e:0b:49:e7:42:6f:07:d3:fd:38:dc:81:
         ec:40:07:2a:9b:12:45:3c:02:c4:bd:23:57:3c:0e:a5:d3:87:
         81:f6:fa:ed:4a:1a:29:06:f8:4d:ac:1f:89:1b:ee:f1:4c:88:
         27:3f:5d:a6:24:ef:0d:7f:60:01:7e:f6:67:87:ba:b9:48:4c:
         2f:68:fe:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTg1RjExMTAvBgNVBAUTKEM4QkYwNjVBNzQ4MjJFRjhDQzYyRjRBNTRFNTlENTg3
MTIwQjZGNDcwHhcNMjYwNDE3MDYzNjAzWhcNMjYwNDI0MDYzNjAzWjAYMRYwFAYD
VQQDEw02OWUxZDRkMy01Yzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzs91/mIQslXw3xWpVK9hqQkq1frWJTSbWP8mY+6O2EUlgmfb4iOba9lbFYTz
uk01oSijDUk9FPPtMBVWj8cmWTuv2Qp21tUkhAweMyE+zQ4rEo+03C3JrSEt/iXN
vAxQm5YKlpwvCtos2DPJs1rUbfOYYz92T/uySlRCNO4o4X628E4QqcpW+pinsAUC
G7uh8CZjN5sPwDZiYJSvG8M8QM7ZZTZGOgneqZ5y7PtJbl1Tgn/CiaAVHvw9Ez+N
rzYKRHUstil/8BdH2mcqKdglOoRHqeVoVDKczDBF7lN8Eq4G10cPLCLMaCVfFesY
mrxIJb1VyHZUEalEFoVf/Lib2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfCMoxF
csU6puz5USGk3BHifX/PMB8GA1UdIwQYMBaAFMi/Blp0gi74zGL0pU5Z1YcSC29H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVGMS82QUE0RDYwQTBE
RkMxMUYwQTFEOTgwNTNDNEY5QUUwMi95TDhHV25TQ0x2ak1ZdlNsVGxuVmh4SUxi
MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lMOEdXblNDTHZqTVl2U2xUbG5WaHhJTGIwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODVGMS82QUE0RDYwQTBERkMxMUYwQTFEOTgwNTNDNEY5QUUwMi95TDhHV25TQ0x2
ak1ZdlNsVGxuVmh4SUxiMGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHFkpZA0MKZtim7TBHCIsFV+Bg3Z2Yfh5osLGj94GlxNu2D+xtoZ7D0oE3WtI
yn8xjx/nxlDMi9lkMle11hwABDA63+vzVTi8DToaJWvfkPygbVmybTBe3FvcxcQW
merQN4y8hqCo+a9AccHvd2DE83RPx8HWX3maIV6OvCMKdaaA8NZ5HtYHfW7p1z8V
nFP3T9dIHs6O03XnPpNNNm0dM81mLg6mUTaCbqfUeHoBe0tbz51GRRadnYTxXgtJ
50JvB9P9ONyB7EAHKpsSRTwCxL0jVzwOpdOHgfb67UoaKQb4TawfiRvu8UyIJz9d
piTvDX9gAX72Z4e6uUhML2j+nQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 03:43:59 2026 by rpki-client