Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
File:                     YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json)
Hash identifier:          enWf6EbNtKg9hrRnyZDtiq20ANKHJNTvPaNYkn8Npoo=
Subject key identifier:   05:4A:75:63:83:9C:7E:FA:AA:05:EC:2D:69:E0:68:C5:64:FB:42:E9
Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54
Certificate issuer:       /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
Certificate serial:       3538
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
Manifest number:          3531
Signing time:             Sat 18 Apr 2026 15:01:12 +0000
Manifest this update:     Sat 18 Apr 2026 15:01:11 +0000
Manifest next update:     Sat 25 Apr 2026 15:01:11 +0000
Files and hashes:         1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: WJdVY0l7X3JfV8YAp4A6wzVJyQ6EGKslL9ZeTjFk99E=)
                          2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: oxiDTJi92uEmvEoDjgv/y1DqmarljGA90TImE98cgWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13624 (0x3538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
        Validity
            Not Before: Apr 18 15:01:11 2026 GMT
            Not After : Apr 25 15:01:11 2026 GMT
        Subject: CN=69e39cb7-ca56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:81:b5:d2:9c:e8:f3:c9:f5:d0:ea:fd:42:d2:
                    f5:9b:91:f2:b3:29:de:14:5d:1f:f8:a8:84:11:ae:
                    1e:0c:aa:b1:c4:62:4f:87:1d:6f:41:30:7a:1b:21:
                    67:4b:49:8f:21:af:c5:7f:52:13:66:e6:23:6f:47:
                    17:52:43:3f:60:10:be:1b:24:90:8d:d5:77:57:d8:
                    df:eb:d8:69:af:58:40:12:0b:e9:fd:1d:7a:b1:96:
                    55:43:3f:d7:62:41:bf:81:bd:fb:bb:04:f0:bc:3b:
                    4d:6e:11:57:ec:e2:08:44:36:d4:04:bf:87:ae:27:
                    71:11:8e:69:e8:85:ff:3c:1b:81:5d:b1:03:bb:e3:
                    56:9d:8e:c8:9f:a6:56:7d:e0:6e:86:67:e3:65:b2:
                    49:33:98:dc:d0:09:f8:7c:57:9e:6c:c2:15:5d:a6:
                    e3:f6:79:b2:bb:8f:8c:15:4d:71:64:a0:d0:f6:c3:
                    da:4e:29:9a:8e:69:6d:33:5f:a3:4c:4a:a8:ed:65:
                    8d:54:d3:25:4a:55:62:62:92:e6:71:89:15:15:09:
                    39:1a:91:35:20:0e:bc:eb:00:21:81:c3:80:09:7d:
                    06:53:63:db:43:e4:7b:21:b4:c9:50:e9:1e:f8:50:
                    3f:fe:aa:cb:70:93:a5:66:66:3a:ee:9c:2e:a0:31:
                    6e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4A:75:63:83:9C:7E:FA:AA:05:EC:2D:69:E0:68:C5:64:FB:42:E9
            X509v3 Authority Key Identifier:
                keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:65:15:d7:df:8b:bf:cb:e7:d6:ed:89:35:d4:b9:14:4b:8f:
         9c:6b:7b:91:58:4a:d8:3d:9c:4a:0d:23:f8:ea:53:00:47:ca:
         35:0b:4a:46:e3:bd:db:fe:79:8a:4f:21:30:86:0c:e3:39:0f:
         c6:99:62:21:d2:bf:01:27:10:4c:26:40:9d:9a:71:d7:5e:89:
         37:66:07:47:f8:39:d4:97:bf:53:e7:7f:e9:53:af:e0:85:25:
         cb:b8:27:91:65:2b:6c:ca:01:db:17:44:38:70:58:d7:ec:78:
         5e:98:25:8a:63:a8:84:1a:53:c5:e7:2b:dc:2a:f4:11:be:f8:
         1e:0a:8d:d2:c5:24:45:d5:52:b1:21:62:b6:7a:1d:ae:4d:f8:
         2d:95:8c:a9:47:fb:98:ea:71:fc:bc:3f:60:4f:37:17:4e:e8:
         1e:02:bc:13:c1:31:1d:f4:48:eb:ea:ae:a1:92:4b:f6:b8:00:
         6a:f1:89:71:e1:d4:9e:0f:a0:24:ca:a5:3d:50:f8:86:52:3f:
         95:9c:08:26:97:6e:80:ba:64:65:11:a7:e5:c9:4a:fa:44:ea:
         28:65:96:99:07:a0:eb:87:17:0b:f2:79:4a:52:4b:e2:36:22:
         1b:15:bf:b8:2a:a9:9d:f2:9c:65:bb:11:44:ef:4d:a4:c6:2f:
         73:3f:41:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:54 2026 by rpki-client