Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft
File:                     YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft (raw, json)
Hash identifier:          5bV+voeqp2zwnnyMN8GSKTPPAnkdqh+wi6TXan81bYc=
Subject key identifier:   44:96:FD:42:AD:EF:6D:6C:7C:C6:A0:C2:0E:EC:07:33:01:B2:C4:0B
Authority key identifier: 61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A
Certificate issuer:       /CN=A9171D16/serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft
Manifest number:          019F
Signing time:             Wed 25 Mar 2026 03:28:37 +0000
Manifest this update:     Wed 25 Mar 2026 03:28:37 +0000
Manifest next update:     Wed 01 Apr 2026 03:28:37 +0000
Files and hashes:         1: YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl (hash: oD4rP2KamnfgIllSiC30EOtJILR/fNVnJzKWOm3gqYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl
                          rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D16, serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A
        Validity
            Not Before: Mar 25 03:28:37 2026 GMT
            Not After : Apr  1 03:28:37 2026 GMT
        Subject: CN=69c35665-88c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a6:41:a7:61:fa:12:fd:ad:93:95:44:0b:63:
                    1b:6b:08:f6:03:58:8b:b3:17:1e:ca:db:01:c4:25:
                    7a:1c:4d:37:9e:dd:bf:0a:07:5f:ec:d8:ed:a2:ae:
                    7e:ef:2b:b4:bd:0f:28:4c:a6:ae:46:8a:61:80:bb:
                    b4:82:30:f9:d0:58:33:d1:10:90:3a:dd:7d:8a:84:
                    45:76:6f:9b:c0:2e:2a:ae:a2:4f:78:ec:3d:bf:24:
                    b1:d1:18:ba:ce:15:e9:46:d2:f9:d8:c5:db:39:b6:
                    33:f8:30:4f:43:67:b5:84:b0:15:05:7f:09:aa:3b:
                    02:6e:f3:b8:6c:e1:c7:b5:07:b0:6e:2a:ee:56:44:
                    02:e1:57:57:53:6a:78:99:12:4b:9d:79:d0:0d:9c:
                    6d:20:4f:42:02:6f:12:d3:bc:91:b7:ae:e6:b1:4e:
                    c6:91:9a:05:82:19:e9:6b:ba:4a:cb:07:ca:55:7c:
                    86:3c:85:bc:c3:d5:47:a2:13:29:95:4d:bf:6a:08:
                    ef:3f:16:1a:6c:90:bd:56:6e:bb:4f:72:eb:4b:6e:
                    45:09:04:26:e7:b2:01:8d:03:2d:90:60:ad:70:be:
                    03:f2:f3:35:de:21:e2:c8:23:28:64:f2:e5:e4:43:
                    58:de:a3:6e:32:20:51:ba:55:9e:ab:2c:df:f0:ac:
                    92:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:96:FD:42:AD:EF:6D:6C:7C:C6:A0:C2:0E:EC:07:33:01:B2:C4:0B
            X509v3 Authority Key Identifier:
                keyid:61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:49:1e:d4:4b:b9:2a:68:c4:f5:d5:4e:42:19:a6:cc:0d:3c:
         a0:a9:a1:5d:5f:57:19:ae:e2:38:00:ca:45:1b:ee:87:d9:6e:
         22:60:27:82:e2:a5:96:99:2c:dd:e2:58:56:34:e6:e8:ac:a9:
         91:2a:f4:d9:cf:66:cb:f4:40:95:e3:24:d3:75:df:9e:e0:f5:
         24:6c:d3:11:2d:4b:57:35:49:3e:0a:25:b0:47:06:cf:cb:4e:
         e2:1c:47:ab:32:ea:91:d4:36:2c:6e:55:88:99:62:8b:dc:e3:
         3b:fb:4c:4e:b6:ce:26:2e:31:04:14:2b:44:80:b9:18:01:97:
         32:c9:a5:a8:86:c3:57:cf:96:4e:45:a5:5f:04:1c:ca:bd:1d:
         17:1f:81:75:2f:bd:b6:52:c9:68:c7:36:00:e5:01:56:dc:7a:
         74:43:c2:24:23:a1:77:34:39:17:d9:41:92:03:d3:d8:27:dd:
         a4:9b:69:aa:a0:f1:e7:9e:fd:e4:0f:89:29:46:76:db:da:18:
         b2:74:0c:b4:94:59:e5:e8:78:f0:76:52:29:b1:d2:36:9c:02:
         3f:fd:32:1a:92:11:5a:9d:2e:37:9d:f2:03:d0:46:0a:9b:fb:
         89:cf:6d:1f:85:d2:48:79:1e:53:6b:16:dd:06:a4:62:fc:9c:
         2f:28:29:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:51 2026 by rpki-client