Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
File:                     YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft (raw, json)
Hash identifier:          0JFrtimxFTUsl/AEtbzWgHajJR4IqyTY7auAJK4DDFk=
Subject key identifier:   9B:91:BC:03:81:35:21:45:A1:72:D8:7F:B8:FE:F5:66:19:DB:A4:FA
Authority key identifier: 62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47
Certificate issuer:       /CN=A9182509/serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
Manifest number:          4A
Signing time:             Mon 11 May 2026 08:32:11 +0000
Manifest this update:     Mon 11 May 2026 08:32:10 +0000
Manifest next update:     Mon 18 May 2026 08:32:10 +0000
Files and hashes:         1: YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl (hash: Jva47HPPYW9JbmBI3fiCSt7WDluxynIdkNSolWJBrbo=)
                          2: F50431A0E48511F0BEFBEDFF436F56BC.roa (hash: biBbqFto51rOZiPG5JNmrRxR/U8JC7IUfuy2q4b9zao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl
                          rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182509, serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
        Validity
            Not Before: May 11 08:32:10 2026 GMT
            Not After : May 18 08:32:10 2026 GMT
        Subject: CN=6a01940b-73de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:bf:31:bc:d4:e3:5d:2b:33:ba:43:81:37:
                    ec:75:53:87:dc:bd:7b:7e:ea:0b:14:16:e9:8d:d8:
                    87:e6:cc:b9:e8:d1:b4:21:23:99:50:47:37:c3:2b:
                    24:3a:14:fe:18:16:a7:77:b4:9c:c8:ab:b5:56:37:
                    6d:34:5f:c0:b0:66:da:30:26:b6:4c:99:fa:fc:8a:
                    26:c4:11:c9:2d:1c:b3:a5:2b:ce:8f:be:3b:15:a9:
                    fe:fc:6c:81:2d:ea:22:77:54:f4:e1:e7:e3:53:57:
                    35:9c:ff:d1:8f:bf:d9:79:a3:ed:ca:df:8a:2e:a7:
                    44:7c:53:1f:c8:db:58:1c:42:d2:1e:07:23:1c:e5:
                    41:85:89:31:19:62:88:c0:b6:2a:50:9b:b1:c7:ac:
                    aa:f3:2d:16:c3:41:4f:3a:bf:84:e8:8f:2e:3e:da:
                    b1:21:c7:e3:b0:7b:8f:2d:c1:21:75:39:37:67:8f:
                    72:04:bb:f4:e7:42:25:af:74:b1:88:7a:a7:94:56:
                    1e:71:c8:fe:47:f1:28:ef:45:f1:a2:70:6b:8c:29:
                    1c:97:1e:de:6f:0c:a0:f4:73:24:7f:d3:a9:ea:ff:
                    5d:52:c2:21:8a:a7:2b:ce:34:3b:dc:9a:eb:1d:68:
                    0b:ff:a2:28:d5:cd:b8:ee:7c:a9:69:a5:eb:44:24:
                    28:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:91:BC:03:81:35:21:45:A1:72:D8:7F:B8:FE:F5:66:19:DB:A4:FA
            X509v3 Authority Key Identifier:
                keyid:62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1c:9e:72:d0:f8:94:08:c6:ad:7b:b9:7e:dc:67:31:39:a3:
         d9:e3:a4:88:a8:44:e6:a7:69:2c:42:bb:65:49:cd:10:9a:02:
         d6:a7:5f:1e:c8:7e:9e:fc:72:45:93:ae:55:c4:42:d4:08:5a:
         64:fe:f8:4b:9b:6a:8c:69:6b:a5:66:a9:d9:dd:ef:b5:f0:22:
         16:4c:c6:0f:73:3b:27:a0:ce:fd:7a:94:d2:c7:d4:61:b9:15:
         33:9d:95:b4:b8:6e:39:37:74:e2:53:3b:19:82:68:6d:59:da:
         1c:26:fc:b1:5b:16:bb:0e:9a:5c:c8:71:19:ca:6b:44:7f:81:
         17:84:81:1b:16:62:49:92:a2:27:25:02:43:6c:e5:3e:81:ca:
         f9:c4:03:ea:3c:6f:58:82:af:ef:c0:74:f5:a3:15:50:5c:87:
         33:c9:d1:1b:20:7d:f9:2d:6a:37:bf:db:b9:98:e6:1f:58:12:
         de:6d:c7:de:05:14:b5:aa:76:a4:9e:13:aa:88:5c:74:3c:c1:
         8c:a6:de:a2:d2:cb:25:42:ee:6c:ab:09:b9:54:40:c7:c3:da:
         1a:39:8b:ec:df:c9:0b:b2:27:2f:1d:ff:0a:f4:fe:1f:dc:9b:
         4d:a1:b3:cf:c5:d3:75:ea:c6:40:62:6b:9a:37:28:fc:f6:d3:
         03:6e:f7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:18:36 2026 by rpki-client