Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.mft
File:                     YrFUuAkE6pwnkEc1WAKf2XoEc7M.mft (raw, json)
Hash identifier:          hiOIUkUBGIRX/iRi9FhQk8y6+h5BC1krdJIpvqLPZLM=
Subject key identifier:   1D:9F:8F:95:C3:78:80:2E:AE:EF:25:D5:14:A2:39:F1:8D:67:D3:ED
Authority key identifier: 62:B1:54:B8:09:04:EA:9C:27:90:47:35:58:02:9F:D9:7A:04:73:B3
Certificate issuer:       /CN=A9115620/serialNumber=62B154B80904EA9C2790473558029FD97A0473B3
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrFUuAkE6pwnkEc1WAKf2XoEc7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.mft
Manifest number:          013D
Signing time:             Wed 13 May 2026 05:28:10 +0000
Manifest this update:     Wed 13 May 2026 05:28:09 +0000
Manifest next update:     Wed 20 May 2026 05:28:09 +0000
Files and hashes:         1: YrFUuAkE6pwnkEc1WAKf2XoEc7M.crl (hash: GF9Bm4R+XNOpds9jaISBZIm96/Z4qeGh36oQWMlhzd4=)
                          2: 83B2675C6BA911EFADEBED84C4F9AE02.roa (hash: jEbTl1dy3t2akGjkXyIfyFC++X66othj+RdQ2W+UA2E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.crl
                          rsync://rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrFUuAkE6pwnkEc1WAKf2XoEc7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115620, serialNumber=62B154B80904EA9C2790473558029FD97A0473B3
        Validity
            Not Before: May 13 05:28:09 2026 GMT
            Not After : May 20 05:28:09 2026 GMT
        Subject: CN=6a040bea-f660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e0:54:99:7a:3b:4d:6e:99:82:41:9d:24:8a:
                    11:af:dd:f8:28:79:69:35:8c:69:69:7c:c3:b7:77:
                    9b:b2:66:94:51:44:d9:ea:29:08:01:4a:dd:6b:46:
                    48:80:5f:e5:0a:0d:0f:ff:39:4d:f0:e2:03:b5:d8:
                    ce:30:22:99:c1:41:c7:f3:33:63:fd:f6:c1:15:13:
                    2d:c3:01:1d:27:7e:e8:a3:d9:af:ee:cb:cd:bd:8e:
                    77:8e:c9:c0:b2:d7:e9:64:48:48:68:d6:b2:50:13:
                    e1:ff:68:95:e8:ab:93:f0:dc:f7:17:98:97:b8:18:
                    e7:04:4f:ac:b2:99:a1:ae:78:2d:4d:57:c8:01:c4:
                    e7:1b:73:30:c3:18:54:db:d5:24:ba:7b:af:01:c7:
                    bf:7a:76:14:43:d7:fe:2e:9a:41:c3:97:7f:30:e2:
                    b0:bf:88:91:7b:a6:95:7a:32:07:d0:25:19:56:d4:
                    fb:fd:a1:2e:25:38:e4:c3:fa:6e:db:ff:dc:5e:fa:
                    57:32:9f:a1:f0:df:a4:30:1c:5f:f5:8f:be:3d:52:
                    9f:33:ff:3d:01:13:43:38:63:cc:b1:7c:47:94:3d:
                    73:98:8e:2f:9a:16:80:fd:27:4c:07:38:08:48:a4:
                    b4:b7:76:25:08:d5:14:ee:c1:35:d5:57:4f:32:8e:
                    61:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9F:8F:95:C3:78:80:2E:AE:EF:25:D5:14:A2:39:F1:8D:67:D3:ED
            X509v3 Authority Key Identifier:
                keyid:62:B1:54:B8:09:04:EA:9C:27:90:47:35:58:02:9F:D9:7A:04:73:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrFUuAkE6pwnkEc1WAKf2XoEc7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:af:f3:f2:ce:87:f6:9f:b4:fc:da:b6:e1:29:d0:ca:09:8f:
         5f:fe:00:07:56:a5:11:58:70:73:a1:0f:90:34:e9:0a:5d:3c:
         3c:79:46:21:7e:15:af:5f:ab:de:5f:58:d4:c8:3c:98:90:03:
         91:a6:4b:79:eb:7f:e9:b0:ad:a1:ae:fd:1c:7d:3b:fe:57:7f:
         04:7f:9f:1a:90:79:3b:34:8c:2c:b1:1a:5b:d8:e7:c3:ac:a0:
         bb:f9:19:a9:9c:15:af:6a:92:cd:d4:33:6a:a3:9a:d9:97:89:
         03:fd:b1:d8:2b:f8:34:6f:9a:7c:5e:00:07:61:da:4d:ee:8e:
         db:69:03:c9:8f:ea:51:7f:5f:59:63:1b:41:90:bd:9f:bc:b3:
         76:d7:14:26:8d:a8:7e:f6:29:f1:59:4a:26:57:95:67:ad:9e:
         e9:cd:24:03:be:4c:c0:09:69:3f:54:79:1e:69:4a:ae:e0:16:
         36:77:da:d3:da:6d:fd:b8:85:c2:79:a1:0b:cd:5d:cb:a3:17:
         46:d1:ff:0f:f0:c1:8c:c0:38:b0:05:8a:53:82:87:d8:a7:8a:
         19:9c:d1:a4:05:ca:9c:84:45:a7:67:1e:9a:0e:af:d1:2e:d8:
         aa:e2:cb:55:4d:d6:eb:df:ca:83:ce:97:0f:c0:57:0a:bd:73:
         74:f1:81:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:33:25 2026 by rpki-client