Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
File:                     Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft (raw, json)
Hash identifier:          ABe+k3CWJUfJQ2NhY/tCFBr0wTn6Zdea6TZ8+evxSLs=
Subject key identifier:   D9:EA:8D:FA:92:40:9C:F3:D0:A7:CE:46:C0:7E:A6:94:DC:4E:05:BC
Authority key identifier: 63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81
Certificate issuer:       /CN=A9118689/serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
Certificate serial:       01B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
Manifest number:          01AA
Signing time:             Mon 11 May 2026 04:08:48 +0000
Manifest this update:     Mon 11 May 2026 04:08:48 +0000
Manifest next update:     Mon 18 May 2026 04:08:48 +0000
Files and hashes:         1: Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl (hash: Vrwv46BqMz1FPUMvwxJFm+5zpwKil0XeVy5mS1U8NXc=)
                          2: D1D880A6C4FB11EEA30ECF34C4F9AE02.roa (hash: MByRbKBm+JUM4LT1eboClzkfZWMq5pWfRvnvdbt+Df4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl
                          rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118689, serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
        Validity
            Not Before: May 11 04:08:48 2026 GMT
            Not After : May 18 04:08:48 2026 GMT
        Subject: CN=6a015650-8dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:2c:5e:b5:0a:67:3b:19:68:e8:4d:79:2f:
                    97:f4:60:2a:17:f3:7f:7f:c1:ca:d8:92:f0:ea:ce:
                    f4:86:2b:5f:e0:15:09:bd:39:7c:68:d7:f3:7a:71:
                    84:27:e7:99:20:5b:7b:a4:6c:50:96:f1:df:68:bf:
                    22:71:1d:c1:29:b4:31:69:59:b8:cb:f3:ef:fb:22:
                    06:6e:60:55:63:2c:e4:03:61:a7:2d:73:52:7e:0f:
                    46:31:13:9f:eb:11:ba:76:4f:9c:56:a6:14:54:8b:
                    a4:7f:47:93:45:65:c3:92:91:a3:cd:ed:4d:2c:18:
                    e5:da:49:e2:7e:d0:89:82:74:94:8c:c0:5e:78:5e:
                    1b:aa:4b:00:92:86:64:7e:ac:48:f9:ff:5e:77:9d:
                    9b:30:b8:d3:ec:e2:1b:2a:45:aa:ac:70:24:56:1d:
                    be:00:62:a1:fc:97:9b:94:cc:1a:e8:c2:b0:d9:36:
                    42:e8:9e:d9:11:4c:e1:59:9d:f5:8d:f9:47:5c:ab:
                    f7:49:14:4f:ef:16:db:10:0a:04:a4:a3:53:4e:80:
                    7d:83:67:02:bf:ad:c5:3b:55:cb:55:1a:10:f4:62:
                    fd:4f:d6:70:38:46:3a:5a:d5:c3:8b:3c:e4:25:2b:
                    9b:de:94:b3:74:65:27:39:c5:e4:65:a0:a7:4a:85:
                    88:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EA:8D:FA:92:40:9C:F3:D0:A7:CE:46:C0:7E:A6:94:DC:4E:05:BC
            X509v3 Authority Key Identifier:
                keyid:63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:07:fd:30:96:08:a0:36:62:81:ce:31:9c:55:8e:a6:da:a4:
         1b:79:a5:92:71:e9:b6:b5:47:a5:2d:4a:0f:0c:5c:d9:a0:1a:
         60:0d:c3:0f:de:b5:21:5c:bf:f6:07:2c:0e:65:12:6f:e6:4e:
         55:44:ac:9d:8b:8f:05:7a:d4:b0:fc:72:93:f0:63:d2:9c:29:
         29:25:9e:9f:e1:49:d6:ea:0b:f8:e2:53:ba:b1:34:c2:72:78:
         dc:47:04:50:9f:76:96:ac:db:f0:68:90:ee:fc:cb:0c:4a:09:
         bb:29:d6:7e:9b:84:0c:60:06:c4:6c:ae:3b:0e:c4:3a:b6:59:
         c4:74:48:07:db:9d:81:71:cd:86:ce:39:23:c5:32:02:53:08:
         2d:e9:b8:79:43:b6:06:4e:50:d4:97:b1:a9:dc:8a:0b:c1:3f:
         be:ec:97:a7:92:44:b0:69:5b:d6:f9:65:2c:b1:28:57:08:25:
         e6:c1:c7:ad:7c:45:a2:dc:e6:db:90:7b:e3:ce:68:c6:d1:33:
         81:9b:b2:91:97:b2:f5:bd:0f:aa:b4:d8:e3:6d:a5:66:a5:7c:
         d0:1a:ef:04:0e:bf:c2:c2:63:03:d1:43:7f:69:ab:1f:f0:18:
         dc:15:87:c6:8c:4c:4d:2d:e6:c8:8a:5a:b9:48:9e:c2:80:b2:
         f7:32:9a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:07:51 2026 by rpki-client