Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
File:                     YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json)
Hash identifier:          /xpHcWKq+UvSlWI77KII2GEYV889ffjMrNbURDE0Xos=
Subject key identifier:   26:1A:5D:D9:21:A5:BE:CC:1C:1A:D3:EA:D3:82:EB:6B:C0:D2:34:97
Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4
Certificate issuer:       /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4
Certificate serial:       0D66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
Manifest number:          0D55
Signing time:             Tue 12 May 2026 18:03:58 +0000
Manifest this update:     Tue 12 May 2026 18:03:58 +0000
Manifest next update:     Tue 19 May 2026 18:03:58 +0000
Files and hashes:         1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: LZSjlrGpFso2iWOy+BXh60NshTHU38oZY+TwSbjVl44=)
                          2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: pILIYLSoyXCPBfvCRHzHdNoR3Vcxlvl1vIwUNhIpUCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl
                          rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3430 (0xd66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4
        Validity
            Not Before: May 12 18:03:58 2026 GMT
            Not After : May 19 18:03:58 2026 GMT
        Subject: CN=6a036b8e-8136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:e3:4b:75:30:e1:de:46:cf:12:06:fd:c6:
                    1a:9a:79:89:2a:10:8f:22:c6:22:fc:2e:b8:8d:31:
                    26:7c:3b:c5:5a:97:eb:78:dd:65:42:c8:2a:a2:5b:
                    50:f0:09:e9:19:dc:5b:bc:24:ce:4a:ea:92:4d:7a:
                    c9:40:fd:21:49:f8:bf:f6:1c:1f:09:1c:d0:65:90:
                    d0:fe:01:a2:a2:d0:a7:22:5b:e6:ad:04:18:49:a7:
                    2b:37:b0:55:39:48:0e:84:07:50:2a:87:c4:bf:30:
                    aa:9c:46:4e:a3:01:8e:e3:dd:10:8d:9c:fc:f2:5c:
                    c1:82:83:20:df:7b:ed:88:ff:86:cd:e2:b8:d8:4f:
                    18:04:e8:86:51:91:f5:6e:6d:89:7a:26:be:12:1b:
                    68:87:02:7e:6b:8b:32:ae:43:97:1b:23:3d:74:46:
                    eb:01:25:3f:47:58:0a:98:37:a0:b4:1f:b4:09:05:
                    69:78:a5:bc:91:9b:a2:78:73:07:47:bd:bd:82:8a:
                    d0:f7:ca:4b:a1:63:42:64:eb:84:9a:97:d2:81:54:
                    5a:fc:e0:b3:3b:75:a3:f4:69:9a:98:be:96:38:b6:
                    f5:7c:ad:ef:a7:4c:ba:05:a2:a9:6d:43:a0:dd:60:
                    b1:d6:48:63:cb:c6:fb:1a:c1:4d:29:9a:d0:fe:5d:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1A:5D:D9:21:A5:BE:CC:1C:1A:D3:EA:D3:82:EB:6B:C0:D2:34:97
            X509v3 Authority Key Identifier:
                keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:06:49:00:01:65:95:0e:cc:9f:90:60:24:bd:36:c4:2a:6f:
         d2:d5:63:a6:ce:30:df:e9:89:28:93:96:ee:9b:32:4c:9b:11:
         13:10:ff:cd:d0:0c:55:bf:31:d2:d2:80:ed:c1:de:e6:42:66:
         bc:26:c4:78:05:06:9a:80:12:02:1d:2d:34:77:e5:58:3b:bf:
         c5:d8:3c:da:47:4d:41:d9:22:e8:f6:9b:0b:c8:f8:80:dd:e4:
         1f:6d:d9:79:78:51:96:28:95:dc:e1:7e:52:65:e2:2d:d0:c1:
         d5:d8:0b:f7:b9:4c:01:38:b7:d0:93:e2:52:3a:57:9e:b7:9c:
         eb:51:80:c9:00:a1:6b:62:a4:e2:93:ba:15:59:5f:f9:59:f3:
         9d:d8:1f:af:0b:63:d4:d7:3e:ac:e3:69:94:52:1a:72:6e:d9:
         f6:ba:8c:cc:d7:19:44:23:40:e3:1a:9d:17:3e:16:7e:55:a0:
         22:80:8b:8f:a9:29:17:40:9f:f7:f6:16:ae:62:d2:0f:57:a9:
         5f:79:f3:f6:5a:96:f3:61:95:79:7e:5a:a7:c0:53:bd:80:70:
         52:f4:66:38:95:38:1f:48:d2:69:d1:cf:40:81:78:5b:c5:42:
         11:96:90:fe:65:e4:af:63:6d:98:de:c3:8e:74:db:7e:03:f9:
         3f:4e:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:39:15 2026 by rpki-client