Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft
File:                     y1sC0Pxzbip6stKIoPwzFnpLvO0.mft (raw, json)
Hash identifier:          st/R/VJf6ABWwtmieNUrCeSvm4Bv942loaN92Nt7oAg=
Subject key identifier:   92:DC:C5:D1:5A:83:2F:41:1B:B9:A1:A2:6D:4C:EF:42:49:65:7B:C4
Authority key identifier: CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED
Certificate issuer:       /CN=A9129F1D/serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED
Certificate serial:       027E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft
Manifest number:          0277
Signing time:             Wed 13 May 2026 02:01:32 +0000
Manifest this update:     Wed 13 May 2026 02:01:32 +0000
Manifest next update:     Wed 20 May 2026 02:01:32 +0000
Files and hashes:         1: y1sC0Pxzbip6stKIoPwzFnpLvO0.crl (hash: 0HbjZec/lh69JXa/i6PIwBa19eqTEfl0KM+o1nypWf4=)
                          2: 3E122AE0876011ED84335D46C4F9AE02.roa (hash: lMy4Wa3bZNfZogKIHMCZaFATHLOtC1FrGFIRZTmFan8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl
                          rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 638 (0x27e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129F1D, serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED
        Validity
            Not Before: May 13 02:01:32 2026 GMT
            Not After : May 20 02:01:32 2026 GMT
        Subject: CN=6a03db7c-50b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:a2:4b:c2:96:b6:56:9c:b3:ec:4b:d4:1c:
                    2e:40:52:0c:36:d7:18:98:af:7f:d5:57:fa:64:32:
                    eb:4f:8c:3e:f2:b8:3b:46:e4:de:18:8b:f0:2a:ae:
                    78:a2:90:00:86:10:73:73:bf:38:c2:04:07:2f:dd:
                    38:ac:9d:c2:70:6e:f7:cb:ba:9c:cf:82:67:80:55:
                    5e:1a:13:24:bc:4f:41:e1:ec:44:a2:94:21:83:86:
                    6d:55:f7:27:66:10:34:94:e5:2e:74:a8:d0:59:d3:
                    80:2e:42:10:0e:30:03:46:83:00:41:71:16:80:a3:
                    b2:e6:3a:63:d6:6f:8e:44:d2:88:98:d4:e8:6b:58:
                    eb:dd:70:47:b7:ce:09:17:87:09:24:c2:2a:e0:6f:
                    ed:3f:4d:16:45:16:90:c2:7f:f5:3e:ea:ba:3c:ae:
                    f2:61:ac:84:6d:2c:a6:dc:90:80:17:4e:d0:76:25:
                    27:d9:81:39:d7:5b:23:b8:58:2c:a6:bd:ea:e0:88:
                    a0:99:d5:dd:8f:bb:ee:c1:da:bd:84:9e:97:a1:16:
                    1d:06:e2:31:f2:ca:df:ef:d0:76:eb:f1:26:25:8b:
                    52:e1:cf:54:7c:4f:b4:45:f6:d9:4c:7e:03:61:60:
                    9c:0c:95:ea:d3:2e:d8:fd:06:03:9d:10:eb:3a:1b:
                    05:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DC:C5:D1:5A:83:2F:41:1B:B9:A1:A2:6D:4C:EF:42:49:65:7B:C4
            X509v3 Authority Key Identifier:
                keyid:CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:65:a3:6b:fb:96:5a:04:48:df:70:bd:68:dc:7c:4a:1b:4b:
         b4:a0:d0:f5:50:b8:b0:03:de:fb:1b:24:39:22:85:a7:73:71:
         1a:f5:46:1e:fd:11:61:20:b7:31:f0:ba:a6:67:b1:34:a9:b9:
         bd:37:dc:92:fe:27:0e:95:55:a0:07:4f:42:e7:83:e7:5a:d0:
         cd:f0:88:4d:ff:6c:52:aa:c6:71:c2:f5:e7:a6:d4:89:89:fa:
         d5:d5:5b:f8:de:25:8f:ff:6d:cb:17:24:e8:33:15:63:3c:b0:
         9a:10:2c:4d:36:e8:55:ae:f6:06:5f:eb:cd:77:0f:fb:a5:25:
         0f:18:6e:98:b0:61:e0:4a:62:ed:72:98:6f:1c:a9:9f:cc:b1:
         71:78:50:d2:d6:97:53:2b:19:75:58:a6:aa:a7:81:01:7e:5d:
         38:c1:cd:19:59:fe:c3:7a:8c:89:2e:9a:21:92:e7:52:a0:de:
         53:ab:8f:0b:cc:5c:21:44:4f:04:2d:96:22:44:ab:76:8a:cf:
         f9:fe:de:29:62:9a:19:87:61:fb:35:18:e6:b8:61:18:fc:6f:
         0e:cb:19:71:1f:7b:92:4a:f7:bd:da:f7:fa:3b:e4:d8:d4:85:
         52:50:54:55:65:9c:94:2c:3c:f7:56:89:e1:9b:10:c8:3e:6b:
         5d:24:32:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:09:53 2026 by rpki-client