Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
File:                     YmINYNuoUorqQhLM7bcpYTqZFVw.mft (raw, json)
Hash identifier:          hyTh9k/j8Wtp96ltftjYMjGgYkrKgh21GCddIacNtyU=
Subject key identifier:   87:54:96:15:A3:FA:D8:5B:2F:72:10:D7:60:4C:FB:4B:DF:EA:77:7D
Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
Certificate issuer:       /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
Certificate serial:       040E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
Manifest number:          0406
Signing time:             Tue 12 May 2026 22:00:08 +0000
Manifest this update:     Tue 12 May 2026 22:00:07 +0000
Manifest next update:     Tue 19 May 2026 22:00:07 +0000
Files and hashes:         1: YmINYNuoUorqQhLM7bcpYTqZFVw.crl (hash: cM90CQMbOppGVKoosoWrYc9314nPp+QkRFKES9GHYzI=)
                          2: C9E2B406804111EEA6703F81C4F9AE02.roa (hash: s9x9gIirWntlK8Owx596ebxdwlOGog5ZPg7HYcpO694=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1038 (0x40e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5, serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
        Validity
            Not Before: May 12 22:00:07 2026 GMT
            Not After : May 19 22:00:07 2026 GMT
        Subject: CN=6a03a2e7-3642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:52:04:73:44:58:15:e5:c7:6d:34:0a:77:
                    8c:4c:e5:80:55:4c:32:76:6c:1d:7a:58:02:d9:ef:
                    ed:f6:cd:fb:19:49:5c:12:2d:02:ff:0a:c9:df:e2:
                    ff:45:a7:8d:e8:f3:e2:b6:f9:22:6e:80:ee:ab:40:
                    57:7e:59:c8:92:d0:8a:19:f5:51:03:4a:26:9c:55:
                    a0:cf:d5:de:2e:d4:02:4e:07:37:80:fc:d7:b6:fd:
                    56:7e:2b:39:b5:5f:3e:66:2b:99:03:22:9f:ca:27:
                    5d:18:0f:f4:b0:46:1d:77:d3:1a:6b:46:c3:69:d7:
                    88:92:f3:f5:7b:15:bb:5b:86:a4:fd:59:43:6b:51:
                    8d:73:00:1b:43:da:7c:25:26:8f:11:6e:b1:34:4e:
                    69:a7:cb:a6:5c:9b:64:e5:46:37:0e:b4:59:4c:59:
                    aa:74:30:6c:f7:a9:15:1f:de:a5:ad:6f:1e:7f:a6:
                    44:bc:df:3c:00:bb:3e:47:53:33:79:92:c7:27:24:
                    9c:a4:02:3f:68:a4:37:2c:a4:20:6e:46:c1:f7:83:
                    f9:e3:bc:3d:94:59:e8:1b:a8:86:36:ac:79:25:d6:
                    81:1d:3a:34:db:68:69:4f:bb:7e:4d:3e:3a:45:85:
                    f0:85:23:d2:53:f7:58:c9:1a:d8:ef:51:53:d5:79:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:54:96:15:A3:FA:D8:5B:2F:72:10:D7:60:4C:FB:4B:DF:EA:77:7D
            X509v3 Authority Key Identifier:
                keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:82:b2:1d:5e:30:cc:9f:7b:ca:4f:2f:e9:2d:a2:b3:82:cd:
         98:06:c5:bd:75:93:e9:42:1b:86:72:32:5e:9a:11:9b:25:7a:
         bb:90:35:0d:60:2f:cd:cb:34:7d:37:58:34:6d:43:cc:8d:7d:
         f0:3f:6b:77:cf:55:89:f2:46:a3:81:6f:65:d2:0c:c8:21:36:
         df:c8:c5:34:c1:20:f3:c5:2d:d9:f2:5d:35:2b:3c:e4:8b:ce:
         d9:ba:11:14:87:a3:56:b5:7d:e1:6d:d9:1f:89:a5:8e:6d:6a:
         95:2b:83:ba:42:c1:3f:da:e0:65:db:8a:c8:89:d2:4a:1b:38:
         6c:a9:b3:91:bd:6d:eb:d4:0f:92:78:27:43:08:13:4c:7d:57:
         78:43:03:0e:4e:0e:33:85:d2:15:a2:26:fc:26:30:a7:33:dd:
         c2:a1:bc:44:7a:3d:79:bf:b3:c6:da:89:57:9c:0d:5c:9c:1f:
         0a:05:b6:91:97:6f:52:ff:75:cc:74:c9:2c:4f:35:ab:11:7a:
         6f:95:fe:f5:15:54:28:c4:ce:4c:2d:ae:30:9a:56:8d:43:cf:
         84:f3:40:e7:de:71:1b:77:73:83:ce:53:15:87:26:0e:87:c8:
         db:2a:bc:ae:0e:75:db:a6:24:c0:df:3b:8d:ff:a2:84:ef:c5:
         57:94:30:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:54:47 2026 by rpki-client