Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft
File:                     YNExg9Od5pVlYCMefgMX5py8bA8.mft (raw, json)
Hash identifier:          2orgro3nxGzhCwf7LkhEYzL+eMwo6QXE36s2P0/QZaU=
Subject key identifier:   2B:B3:80:9F:B0:A1:4F:01:1E:9B:6B:E8:D9:67:C8:C9:6A:96:44:23
Authority key identifier: 60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F
Certificate issuer:       /CN=A9131D31/serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F
Certificate serial:       1199
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft
Manifest number:          117E
Signing time:             Tue 12 May 2026 17:13:39 +0000
Manifest this update:     Tue 12 May 2026 17:13:39 +0000
Manifest next update:     Tue 19 May 2026 17:13:39 +0000
Files and hashes:         1: YNExg9Od5pVlYCMefgMX5py8bA8.crl (hash: ZoCH9vyRVbSrgxABZLMvD/fYJSOH7EE2YGH6kv/vykY=)
                          2: 1F8D757623B811E9971D8168C4F9AE02.roa (hash: h7HO39Q7zMhgQ+X4Dcbn9QwUY6p9Y6Cv8Yvqueoqv+c=)
                          3: BA310DEC23B611E98E5E6062C4F9AE02.roa (hash: tkQkh0SeDKmYlFagbGUi9uFru4fwo8KYtzlYsDdAl6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl
                          rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4505 (0x1199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131D31, serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F
        Validity
            Not Before: May 12 17:13:39 2026 GMT
            Not After : May 19 17:13:39 2026 GMT
        Subject: CN=6a035fc3-0045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:22:8e:b0:f5:a7:06:76:54:c6:cc:6e:5c:80:
                    d0:bf:47:04:00:ad:6e:a8:72:b0:0d:f3:5b:82:4d:
                    73:84:2e:82:25:e6:00:1d:2a:e8:58:03:91:23:2d:
                    75:c3:fc:fd:42:9e:a0:5e:dc:71:c6:30:89:a4:36:
                    6b:48:af:ce:d4:0c:a5:eb:5e:f2:83:52:e2:32:a8:
                    ec:d4:2a:61:9b:91:b9:27:25:50:6b:90:e6:72:36:
                    8b:ba:50:25:2d:04:df:eb:de:cb:a4:4d:a8:f9:61:
                    08:4c:eb:d6:5d:b7:a8:12:b8:f9:4c:b5:2c:21:a7:
                    08:49:bf:50:6d:2a:9a:a2:ee:f6:9a:6f:44:99:a6:
                    29:78:9a:c1:55:a8:d8:93:75:da:6c:f4:1f:95:dc:
                    1c:9f:9f:1f:23:4f:40:8d:b3:3c:e9:ac:3e:7d:9c:
                    a0:bd:13:cc:c5:73:a5:f2:10:42:59:18:8e:a3:4f:
                    3c:d0:7b:d8:3c:bd:62:96:c5:a2:34:71:45:32:63:
                    a9:3b:d6:0a:3f:ff:86:9c:9e:97:1f:85:cf:88:4d:
                    e5:11:d9:df:0b:05:7c:b6:6d:4b:ef:7e:27:d8:81:
                    50:c7:2d:1a:31:75:92:51:a8:88:b7:2c:19:98:53:
                    c5:40:0e:45:de:99:80:a5:49:80:7f:5f:c9:e8:06:
                    7a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B3:80:9F:B0:A1:4F:01:1E:9B:6B:E8:D9:67:C8:C9:6A:96:44:23
            X509v3 Authority Key Identifier:
                keyid:60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:bd:8a:1d:15:ad:5c:80:a2:e1:d9:a2:03:bc:97:80:1a:ed:
         ab:ba:af:2d:3b:69:c9:6a:6b:25:7a:d7:b5:3f:0f:cd:e1:60:
         af:dc:80:9a:9f:59:33:15:0d:05:a0:52:8c:31:e7:50:92:a0:
         87:54:81:3d:e6:d1:a8:89:9f:31:11:57:cf:79:c8:49:89:1a:
         7b:db:fc:d5:91:1a:20:ce:67:bf:b9:80:99:65:18:31:7e:a9:
         87:61:50:fc:56:2d:9b:ca:0b:cd:da:ab:17:6f:ea:5d:7e:5c:
         59:22:61:4e:81:55:57:2f:5c:c7:1b:b3:15:3d:d7:d2:ce:ed:
         82:dd:99:f0:cc:32:cd:67:8b:cb:8a:b3:62:a8:a7:d0:d4:c1:
         cd:f2:25:36:b2:0b:b4:ca:95:0e:23:97:cd:29:2b:76:01:67:
         8e:88:5c:5d:83:b7:c1:03:92:45:ae:22:df:21:d4:a0:cb:27:
         b8:87:b4:3c:3b:5f:04:76:f0:7f:19:ac:4a:6d:d6:c4:6c:c4:
         6b:ca:60:be:60:62:93:32:fc:e5:85:2e:9d:39:23:69:07:b1:
         8e:e6:e8:ed:f8:a1:f0:63:fc:d5:05:98:d4:28:c6:d7:ec:70:
         cf:95:ca:52:91:cf:ee:1b:03:62:88:de:fa:ee:01:00:38:c4:
         cf:a2:dc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:47 2026 by rpki-client