Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
File:                     yoPUPlpeWcd1mxubL72YqUff07w.mft (raw, json)
Hash identifier:          Uzq9AcNCDkl3eLVbtNh7ROiF0sVvtghoHsfhom4d98I=
Subject key identifier:   08:AF:D1:4C:F0:B1:A2:BC:0E:22:D1:FD:9B:B3:AE:4E:97:7D:4F:FB
Authority key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC
Certificate issuer:       /CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
Certificate serial:       114E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
Manifest number:          111D
Signing time:             Tue 12 May 2026 17:19:14 +0000
Manifest this update:     Tue 12 May 2026 17:19:13 +0000
Manifest next update:     Tue 19 May 2026 17:19:13 +0000
Files and hashes:         1: yoPUPlpeWcd1mxubL72YqUff07w.crl (hash: tP2LGQ52XtfiyQP9m2cAJzVrkzkzKbqcqBWZCZIOJSs=)
                          2: AAAA30A6288411EEAD22D65DC4F9AE02.roa (hash: 7K/QpVAO7JoVbT1z1p+Qj6Yu5pdtMluMhKw9vV8LigY=)
                          3: 7B306A34218D11EC87C96D6DC4F9AE02.roa (hash: UaBguah8aqrFfyBedD0PzoPcWPfm260vsagvZpaZCng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl
                          rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4430 (0x114e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6, serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
        Validity
            Not Before: May 12 17:19:13 2026 GMT
            Not After : May 19 17:19:13 2026 GMT
        Subject: CN=6a036112-579d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:17:1a:f5:f8:b0:3a:8c:e0:54:86:c5:02:
                    66:2e:38:c8:43:42:0b:f7:ec:4a:ab:89:6c:ef:66:
                    8e:f6:c6:d0:f6:fa:69:84:5b:ae:e7:62:92:e3:27:
                    a3:7a:e2:32:34:df:cf:8b:f0:d5:3b:d4:f6:d2:d1:
                    22:b7:ac:85:94:d6:6f:47:a0:a7:b7:88:dd:2c:0a:
                    53:fc:54:64:db:87:1b:c9:fb:1d:81:b9:60:79:ad:
                    96:d8:53:00:97:9d:f3:7b:0c:7a:3b:a2:0c:13:2c:
                    aa:d8:c4:ea:e5:a0:6d:05:f9:3d:3c:d3:6f:42:8e:
                    b1:89:4c:1f:9a:3f:e1:4b:a7:d4:51:69:92:61:a3:
                    05:a1:b4:73:c9:03:c5:9c:96:55:8b:c8:36:dd:e2:
                    07:73:06:d3:70:3d:f6:d7:38:d7:af:48:02:d7:a6:
                    7b:ae:ce:91:e7:59:8d:21:d8:7a:c7:59:40:f9:1e:
                    35:b5:a3:fa:8f:6e:24:a7:71:cf:2c:4d:f2:5e:97:
                    00:b2:89:c7:0e:76:90:b5:57:5b:cb:14:de:c9:4f:
                    a3:6b:aa:3f:83:ac:34:cb:ba:8e:a6:9b:a7:7a:c5:
                    ca:dc:34:4a:2c:d2:43:48:75:f4:68:e5:f6:e2:0e:
                    82:39:fe:4f:83:d6:cc:34:80:72:5f:9c:53:37:4e:
                    b7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AF:D1:4C:F0:B1:A2:BC:0E:22:D1:FD:9B:B3:AE:4E:97:7D:4F:FB
            X509v3 Authority Key Identifier:
                keyid:CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:37:93:3d:71:8d:22:f9:7f:40:2c:b6:93:dd:de:04:2e:d8:
         1d:c0:f3:7e:40:94:54:3d:df:ff:76:f2:2f:16:25:2b:9f:b3:
         80:46:8d:66:b2:a4:36:1c:3f:c6:2a:d5:cd:79:ff:16:0d:71:
         a9:1b:d1:74:5a:50:c0:4a:85:6f:3e:c3:d5:be:bc:97:06:5a:
         41:b7:d9:50:ce:aa:2d:b6:b0:32:66:c0:c1:f2:79:79:d8:03:
         f4:2f:7e:8d:f0:37:9d:dc:2e:32:64:10:e0:32:fa:34:16:e2:
         b3:45:ec:3f:10:c2:4c:20:ee:1e:ea:5d:d5:57:62:6a:a3:65:
         ad:63:20:2d:bd:23:fa:28:96:cf:6e:67:f5:8e:65:16:0d:4f:
         4d:e7:b3:e8:15:01:88:fb:5b:0f:0c:bf:32:55:39:b3:c1:5d:
         61:a8:c7:47:40:2e:50:8c:4e:f6:a8:78:9e:3d:e9:a2:14:f1:
         99:08:d4:be:87:02:8d:ee:d7:10:81:bf:99:e4:dc:ab:7d:ad:
         2d:df:3f:18:47:11:f8:54:7e:27:96:53:5b:28:ff:f6:68:d9:
         ca:eb:93:21:1e:ec:81:ae:23:6f:ad:a9:38:54:e8:d3:ef:49:
         55:e3:96:b0:f9:c7:fa:bf:bb:72:fb:22:57:c9:4b:95:83:02:
         72:a5:b2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:44 2026 by rpki-client