Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
File:                     YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json)
Hash identifier:          Unl1XGyaXot0qpq0p/XvlEieJtPXQegSj1o9WwPRiJw=
Subject key identifier:   3A:37:BC:3E:D1:95:B6:C5:02:87:9D:C4:40:57:8A:34:3E:8D:DB:0B
Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E
Certificate issuer:       /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
Certificate serial:       01BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
Manifest number:          01B7
Signing time:             Wed 13 May 2026 04:04:11 +0000
Manifest this update:     Wed 13 May 2026 04:04:11 +0000
Manifest next update:     Wed 20 May 2026 04:04:11 +0000
Files and hashes:         1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: /ssG1GU9iF7hcc8hHzlEbXSb8oIGDi/X5uQLdgosw1U=)
                          2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: ExYQsL4DX6Hi4BKxNjsrHvE6gNcBGNmimGeGw2+s/0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl
                          rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
        Validity
            Not Before: May 13 04:04:11 2026 GMT
            Not After : May 20 04:04:11 2026 GMT
        Subject: CN=6a03f83b-3f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:85:5d:32:85:09:e2:e8:fc:23:fd:a4:a5:
                    5c:fb:81:48:4f:ec:70:d2:a4:b5:52:92:c1:2e:7d:
                    32:18:d5:0d:36:f3:f5:7c:cc:e5:02:2b:7a:36:d3:
                    cb:c4:a0:33:69:05:a3:bc:4a:d5:96:75:17:35:93:
                    d1:54:8e:89:52:92:b0:33:4b:0e:fb:9c:6e:32:51:
                    c5:bd:c8:58:6f:46:98:4b:8d:40:45:55:4a:63:fa:
                    12:48:78:9b:31:5d:e3:5c:c8:73:8b:b4:c3:97:e0:
                    ad:b5:a3:62:d4:c0:49:8f:d8:76:69:8d:ec:bb:48:
                    f2:bb:5b:c1:48:e4:3a:a6:3d:6e:f1:53:23:c6:89:
                    f1:97:15:89:dc:8b:dc:29:16:47:58:21:69:96:87:
                    6a:3e:39:d7:de:e4:31:c1:08:5e:c3:ff:b8:32:02:
                    3a:df:b1:84:1a:74:ba:9c:5f:90:75:36:d0:f5:02:
                    e2:65:6c:56:c1:db:92:2f:55:92:47:17:08:4e:8c:
                    bd:2a:b1:3a:26:6b:81:9b:2f:72:97:62:7e:e1:1d:
                    42:5d:af:07:71:f6:df:31:51:1d:6d:15:a8:18:60:
                    24:7f:22:7a:25:74:4f:a6:27:c9:b7:90:af:eb:15:
                    4d:68:95:cd:de:a7:38:b1:75:99:d7:b2:39:30:17:
                    09:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:37:BC:3E:D1:95:B6:C5:02:87:9D:C4:40:57:8A:34:3E:8D:DB:0B
            X509v3 Authority Key Identifier:
                keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:dd:f0:a5:21:9b:d4:07:b1:bd:58:6b:35:19:7d:cd:e0:
         0c:06:73:fe:37:85:ea:e0:c2:df:fb:bb:64:a7:41:58:bf:7e:
         9c:35:13:91:14:1e:66:0e:7c:ab:52:9d:32:b5:76:f3:e6:b4:
         b3:db:c4:da:04:11:97:b7:b8:21:b4:1a:6a:08:ec:fc:5f:f5:
         92:64:e9:0d:97:36:ba:51:84:fa:24:61:2c:62:bb:38:82:eb:
         e7:c1:3f:f7:ca:c9:99:fe:08:f3:a6:22:7c:34:af:d8:77:77:
         52:02:0a:68:3b:aa:9e:39:c1:eb:f9:16:8b:8c:7e:d5:3a:00:
         52:25:5c:e3:5b:3d:ec:e9:34:70:8d:e2:fc:5c:16:d4:34:1d:
         0b:83:a9:01:3f:79:cb:c2:b3:2c:ca:45:68:e0:62:33:9b:e5:
         49:0c:be:d2:ea:36:70:d4:7d:39:a9:48:8e:62:72:b1:ee:0c:
         39:64:06:c6:e4:50:b0:cf:ac:fa:98:a8:b3:85:68:b2:58:19:
         d8:82:9a:62:f4:cf:7e:19:32:3a:dc:e2:d0:f5:d4:de:f2:cb:
         2b:6c:c9:1b:bb:25:3c:4c:1f:02:a5:81:e3:82:f1:41:d1:f9:
         26:8f:2d:8f:e6:9c:08:0c:5d:2e:48:53:95:9a:fd:12:0c:bb:
         26:04:b9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:47 2026 by rpki-client