Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
File:                     zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json)
Hash identifier:          sFNlHO/IDV0CPOCdQfjgvIGzhHPs8rdbyDPmZsS6w58=
Subject key identifier:   EC:55:98:3D:3F:1A:15:92:CD:7B:0E:1C:E1:00:75:F9:C7:34:A7:35
Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
Certificate issuer:       /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
Manifest number:          01D2
Signing time:             Mon 11 May 2026 03:46:04 +0000
Manifest this update:     Mon 11 May 2026 03:46:03 +0000
Manifest next update:     Mon 18 May 2026 03:46:03 +0000
Files and hashes:         1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: /xUF432w7sAK+TzQCjmC0apKFPY9kGtJoHXUcd3VXGk=)
                          2: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: KXFtRkkFX0jxsfltHXamlZ+jG+IhfgzkLv0dS+9a8To=)
                          3: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: ARuPA5StUqswZMj5Q2BXw5Z0iKJJC2awoPAkKPCdInM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
                          rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
        Validity
            Not Before: May 11 03:46:03 2026 GMT
            Not After : May 18 03:46:03 2026 GMT
        Subject: CN=6a0150fc-e819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8b:b7:e9:bf:7b:5f:81:59:5e:ed:78:8b:5a:
                    13:ed:2d:99:7c:55:f3:41:ac:f7:84:cb:30:93:fe:
                    b8:3e:d2:83:18:79:29:c4:ae:38:05:c8:a3:60:89:
                    87:df:b8:87:e8:cd:a7:db:e5:b3:42:4e:df:0a:43:
                    d7:bd:71:29:f8:97:f2:95:1a:81:e9:57:99:da:15:
                    62:23:6a:9b:0d:ab:a7:b3:b1:9a:d5:06:b9:7f:c0:
                    a9:e8:5e:80:42:8c:82:4f:4a:4d:a4:10:25:e3:9f:
                    a9:92:ad:cd:69:d1:b0:85:3e:f3:48:5f:bc:0e:87:
                    db:35:8a:f9:d7:2c:cf:32:ca:30:b2:44:af:0a:1f:
                    2c:a7:bc:fe:f8:c9:56:63:4a:9e:69:83:82:37:ff:
                    c9:9f:9d:ea:22:fe:79:67:34:ca:9a:5e:0e:63:5c:
                    46:cc:0f:b8:a8:aa:50:c9:30:3f:86:2f:3d:6a:1b:
                    6f:7d:b9:c5:01:40:ef:3e:8f:ca:8b:7f:f1:1d:dc:
                    5f:0c:ab:01:85:4a:7f:d8:b7:9b:7d:65:02:e2:e2:
                    cd:dd:a1:d1:d7:d8:3e:90:1a:ca:80:d5:97:f0:34:
                    64:56:32:3e:bf:5e:41:ea:92:c3:35:60:42:aa:ee:
                    57:d7:fa:89:12:42:a5:b3:00:0e:5b:bf:f1:4e:5b:
                    47:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:55:98:3D:3F:1A:15:92:CD:7B:0E:1C:E1:00:75:F9:C7:34:A7:35
            X509v3 Authority Key Identifier:
                keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3b:a5:f1:fa:79:c9:0f:02:ca:5c:b6:0e:c1:ff:d4:4e:8e:
         09:ad:07:04:0a:b6:23:20:3a:1e:85:9f:60:8f:86:de:d4:a6:
         93:f8:a9:87:e9:e4:45:55:1e:7f:f5:2b:f2:d8:2b:76:8c:9a:
         5c:fc:d3:a7:a4:dc:ae:69:b3:aa:40:4e:78:b6:2f:69:da:20:
         99:06:bb:1e:95:04:a3:e3:7b:61:5b:eb:9f:a2:23:bb:e9:b7:
         40:13:4b:e3:f9:a5:28:91:fd:df:cc:b1:e3:10:2a:f3:62:51:
         17:e8:d2:60:45:58:6e:b9:fa:d7:77:68:ea:ab:27:e8:ef:5c:
         43:04:7a:29:d8:d2:d6:99:1a:9d:77:c1:50:ae:e1:9e:02:52:
         dc:82:5f:78:a4:06:f7:2d:0b:4f:a4:ba:19:c9:11:27:40:95:
         7a:79:43:8c:60:fc:c9:4f:e0:97:a5:61:dd:24:91:de:4c:59:
         da:0c:91:ae:a5:72:c4:d7:f2:1f:3c:bb:2b:df:8f:41:d0:f4:
         ed:37:8f:97:25:11:18:c6:a0:a1:85:8d:fc:c1:3b:53:70:23:
         1d:44:b3:1a:8f:d5:30:6e:ad:ea:77:d2:3a:25:8e:3b:3b:45:
         d2:aa:14:b8:9b:ac:6d:f8:30:ad:26:7d:5d:ed:cb:55:b9:10:
         a6:69:cf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:28:57 2026 by rpki-client