Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
File:                     YhmdhUkwna_yWfpPdr5svUb3VDA.mft (raw, json)
Hash identifier:          uESwy4FOcIAGD6pYXt2ekIyYYUX9mH5dECYkUs2OVCw=
Subject key identifier:   08:54:00:EE:1B:A9:1B:86:3D:7C:FC:F4:92:C2:82:BC:70:5F:58:B9
Authority key identifier: 62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
Certificate issuer:       /CN=A9147A12/serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
Manifest number:          45
Signing time:             Mon 11 May 2026 08:35:28 +0000
Manifest this update:     Mon 11 May 2026 08:35:27 +0000
Manifest next update:     Mon 18 May 2026 08:35:27 +0000
Files and hashes:         1: YhmdhUkwna_yWfpPdr5svUb3VDA.crl (hash: AonT80kIufIR3tswgX9sbJKpxxPazZj3DXlKmjXLidY=)
                          2: 7C0561D8F10111F088AEA117476F56BC.roa (hash: bvjE5gKi0dnMwElXsvOJv3B2jZW9VC7vW+lIUb5fRcU=)
                          3: 8CCD4284ECEB11F08F189C11746F56BC.roa (hash: oXPncN+3aYpFsSF2Bg4m0rRfBQEaHOJ4BwB2L4dJwpo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl
                          rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147A12, serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
        Validity
            Not Before: May 11 08:35:27 2026 GMT
            Not After : May 18 08:35:27 2026 GMT
        Subject: CN=6a0194d0-c9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:85:60:4d:59:59:d1:de:2e:fc:f1:bd:a5:80:
                    8f:f6:48:77:17:48:3b:c1:e4:f8:88:2a:e2:51:13:
                    ff:28:5d:ef:19:9b:ed:08:8b:0a:49:3f:de:4b:38:
                    bf:2e:cf:36:2c:0d:10:92:64:71:8f:bb:d5:15:5a:
                    e8:8d:a9:6f:c4:09:66:a3:50:96:1e:87:1e:69:01:
                    b2:96:86:4e:ae:60:44:a5:d2:9d:64:90:c4:96:ba:
                    cd:ed:8d:98:42:2d:a2:26:34:df:77:08:a7:ef:4a:
                    d9:bb:57:b4:88:ca:f8:32:ac:38:9c:37:08:ab:e5:
                    db:9e:fe:1f:ab:aa:0c:5b:02:f2:7d:70:ff:1a:d1:
                    d4:d1:88:47:95:31:6e:a4:07:8c:00:9d:0b:b5:b9:
                    b8:5a:9e:80:c4:a9:f7:dc:4e:54:72:29:36:6e:e9:
                    53:d5:61:95:41:7d:37:20:58:0b:36:84:ac:ff:49:
                    e1:a0:39:2e:a6:c5:67:6e:62:20:39:94:a3:fa:ba:
                    40:b6:44:7f:cf:d3:b6:00:e1:09:26:fb:e9:03:c8:
                    90:81:64:28:8a:3e:b9:1b:f9:0d:e3:59:d5:05:45:
                    2f:80:f7:0b:b8:ef:ff:9d:a4:4b:17:bd:a1:5e:01:
                    0a:98:9a:5d:00:fc:40:9a:b4:eb:c9:fe:ea:77:5e:
                    fe:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:54:00:EE:1B:A9:1B:86:3D:7C:FC:F4:92:C2:82:BC:70:5F:58:B9
            X509v3 Authority Key Identifier:
                keyid:62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:aa:1f:75:1f:9d:33:9c:26:d5:53:87:49:8c:06:61:24:5c:
         48:50:95:77:9e:43:1d:04:b3:54:96:82:34:02:2a:7c:ed:30:
         1d:ae:83:99:b4:2a:e6:36:de:c8:47:db:c5:c5:a2:7f:15:7b:
         b8:c1:72:18:64:c4:8f:b6:7c:4a:b9:c2:15:f6:98:56:b8:85:
         ff:26:dc:8f:ac:8a:e2:2b:55:71:79:8d:78:f4:35:d0:c8:70:
         60:f9:b9:1f:9f:99:eb:d2:59:da:89:65:75:f9:48:f8:d4:f9:
         8e:96:57:40:fe:9e:f0:14:bb:56:86:97:ae:c1:c1:da:fd:4e:
         7c:8f:37:b1:fe:d1:2a:31:bb:4b:af:ab:b3:0c:4a:88:8d:f0:
         28:38:05:25:33:61:99:75:9c:6a:f3:f7:9b:30:6a:fb:c7:32:
         41:01:ba:43:b8:4e:ae:75:32:a7:b3:60:9c:30:e5:30:3c:57:
         7c:43:51:e7:a8:4a:fa:88:86:d2:2a:95:0c:44:3f:37:c1:f2:
         af:f8:3e:b1:c2:93:9d:2e:82:ad:2a:9b:3c:38:c8:67:50:bf:
         19:75:0a:6d:35:9a:34:17:1b:69:00:87:21:38:97:df:e7:7e:
         ba:99:5e:84:20:85:9c:c6:96:db:9f:c6:f8:6b:dd:63:cf:f8:
         fd:11:aa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:05 2026 by rpki-client