Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
File:                     yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json)
Hash identifier:          m0p0Y87RNEFY1VNd4ywtFrGvLyP7h8uP4vMq2QHhZTQ=
Subject key identifier:   5B:52:4C:7B:E0:34:56:2A:6E:79:E8:71:25:CD:7C:E6:D3:7D:29:AC
Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
Certificate issuer:       /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
Manifest number:          0101
Signing time:             Wed 13 May 2026 06:19:38 +0000
Manifest this update:     Wed 13 May 2026 06:19:37 +0000
Manifest next update:     Wed 20 May 2026 06:19:37 +0000
Files and hashes:         1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: 4jEacgdJERb5I0tEY9hHIGfxPWKRm2vmh6eP7P2ySsg=)
                          2: 7CC84384BCB711F0BD57E909C4F9AE02.roa (hash: wuMfV4Prav1vTN6DDOAaG6aXaeJ/i3o0GNDpEUWZL6g=)
                          3: 7D3521CABCB711F08B02E909C4F9AE02.roa (hash: VHWzuR8NTDaBmGYmSm5ZS2QGGvm+Hb7NngfwNUpxxQc=)
                          4: 7C5A543CBCB711F08806E909C4F9AE02.roa (hash: TnUIMsTLLUWLq6RKFJvvlaICGc8yJRHnp3bZVmKD+K8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl
                          rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
        Validity
            Not Before: May 13 06:19:37 2026 GMT
            Not After : May 20 06:19:37 2026 GMT
        Subject: CN=6a0417fa-bb0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:26:b6:c9:2b:30:da:a1:ec:ca:c8:3f:5c:
                    f4:7a:36:a5:9e:81:26:27:99:36:1a:8b:2c:c3:f7:
                    d3:c5:97:cc:25:2b:87:ff:b7:0b:60:36:96:57:8f:
                    e5:5b:0e:dd:8f:af:18:2f:87:26:d5:0d:6d:98:bb:
                    0b:37:a0:80:bc:fa:3a:ee:fa:e9:b1:b0:a3:b5:6c:
                    19:bc:65:24:cd:80:9f:88:7e:46:bd:cc:8e:b7:b2:
                    96:e2:53:89:af:c5:bc:7a:89:c0:1d:42:60:f0:12:
                    17:41:e5:9e:fb:bc:2e:f9:42:8b:d6:c8:8f:92:3e:
                    14:7e:9b:91:d7:55:43:de:99:97:25:cb:dc:aa:47:
                    34:29:55:16:e7:c3:e3:88:57:0a:32:0d:0a:e6:68:
                    d0:c2:90:bc:67:63:72:11:70:1c:98:2a:54:ff:25:
                    fb:22:5e:0b:7f:0d:0d:fe:12:63:99:34:a2:ab:9e:
                    43:89:5d:84:1d:21:9d:50:00:dd:ad:f2:6e:b8:7b:
                    0d:d4:de:b9:d7:14:9f:0b:ad:f8:b6:1b:a2:78:cb:
                    b0:3c:84:89:04:6c:75:00:d1:ac:1a:be:68:71:c2:
                    26:31:89:b2:27:cc:18:27:1a:0a:12:7f:39:38:37:
                    cd:7d:44:c5:c1:26:48:f9:89:b9:2a:f9:c5:e0:26:
                    cd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:52:4C:7B:E0:34:56:2A:6E:79:E8:71:25:CD:7C:E6:D3:7D:29:AC
            X509v3 Authority Key Identifier:
                keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0f:a2:00:eb:f7:f0:e0:01:34:d2:3a:d7:6b:bf:30:76:8b:
         20:17:65:bd:04:cc:d5:35:52:02:76:3f:68:28:ac:a3:f3:ef:
         8a:aa:22:14:0c:ed:38:ce:d2:dc:8a:89:e4:2c:7b:d1:1a:9a:
         24:25:3a:41:41:f9:24:87:e0:ab:76:43:98:2f:40:8d:7a:c5:
         a0:38:ae:c6:b0:3a:a4:8a:d0:6f:4b:1f:08:76:8b:4b:b2:cf:
         6f:e1:f4:95:24:89:c5:69:b2:9a:24:ae:cd:be:1b:35:80:6d:
         b2:e4:f5:65:4f:0b:d4:b0:7f:84:dd:33:1c:2f:95:23:25:09:
         57:ae:68:cb:29:1d:64:51:63:22:4a:75:ca:f3:c4:46:86:52:
         b1:f3:36:41:5d:d6:4a:19:0f:1e:82:7e:bb:20:7e:c3:6c:20:
         a2:d1:ea:db:aa:7a:9a:8d:61:dd:ed:bf:73:bb:1c:41:f5:35:
         59:76:7a:83:ca:50:3c:bb:52:d2:79:d9:a4:ad:3f:48:f0:2e:
         3a:39:fc:44:e0:cd:2b:a4:3f:dc:91:c5:23:81:96:a4:ea:58:
         ed:df:d8:a0:c5:00:fe:61:8b:12:ed:d0:bb:04:76:bd:1c:a6:
         00:89:83:0e:3d:c2:6f:58:37:bb:f2:d3:99:ea:b6:29:57:7b:
         aa:e6:d5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:43:14 2026 by rpki-client