Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
File:                     Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft (raw, json)
Hash identifier:          VOTWw+W5ymoqCxvCXeN/FIFvBOwR1YlW5bFhC+DQfKI=
Subject key identifier:   E1:75:56:8F:49:86:81:7F:83:02:91:3E:F2:5E:29:84:F7:1B:A3:0E
Authority key identifier: 63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
Certificate issuer:       /CN=A9147B58/serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Certificate serial:       066A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
Manifest number:          0661
Signing time:             Tue 12 May 2026 22:44:03 +0000
Manifest this update:     Tue 12 May 2026 22:44:02 +0000
Manifest next update:     Tue 19 May 2026 22:44:02 +0000
Files and hashes:         1: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl (hash: xERoQ6H70m7mv1EJ/63pKEOvwA9qz/w+c29eujVv5Xw=)
                          2: 657BCA62CABC11EB8D6D063BC4F9AE02.roa (hash: 9P+/XWI1mTR2CKwLdPvtfOBgjyqZfC7ZNyD/mGLr3KU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
                          rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1642 (0x66a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147B58, serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
        Validity
            Not Before: May 12 22:44:02 2026 GMT
            Not After : May 19 22:44:02 2026 GMT
        Subject: CN=6a03ad33-facc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:91:11:34:35:2d:59:c3:43:5d:7c:1f:cc:f0:
                    d0:eb:8b:5b:e0:23:6b:79:37:c7:a7:c5:52:d5:d4:
                    6f:01:0b:a9:b8:77:a3:81:08:31:f8:6b:f3:3c:f5:
                    27:3c:b7:18:98:12:8b:66:13:ab:a4:a0:50:e4:25:
                    ed:12:69:18:9c:d4:cc:94:00:97:13:62:c4:84:9d:
                    00:b0:ad:e7:6c:a8:d2:23:48:3e:e6:2b:12:32:a3:
                    e9:a1:a8:e2:b8:46:3e:a0:3d:16:56:15:74:8c:10:
                    32:28:d1:fa:b1:9d:96:a8:2e:a9:06:67:d1:60:00:
                    82:4e:23:53:b4:53:9f:50:df:47:88:1d:36:46:d3:
                    dd:37:44:d8:8c:35:bc:fb:87:b6:d7:4e:b9:d7:2d:
                    77:4d:2d:85:fe:4a:5e:0f:eb:f0:94:a3:d3:2e:7e:
                    b7:ce:2b:56:8d:67:4f:7e:99:60:f3:2f:4c:11:25:
                    df:b5:5d:cb:2b:21:06:1e:58:0f:5d:85:b5:f1:51:
                    52:27:5d:0d:02:c8:4a:3b:a7:af:28:a2:6b:a7:05:
                    a7:68:5b:67:fc:af:01:1f:24:08:cb:ba:c7:7c:ff:
                    b0:01:da:99:4c:03:c9:90:21:21:2e:a4:d0:56:28:
                    5c:e0:3a:7c:73:db:36:0f:24:b1:72:5e:5a:e2:6c:
                    b4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:75:56:8F:49:86:81:7F:83:02:91:3E:F2:5E:29:84:F7:1B:A3:0E
            X509v3 Authority Key Identifier:
                keyid:63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:9e:15:db:dd:9e:0a:36:22:2c:de:89:df:37:18:b0:78:4e:
         4f:a2:fa:3b:6c:ca:7a:f9:10:3f:0c:41:d3:63:56:a2:3f:00:
         83:1f:d1:53:96:5f:20:dd:49:26:77:86:28:bc:75:d1:12:4b:
         b3:96:89:39:ea:54:92:35:36:76:8f:0f:e4:2d:9c:fb:aa:7d:
         4b:0f:36:82:91:c0:68:4f:07:4d:92:c6:57:f3:11:54:cd:b4:
         4a:e8:a3:4b:20:30:47:1a:33:68:f8:84:d1:4a:f3:1e:20:ad:
         46:ea:61:fe:99:e7:a8:ed:ef:47:0b:76:f1:ff:b7:10:d7:ec:
         d8:13:5f:43:0d:32:ac:65:c0:ef:ff:15:2f:81:08:64:ce:57:
         c4:ee:c2:1a:a1:08:a7:36:5f:0b:3c:44:e7:f3:f6:7e:f6:97:
         07:72:48:8c:e6:88:50:03:cd:cc:4c:93:de:b1:73:54:0f:6f:
         68:34:aa:50:8d:c2:44:ec:e0:8b:5d:72:92:34:0e:cc:56:cf:
         de:79:97:85:92:95:ba:e2:b4:e9:ae:ac:78:84:2c:c5:6f:b2:
         bc:a0:c3:21:b1:64:98:0e:cf:8f:7c:36:0a:27:78:4d:cb:ba:
         1a:84:06:c4:3c:44:bb:11:98:9d:25:10:e2:74:6b:ed:a4:8e:
         3c:8e:37:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:13:19 2026 by rpki-client