Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
File:                     YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft (raw, json)
Hash identifier:          0+sgjC3NZ0wVeSIuJAp8jwB6kfi97mBN9aYyO46fyAQ=
Subject key identifier:   1C:92:80:51:11:A2:2E:53:9C:03:BA:FF:C4:09:AA:64:10:1B:3C:0C
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       06CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
Manifest number:          0621
Signing time:             Tue 12 May 2026 23:04:50 +0000
Manifest this update:     Tue 12 May 2026 23:04:50 +0000
Manifest next update:     Tue 19 May 2026 23:04:50 +0000
Files and hashes:         1: YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl (hash: UC6xVfOkr0Un8He23SgOSa+M3k4iTFTRMAAi2LCy8As=)
                          2: DB208FD4175911EC87322F85C4F9AE02.roa (hash: cJTkfxanvIj+RM9OMhYOY3C3bXPLhNB/j9ZiLmWvJ4M=)
                          3: 3A9DF21A178411EC83735974C4F9AE02.roa (hash: wIbYsh/hItpf1FaU4uJEJakBW02mq1IFUdy9tNUpxj4=)
                          4: 3F780E2A179211ECB303FF58C4F9AE02.roa (hash: mSIvH4Gi+T1y6gFOjB4Y+pWqnrIDj+Mx9XwrmpuQ8qw=)
                          5: 3B398B8A178411EC83735974C4F9AE02.roa (hash: jepYWPzCxGmh/GQlfw9G88MeUoi1KXNr+jBvdSKu2EU=)
                          6: 7E42E396175111EC8D2A3722C4F9AE02.roa (hash: 5SeDKnVW+Z2bZrOh/tUD/fazda7G0sNTdN9LtEAWN7E=)
                          7: 04545D1C9AB911ECBC6CFA20C4F9AE02.roa (hash: bfM/I9MI61wpx9SI9z0ncpfFzbqWQMVFRjvnxiVGThE=)
                          8: DA504F0E175911EC87322F85C4F9AE02.roa (hash: bC2UE2VmY1gflbaTcYGLmz6R86UeQbBi5GPFc7aGC20=)
                          9: C6B686020E7811EF85000B7BC4F9AE02.roa (hash: ZJmUX2G6Tl+kycQRHjPwdULRZJWUs4ScsOffcVitw8g=)
                          10: 7EF28CBA175111EC8D2A3722C4F9AE02.roa (hash: IhpgMXVhUYugw7nNSA1+ZnbHjLI9c5SxOlLFwueit3I=)
                          11: 7DAE1400175111EC8D2A3722C4F9AE02.roa (hash: tX0MTPWA9P2CY1G2KCJQGGM6TFNQMY0kmhuwfNbndgE=)
                          12: 8293F5FC179711ECB7F7A075C4F9AE02.roa (hash: l3SoQw2Kbr40xk9JE2geXsImyws3yLJRcPxUIxNF/vg=)
                          13: 27A1A5A2174911EC896AD61BC4F9AE02.roa (hash: zUix48EdQq0BIeEP+F00ihYlfB76GvYk5qHGU11xzgo=)
                          14: C74D18CE0E7811EF85000B7BC4F9AE02.roa (hash: q/oyJF+c7xMBWWu1hrOqXPzTS58cWYtyCiOvHXnwGqs=)
                          15: D97BFEC0175911EC87322F85C4F9AE02.roa (hash: W217Cvl+a3RS3snx4LYy35dWortZRD2tZixavhdLGx8=)
                          16: 16637998DB5311EE9F9F1F75C4F9AE02.roa (hash: 1+Pf4CxXczREzjqp7Ph5y8t73GX+ZHQlj5fHrRYlZ4o=)
                          17: 283A4D20174911EC896AD61BC4F9AE02.roa (hash: DjM7q7I1ucrVqfadsEwZCZGq+Rdib//rFO93Zb885F8=)
                          18: 3BE907D6178411EC83735974C4F9AE02.roa (hash: tFk/h7QxdaaYpeNdRusqQ5yvBEm+neo77X+gkWKcJG0=)
                          19: 7FCB16B6175111EC8D2A3722C4F9AE02.roa (hash: tT/fnjB2azP2c1Bes9KkfGycw+0VmrQqgMxit51iAYE=)
                          20: 1B31B0E4270E11EC97471F53C4F9AE02.roa (hash: IxcEdM3NtqIWpGs5CaLmmTvLz8ooYXKO4DZfm0izdno=)
                          21: 0BE2C2AE36D111F1B4901F67AE833773.roa (hash: oRPOW5SFjLGq4iF31y2k2anTHXUpIRk/WJRjUgk+qFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1743 (0x6cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: May 12 23:04:50 2026 GMT
            Not After : May 19 23:04:50 2026 GMT
        Subject: CN=6a03b212-15fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5e:fb:68:2f:f8:10:9c:c1:fe:f0:0e:2c:36:
                    2b:d3:a1:8b:e8:2e:4f:6d:32:aa:24:d7:d9:cb:34:
                    22:df:db:50:c6:73:47:93:24:10:d4:c1:16:a2:17:
                    5f:81:81:f4:9f:16:2b:49:1c:65:ae:d2:27:dd:28:
                    65:a6:93:ee:49:9b:df:5c:63:33:c2:89:fd:8e:98:
                    4d:cf:28:d3:6a:fe:c7:66:66:70:54:64:fd:99:81:
                    48:d0:23:3d:90:2c:b2:d4:8c:b9:75:25:6f:fe:38:
                    0d:e9:c5:62:26:9b:a9:c9:ec:15:01:f2:b6:cb:48:
                    3e:0f:40:69:79:17:1f:8b:c3:5e:fb:9f:80:f2:f7:
                    73:6f:ce:f9:75:bc:46:8b:21:e5:1d:db:09:3f:47:
                    4a:52:1f:54:1b:33:60:29:95:7e:c6:af:df:9b:0e:
                    8e:ef:ec:5a:ff:87:58:e7:1d:0e:32:18:92:86:b4:
                    f3:f1:5d:e5:cb:ad:51:b3:89:b3:b7:57:60:08:36:
                    9f:31:1d:5c:36:3e:be:c1:78:f4:19:15:f2:3f:50:
                    e9:a6:db:4e:ee:ff:4d:27:91:67:62:86:46:9d:6d:
                    89:b0:77:d7:e2:5d:ae:3a:3f:8e:fe:0e:46:1e:53:
                    6d:02:43:b4:cf:28:07:72:ab:44:6b:7e:02:e2:2c:
                    43:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:92:80:51:11:A2:2E:53:9C:03:BA:FF:C4:09:AA:64:10:1B:3C:0C
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:37:4e:56:57:02:ec:37:d4:da:0d:2e:33:5b:b4:6c:c3:38:
         c4:b2:dd:69:06:9b:c6:40:a4:97:76:e6:dd:cc:8a:cb:6d:7e:
         19:fe:ef:7d:1b:9f:f1:ad:32:ca:52:84:4e:09:76:bc:1a:63:
         3b:4c:4c:9d:c9:d9:3f:31:81:9c:f2:49:01:f4:86:b1:8e:4a:
         34:1d:a0:2e:09:16:aa:61:35:d8:94:ad:0d:b6:90:09:0a:33:
         cb:b5:5c:7a:06:a7:1a:6f:4c:28:67:af:f1:a3:85:8f:fa:4d:
         cc:46:b0:8c:6b:6d:53:d5:ce:6e:fd:c2:86:02:21:52:8f:2a:
         7a:5c:55:ed:02:30:b6:b8:3e:ae:b8:48:3f:33:48:99:53:8a:
         1d:2c:30:8e:8e:d5:7b:73:52:18:5f:4e:15:33:2e:65:cf:17:
         cb:82:21:13:11:60:56:4a:d2:fb:e2:0b:b7:6e:bc:cb:b9:03:
         26:ec:ab:dc:c3:36:9b:e0:77:df:f2:6a:f0:05:1a:05:d9:9c:
         dd:d7:95:5d:bc:8f:4a:ba:f2:9c:60:70:15:37:2a:72:57:35:
         4c:1a:71:61:03:1e:63:a2:46:50:83:3d:d8:84:54:24:ed:93:
         28:4c:ab:fc:57:0d:4d:f4:3c:50:95:93:70:43:7b:27:a7:03:
         bb:7f:1e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:42:16 2026 by rpki-client