Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
File:                     YGtPQu6X90iOwgtj2LGq9tQtnKc.mft (raw, json)
Hash identifier:          x/X9Phd21Saj0pOGZjPXJ1PtK3Huxw4HHTgzqIGVhZQ=
Subject key identifier:   8B:C1:0E:2F:AD:24:48:69:49:90:B0:75:AE:F6:E5:62:B0:1F:12:AE
Authority key identifier: 60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7
Certificate issuer:       /CN=A91523FF/serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
Manifest number:          82
Signing time:             Wed 13 May 2026 07:44:21 +0000
Manifest this update:     Wed 13 May 2026 07:44:20 +0000
Manifest next update:     Wed 20 May 2026 07:44:20 +0000
Files and hashes:         1: YGtPQu6X90iOwgtj2LGq9tQtnKc.crl (hash: x3b10m4XCYC4WqStIB755J7etNmZk++FTSEUN/iMlSo=)
                          2: 720ED6F487CB11F0B605C67DC4F9AE02.roa (hash: DkL8mKFGzHdVRylK1rD4tLxN/q/oxjuNdQSmCvoiiL8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl
                          rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 07:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91523FF, serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7
        Validity
            Not Before: May 13 07:44:20 2026 GMT
            Not After : May 20 07:44:20 2026 GMT
        Subject: CN=6a042bd5-7d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:95:be:73:fd:d1:0a:ab:c2:62:04:16:f1:
                    49:7f:11:0e:cd:88:8f:5d:32:09:2a:40:74:79:31:
                    b7:8b:c1:7d:c6:c2:be:c0:90:ea:eb:4f:38:65:fb:
                    7c:1e:60:ac:b0:d6:3e:3c:ef:ca:ef:59:04:2e:d4:
                    e4:c1:cc:1b:8c:41:56:7a:84:66:06:54:2c:4f:b5:
                    a9:e4:0a:36:f2:3e:aa:2e:a6:ab:f9:2f:7d:58:19:
                    db:ca:d6:e2:9a:d6:6d:49:69:cf:d2:41:6a:b7:72:
                    59:c5:f5:02:04:13:60:31:fc:f5:30:40:4d:82:1b:
                    bd:09:5c:e6:fc:dd:aa:2c:ff:17:71:0a:86:63:16:
                    3f:15:9c:2a:81:cd:ab:04:56:b4:f5:12:0d:e1:31:
                    89:bf:1f:80:af:19:ef:db:03:eb:17:4b:52:62:33:
                    12:25:bb:a2:9e:92:70:8f:e0:c1:18:74:5b:70:0a:
                    6d:63:23:b7:eb:0b:c4:b1:3a:12:e6:fc:4b:48:63:
                    0b:ea:2e:21:72:39:ae:57:23:cc:2e:e8:04:56:8f:
                    4e:30:15:d1:67:85:40:a5:70:09:ff:26:f9:49:6a:
                    bd:41:61:c0:3c:dd:62:6d:0b:d5:dc:aa:f0:14:62:
                    7b:03:c7:75:61:42:08:88:bf:7f:40:d1:a7:e8:b2:
                    6b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C1:0E:2F:AD:24:48:69:49:90:B0:75:AE:F6:E5:62:B0:1F:12:AE
            X509v3 Authority Key Identifier:
                keyid:60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e5:76:5c:99:8a:aa:52:b3:ba:f5:8a:1d:c5:f6:73:9f:67:
         cc:11:de:a3:6c:bd:65:1b:69:c6:30:79:dd:2f:7d:11:4a:a2:
         04:ce:5a:0b:6e:26:4f:f8:a7:a8:dd:99:73:ae:1f:dd:6f:73:
         b0:7e:08:b1:d3:82:19:d9:d5:b2:ab:75:3c:78:11:9e:14:00:
         ba:86:ba:5d:19:8d:3e:9e:fd:4b:5b:b8:b4:51:a4:59:9a:43:
         06:82:99:6e:a6:3c:b9:6f:53:de:a5:ff:24:39:aa:57:de:f9:
         be:f9:2e:6e:37:77:fd:8a:18:bf:b5:35:40:41:70:63:ab:b2:
         71:37:58:b8:4a:42:01:85:76:68:06:da:ac:e6:78:ca:d6:e2:
         3a:d5:e1:b0:ec:7c:b3:8d:21:88:ec:4c:24:35:b4:54:19:42:
         a4:74:f2:da:7d:86:5f:92:dd:9c:27:f7:32:b2:45:35:c4:a2:
         e6:c3:b3:ae:49:3d:3c:28:e3:14:6a:22:05:8d:73:e1:d3:63:
         84:95:b0:d1:c5:73:97:d0:cd:cd:53:c8:b0:f4:86:19:1d:4c:
         70:14:dd:96:a8:0d:33:96:4b:c6:69:f2:8f:d9:cc:39:39:9e:
         d7:97:26:49:73:ac:a2:6e:cb:73:0b:d3:ee:e2:b2:28:04:f3:
         30:8c:c0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:46:39 2026 by rpki-client