Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
File:                     YfjH66e1XnGy5rF3QJFCUdiM8KY.mft (raw, json)
Hash identifier:          Vs7phccSP/bhfI8ocLKr3KulwrZ9b7/gMRhdQTOEYXI=
Subject key identifier:   5C:0C:59:E1:D8:A6:19:3A:5E:57:F7:17:FA:8C:CF:20:7E:AD:25:34
Authority key identifier: 61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6
Certificate issuer:       /CN=A9158491/serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6
Certificate serial:       010A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
Manifest number:          FF
Signing time:             Mon 11 May 2026 06:27:29 +0000
Manifest this update:     Mon 11 May 2026 06:27:28 +0000
Manifest next update:     Mon 18 May 2026 06:27:28 +0000
Files and hashes:         1: YfjH66e1XnGy5rF3QJFCUdiM8KY.crl (hash: 4j28DODWAE7PUhLxE5UAvPF8MYlaF9SOjZ2BTrPHyZI=)
                          2: 5FDDEE1CE34211EF8EA0CA77C4F9AE02.roa (hash: +tOM25MCKNoZft+0ItL3rfD0x3Jm3+5ljYXYPQKuHQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl
                          rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158491, serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6
        Validity
            Not Before: May 11 06:27:28 2026 GMT
            Not After : May 18 06:27:28 2026 GMT
        Subject: CN=6a0176d1-8958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:52:84:7a:d8:ac:8e:81:f4:ae:c8:f4:83:
                    94:9f:02:82:ce:d8:5b:cb:f4:35:21:08:8f:01:bd:
                    01:2c:56:98:75:d6:15:b0:4e:41:a2:8e:5f:bf:80:
                    4b:83:26:78:a4:08:39:7c:ae:7a:44:f2:37:23:21:
                    34:f9:28:f0:ea:76:4f:bf:51:47:07:4d:99:91:96:
                    c1:ad:56:ec:b7:fd:55:d4:5a:82:96:d6:01:19:f9:
                    83:12:73:24:f0:b7:bf:79:98:b7:77:7f:96:e6:52:
                    fc:8f:45:8a:35:ba:ae:7f:6f:2f:18:99:2c:88:53:
                    e4:5b:91:5e:05:34:28:34:4d:ee:b2:5a:c6:8f:db:
                    13:38:a6:c8:5d:ca:a1:4c:3c:8e:d5:21:e4:ea:aa:
                    ee:c7:e6:18:43:ce:c8:f8:db:5a:f9:cd:69:bf:22:
                    2f:17:62:56:f4:6b:ba:9e:ee:d3:f9:74:ff:41:3d:
                    3a:28:a6:ab:27:f3:ed:c0:f1:d9:f9:b6:a1:58:28:
                    62:06:77:4f:b9:51:a8:e4:9e:54:90:60:b1:77:13:
                    f0:ed:5b:02:dd:f7:cc:b7:d6:f1:cb:08:68:76:d7:
                    af:ef:4d:aa:0e:87:f8:67:54:5a:82:5a:f6:80:ba:
                    bd:59:d8:0f:0f:e5:de:79:29:3a:41:07:63:7b:f3:
                    82:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0C:59:E1:D8:A6:19:3A:5E:57:F7:17:FA:8C:CF:20:7E:AD:25:34
            X509v3 Authority Key Identifier:
                keyid:61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:5d:3c:0e:de:b9:71:3e:0a:ac:c4:59:44:34:42:76:c6:c1:
         74:50:df:a7:c3:a1:5f:4f:e7:0e:df:16:67:2c:99:90:40:88:
         ff:59:06:e6:03:ee:11:35:df:b4:ca:f1:e6:74:0c:c0:63:3e:
         e2:fb:25:8d:a4:66:b1:8e:f7:81:27:72:59:bd:c2:2f:21:11:
         b6:0a:6e:2f:28:a9:d0:c4:86:f0:a3:29:c7:84:81:e0:e7:1a:
         66:3e:10:9e:e4:19:d1:d8:5d:2e:db:91:24:cd:1c:96:19:25:
         a0:1d:54:4c:ad:ea:33:37:e0:2f:ba:72:c6:a2:f6:81:42:83:
         be:b3:3c:b9:f2:fc:7e:32:db:18:a9:bd:8b:c4:e6:2c:32:96:
         b1:25:f2:fa:e1:af:49:a2:ad:a1:f1:91:d9:ef:e9:d0:81:e8:
         2a:05:86:f0:c9:77:72:b9:63:c5:2a:95:cd:5b:f8:f9:2d:70:
         93:2b:3b:c3:55:7d:91:c5:32:30:83:21:b7:d0:9f:a2:8b:77:
         9c:b0:fa:69:fc:97:eb:9d:18:7f:8e:4f:39:55:55:c8:7e:d3:
         6b:73:b2:b5:5a:29:29:42:4e:62:2c:4e:62:ec:b0:69:f6:dc:
         8b:ce:d1:18:dc:83:e1:3b:0c:98:66:0c:0f:6a:8a:e0:9a:2e:
         4e:30:1d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:10 2026 by rpki-client