Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
File:                     YV7YTETmV_cJXgISr-oFLFQqDZE.mft (raw, json)
Hash identifier:          yCHAdl8RCpkbMD08EHf/bJgJM1i+RJAqi8WSs3wL2mE=
Subject key identifier:   88:7C:8E:8D:3A:A9:A5:92:3B:93:FC:E9:D9:D7:67:3D:1C:29:63:8C
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Certificate issuer:       /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial:       1AA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
Manifest number:          19E2
Signing time:             Tue 12 May 2026 16:25:12 +0000
Manifest this update:     Tue 12 May 2026 16:25:11 +0000
Manifest next update:     Tue 19 May 2026 16:25:11 +0000
Files and hashes:         1: YV7YTETmV_cJXgISr-oFLFQqDZE.crl (hash: xq/H/FYkAVnjGzZpNChNED3ljhUEY0WT+e0mxPfBD5I=)
                          2: A41A01F2812311ED9367FC43C4F9AE02.roa (hash: Vrq9FGhzoiIWfc7ihIhJLVXO9ydP/lyM17l84uTIdWw=)
                          3: 4524F69EF73211EE8BA96C65C4F9AE02.roa (hash: K98fdNP3JonvWQFL1z0tA1IGnqJhwEWay1v708+of9s=)
                          4: AD1655A2DFEF11EB8486545FC4F9AE02.roa (hash: 4/EukxBvxwNpCMS7ooyYFFEFLFiWKS+tZEGfjyT7PEc=)
                          5: CF2F506C8A0F11EA9DFF7F19C4F9AE02.roa (hash: Uev6dESbR9jrBR21kOty0yon3IBMPTdsDiYNuwEZ5F0=)
                          6: 1071470CF41311EA9FD4EE0FC4F9AE02.roa (hash: 1vdmt5syl+1wS6hiP5UtJcWq0wH3yVRkEp1VhNBiO/Q=)
                          7: 4A749E58172211F189FDCC9B0A3D8C67.roa (hash: RzcmoRDXH4lUW30+jkbpA1M2gdPby4cOnD/HlxW7YUo=)
                          8: 64F859DA812611EDA597255EC4F9AE02.roa (hash: fn9COoreHDD+zdHLkrrnHjWHJo4W49aJWkK49HG6KBA=)
                          9: 596C54DCE83F11EE81772A87C4F9AE02.roa (hash: lqLW/3F13QI9kdxsDx9jr2d/mE+vvyfFH4FKs/rBDIU=)
                          10: DF4A9778E56111EBB6ADAC1FC4F9AE02.roa (hash: 5JbfjmQAdiDF+GCUG6f8XFUd66i1OEDkHsAU9939sOs=)
                          11: FBC5FF822EE711EF96610B4EC4F9AE02.roa (hash: S48kU8CxEt2lqHTLC9S8NrgXijXkmXA37DtqgyeV7oE=)
                          12: 1B97493E7FFF11EF85F9E340C4F9AE02.roa (hash: PL8uHSqtG/dPR3qkHOmJWXxTaJWMJ9JBct5vxpIjSMw=)
                          13: DEB0EB98F74011EE9C9F952CC4F9AE02.roa (hash: 8GE5D1VVfYYmKb2E5p4GEmVYlon+zqds8OqnCRSQFzE=)
                          14: EC0E245CF74211EEA182A952C4F9AE02.roa (hash: nAUyfqjMuPkPLszX314RyVVhnb0kyzw6IgC7LxzKX/4=)
                          15: DE11F1B4F74011EE9C9F952CC4F9AE02.roa (hash: okUwX6lv4rj6a/PEwUlYFCt3tg92HTun7bF/sYnRa58=)
                          16: BCA3B016F72811EE8C4CBB51C4F9AE02.roa (hash: bDTPxLseOvL61ps32tmaYLLWWwIIjlAMR+0T2fGKkJ0=)
                          17: 897785E099AA11EE9E218060C4F9AE02.roa (hash: FJz55cs86sARz1fNhydUSwjATGGxbZ6Dm+NpUv9tjIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
                          rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6818 (0x1aa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
        Validity
            Not Before: May 12 16:25:11 2026 GMT
            Not After : May 19 16:25:11 2026 GMT
        Subject: CN=6a035468-aca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:71:9b:0f:0c:ab:91:17:cc:4e:16:f9:74:3e:
                    d1:de:0e:0d:82:56:d9:93:ac:65:45:59:1d:9e:4e:
                    30:13:9b:76:5d:59:6e:2b:23:a4:ff:f9:41:46:cf:
                    4e:1d:41:9e:6b:73:d3:ef:2c:14:e8:fb:68:45:f7:
                    14:81:ac:9b:d3:2b:2a:14:10:d9:6a:18:fb:cb:a4:
                    38:60:44:93:d6:be:4e:92:eb:4e:ca:27:84:ac:79:
                    d3:97:63:81:53:52:a7:23:93:c3:36:9c:ff:80:3c:
                    b9:52:d4:65:17:71:d9:31:e5:1a:ac:18:65:ff:24:
                    a2:02:72:0d:af:20:63:ce:2c:2a:6e:e3:e2:f6:1e:
                    4e:52:04:c9:21:fa:0f:43:80:d7:ba:2e:a5:67:05:
                    3a:b5:2a:19:10:eb:ab:24:8b:c2:78:e3:eb:af:81:
                    e3:db:35:fb:9d:5b:15:a9:58:b5:f9:b7:b6:4f:63:
                    e2:8e:57:a4:a7:b3:f6:6e:01:28:fd:36:12:b1:b4:
                    c2:28:55:77:df:d2:5a:45:0b:5d:6f:00:b2:9e:6c:
                    ab:c4:54:bb:e8:70:29:1c:38:7d:78:1a:d0:b1:a9:
                    88:39:51:4e:a3:e8:69:a5:71:c2:f3:dc:02:e7:f1:
                    08:a5:36:db:83:5b:eb:a6:6b:03:0b:40:d7:ea:05:
                    32:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7C:8E:8D:3A:A9:A5:92:3B:93:FC:E9:D9:D7:67:3D:1C:29:63:8C
            X509v3 Authority Key Identifier:
                keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:46:2e:5d:c5:ef:13:f7:d9:79:79:c6:f9:1f:1a:cb:7f:52:
         a1:a7:64:f5:15:0f:ba:70:2b:25:ec:ec:6f:4f:58:36:3d:19:
         9c:23:7a:9f:cc:3d:5e:37:e3:c8:bf:fa:46:3a:6a:37:6e:fe:
         8a:b3:86:65:e2:21:b6:1c:f7:dc:25:c5:34:4c:f8:f6:da:3e:
         bf:d8:06:9b:27:07:06:b7:e4:af:61:b1:60:75:f9:5e:d0:46:
         2c:01:09:cf:d4:e8:f7:f5:f2:4b:95:b3:60:bb:08:0c:df:f3:
         07:31:5a:a0:11:e0:60:e8:7f:ba:4b:07:9a:c6:21:c4:16:93:
         86:72:49:ce:58:f3:23:35:0a:19:40:c1:da:56:b7:7b:9d:1e:
         8f:fe:6b:56:5b:8c:86:9c:1d:72:16:06:dc:ff:b4:d1:35:ab:
         28:20:da:33:b1:a2:fb:3f:b8:df:c3:87:28:a6:fa:ce:fb:4c:
         96:93:92:7b:6e:08:e4:fb:ba:a1:16:42:d5:69:f0:1b:a7:b3:
         65:ee:5b:8a:fe:b3:23:b4:31:43:0d:9d:a6:43:aa:2c:e0:e5:
         9f:25:11:8a:19:e7:13:b7:59:3a:2e:59:c0:86:af:35:07:9a:
         a1:ea:b1:8a:b0:f5:d7:5a:e9:74:5c:5a:3a:83:06:e0:0e:b4:
         e7:f0:2b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:38:06 2026 by rpki-client