Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
File:                     YeT4YWtiQmYakffQErbNHkCTiQs.mft (raw, json)
Hash identifier:          4/znoL76puO2UFuNY39Y5N+itm0NQ/PZiWFFG1fNAsk=
Subject key identifier:   C4:10:B6:ED:F1:C3:A6:A3:56:B7:A6:36:3E:77:F8:02:06:94:D6:ED
Authority key identifier: 61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B
Certificate issuer:       /CN=A91605D7/serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
Manifest number:          0195
Signing time:             Wed 13 May 2026 04:24:00 +0000
Manifest this update:     Wed 13 May 2026 04:23:59 +0000
Manifest next update:     Wed 20 May 2026 04:23:59 +0000
Files and hashes:         1: YeT4YWtiQmYakffQErbNHkCTiQs.crl (hash: haXP97Ct3CTS0hxq6z8aHId5LVqLurGY9mNaV7ZMU+g=)
                          2: EA46D7ECE57F11EE96F8FB39C4F9AE02.roa (hash: eGXhWTghID7LXCNSIEK8G8iUBL46dL5mXlz39bqNtkc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl
                          rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91605D7, serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
        Validity
            Not Before: May 13 04:23:59 2026 GMT
            Not After : May 20 04:23:59 2026 GMT
        Subject: CN=6a03fcdf-fe86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:48:10:8b:e5:88:42:03:cd:ab:ed:62:b6:85:
                    94:9b:93:67:b6:17:6f:86:f3:c1:a8:89:a9:bf:66:
                    32:fb:e7:5e:47:b1:e5:07:e5:99:f7:2f:f9:10:01:
                    5c:54:1c:ab:7b:6b:c7:5a:06:98:8f:d1:d6:c0:ef:
                    bb:84:d9:96:58:0c:e9:dc:f1:f8:bc:43:5b:74:45:
                    72:43:69:3a:4e:c9:0a:52:b5:a4:b8:ba:a3:ec:08:
                    98:c3:88:f9:40:3f:e8:1d:bb:8e:92:5b:1e:2c:72:
                    69:1f:0c:17:8a:5a:6a:04:70:8d:9d:ef:53:ca:eb:
                    0e:0f:be:58:25:e6:07:be:38:43:56:7f:a8:0f:83:
                    21:ed:60:66:f1:e2:b0:4f:01:cd:3b:d2:05:3e:27:
                    78:9e:d3:bd:53:13:71:b0:86:de:87:fe:48:70:3b:
                    08:b9:7a:9f:21:16:2e:f2:f4:1f:1e:11:f7:75:8f:
                    e2:78:ba:f7:73:df:fb:c9:2b:3c:3b:60:81:11:8d:
                    83:b3:c7:62:e3:88:6a:ae:ef:47:92:ed:e2:b5:c8:
                    83:48:4a:4c:63:03:45:de:75:ba:0b:36:b9:d2:f6:
                    0b:ab:27:b3:f0:33:39:c0:f3:eb:65:8e:cf:df:e7:
                    e1:e7:0a:44:3b:30:04:92:64:26:41:1a:d9:45:38:
                    ae:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:10:B6:ED:F1:C3:A6:A3:56:B7:A6:36:3E:77:F8:02:06:94:D6:ED
            X509v3 Authority Key Identifier:
                keyid:61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:05:11:b9:8d:f5:5e:10:88:3f:0b:97:95:39:22:84:fb:41:
         1c:a9:88:5f:4f:e1:51:c3:e0:6a:d5:78:cf:b4:a9:72:46:16:
         6d:e7:ae:9d:1a:9f:a5:38:ee:84:ed:0c:53:e3:83:8e:e5:73:
         cc:75:68:55:cc:e6:0a:fa:db:cd:91:2d:3a:e9:66:67:15:31:
         f6:30:63:44:36:7f:3f:4a:0f:2d:41:23:ec:f7:49:f3:be:a8:
         98:95:83:39:6b:18:4b:95:dd:ac:49:b3:bd:08:ab:59:32:a1:
         53:18:94:1e:f6:87:62:71:86:76:b3:3f:44:0a:cf:a0:2b:5b:
         41:a1:45:8d:e1:28:8f:a3:03:92:31:9f:bb:a5:b8:dc:df:95:
         26:07:10:24:75:40:c4:8d:70:95:e0:eb:84:d6:02:36:61:d3:
         a7:56:9d:b2:23:b6:da:16:cb:19:85:a8:f0:72:0c:5e:a2:31:
         89:2a:89:33:77:dd:0f:6a:92:6d:2c:76:04:5b:46:ee:68:c0:
         48:ea:b0:5e:fa:10:89:5b:ce:ad:bc:d3:8a:a3:7e:48:5f:3e:
         b6:8c:1d:eb:fc:d5:57:e5:0d:2d:d0:37:75:dd:ac:7d:44:d1:
         b6:8e:d0:c1:0d:d3:fd:6b:f4:97:45:08:63:35:fb:8c:3a:e7:
         1c:4b:47:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:22:44 2026 by rpki-client