Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft
File:                     yH_T4kCIpNnfHF0CaFII6Qph7_c.mft (raw, json)
Hash identifier:          t1C3MD2ESe6ofoHnGAbOQC2LwuA3FLeVTbBv1LUm0Nk=
Subject key identifier:   1B:73:AF:9E:DE:23:BC:0D:72:6B:0D:F9:8E:C2:81:06:D7:11:C9:28
Authority key identifier: C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7
Certificate issuer:       /CN=A9161065/serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7
Certificate serial:       0243
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft
Manifest number:          023D
Signing time:             Mon 11 May 2026 02:32:35 +0000
Manifest this update:     Mon 11 May 2026 02:32:34 +0000
Manifest next update:     Mon 18 May 2026 02:32:34 +0000
Files and hashes:         1: yH_T4kCIpNnfHF0CaFII6Qph7_c.crl (hash: z+gUeGEXTBFntchVoLeAoEA2OKyZlpEtXHI3U7/B6tg=)
                          2: CDE70CB2E52011EDB505E014C4F9AE02.roa (hash: rmrewBXxG6n9T9lJyYuYh35ZNnNwGQOX9gsrKAmWQ9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl
                          rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161065, serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7
        Validity
            Not Before: May 11 02:32:34 2026 GMT
            Not After : May 18 02:32:34 2026 GMT
        Subject: CN=6a013fc3-daa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:db:b6:b2:f0:e2:6c:d3:80:a7:ad:92:68:d6:
                    2c:79:53:8e:c7:9f:40:ea:16:96:66:7e:47:22:73:
                    a7:7f:cc:d1:7c:22:dd:17:d5:1e:4e:5b:d7:b5:6f:
                    4b:42:2b:d2:5c:14:8e:65:3a:1f:bd:49:f0:0c:2f:
                    b1:67:86:4a:eb:59:17:71:7d:82:70:cf:4a:0e:ed:
                    fa:ff:ec:9a:1c:a0:d4:58:c7:a9:19:38:41:d0:82:
                    0f:6e:74:eb:0b:40:87:71:74:14:79:ec:ce:0a:6c:
                    59:a8:a9:eb:f0:d3:c7:a9:91:82:d6:c8:39:db:22:
                    4c:84:d2:b0:f7:70:70:c6:10:9a:7d:01:bf:c1:a0:
                    60:01:63:ad:38:7b:32:c9:2b:b8:1f:8e:29:21:dd:
                    88:a1:37:29:e5:6f:52:2d:78:25:e2:fa:58:37:5c:
                    62:cd:61:9e:7e:28:cb:f8:07:ed:81:28:4b:c5:db:
                    7b:f3:94:46:ba:94:a1:b4:19:41:c7:51:01:8c:3b:
                    f7:12:2b:37:64:7b:c1:3c:9a:04:4d:8b:f7:19:e3:
                    42:bc:cc:78:84:56:7d:7a:93:55:49:05:45:6a:00:
                    4d:9f:38:95:fc:2d:e9:7e:b5:d3:49:87:90:e7:a7:
                    0c:40:e5:b0:c9:b0:80:85:d5:76:d8:17:3e:98:d7:
                    d3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:73:AF:9E:DE:23:BC:0D:72:6B:0D:F9:8E:C2:81:06:D7:11:C9:28
            X509v3 Authority Key Identifier:
                keyid:C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:1c:7f:fc:26:11:72:2e:a0:84:04:bf:d9:41:9b:13:18:8d:
         47:81:ae:51:17:45:c1:52:73:51:3f:b0:cb:ba:21:cf:3d:fa:
         9b:40:f5:48:76:bd:0d:17:3b:2a:80:48:f3:fb:26:45:76:c4:
         0e:b2:2e:73:74:e9:a7:b2:8c:8d:f3:42:47:1c:b4:a5:b1:d3:
         de:62:51:df:95:ca:12:91:a3:06:70:1f:f8:46:87:0b:42:93:
         29:9a:bf:bb:c2:f3:c2:cf:85:75:da:c5:0b:81:d7:bc:e5:48:
         66:38:4e:33:0e:ec:bf:4b:2a:9c:6f:56:e2:c6:48:ad:8c:aa:
         ce:41:2a:39:d4:a8:8e:bd:4c:89:83:c6:ed:e2:a3:25:dd:5b:
         c3:a9:80:33:4b:48:d2:20:21:9f:bc:12:7c:86:13:25:b0:fa:
         e1:e4:ea:a6:f9:09:48:a8:fc:a6:e9:14:5e:a5:9d:66:cf:09:
         ad:87:b8:c0:a5:e2:96:34:90:03:97:58:9e:81:d7:65:1e:70:
         fb:65:40:78:20:ab:d7:7e:e7:4d:3d:02:4d:a0:64:13:a5:1e:
         a6:14:ab:4f:e2:93:57:10:0b:6b:c4:02:20:ba:e9:b2:f7:46:
         e1:7c:3a:c6:37:00:d2:17:cb:8c:ef:da:1b:a0:2c:53:a5:12:
         4f:05:da:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:04 2026 by rpki-client