Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
File:                     YfRdxU9H4lL6xlUt27OWWFTGyAE.mft (raw, json)
Hash identifier:          D+DUASCYxIEjbqnQt6CBks39D0W9IEnJZ+vi8MvUKHA=
Subject key identifier:   C7:64:13:3C:ED:DC:63:A3:F0:6B:58:96:DF:AF:90:23:EE:FE:F9:30
Authority key identifier: 61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01
Certificate issuer:       /CN=A9162CCE/serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801
Certificate serial:       06A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
Manifest number:          0699
Signing time:             Tue 12 May 2026 22:34:12 +0000
Manifest this update:     Tue 12 May 2026 22:34:12 +0000
Manifest next update:     Tue 19 May 2026 22:34:12 +0000
Files and hashes:         1: YfRdxU9H4lL6xlUt27OWWFTGyAE.crl (hash: Uas+nrmYR6rgYc2Vj0lhOuPkHnz8iOi3gH1rBCZ9Uoo=)
                          2: D47858660E3411F1BB26575989EE528E.roa (hash: bWG4L4zm+kd/J5fsUxpfwPdRmncGUB5tai55L7Yj/oA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl
                          rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1701 (0x6a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162CCE, serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801
        Validity
            Not Before: May 12 22:34:12 2026 GMT
            Not After : May 19 22:34:12 2026 GMT
        Subject: CN=6a03aae4-eb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:17:66:e2:20:59:6d:f5:03:a8:dd:52:a3:f9:
                    b8:b2:d0:ef:26:c8:63:bb:be:96:ce:0a:82:da:3d:
                    4f:28:3a:2d:d7:f5:65:bf:ef:d2:1b:72:54:6b:d3:
                    e9:be:6e:3b:09:c3:e6:9a:ae:50:a7:9d:8f:91:6a:
                    24:0e:1c:f6:82:91:fa:5a:31:fc:5b:6f:10:df:60:
                    c1:b8:d8:06:c9:82:76:c9:58:fa:fc:eb:96:07:3d:
                    b4:c0:d0:be:d4:b0:7d:0c:b9:12:d7:9e:b1:2b:74:
                    c9:03:8b:08:cf:6d:67:fc:4c:42:1d:46:91:80:76:
                    b5:c7:5a:70:5b:3d:26:70:79:37:ab:51:69:2f:e7:
                    3c:66:47:87:f5:c8:c6:5b:08:ea:4f:1e:c0:93:00:
                    fc:3b:43:b3:ae:28:47:e8:07:7c:94:9c:0f:7b:16:
                    77:97:bf:7c:48:4d:d0:6b:ff:03:46:db:c9:36:03:
                    fa:0e:33:4c:3b:13:c7:67:7f:26:db:11:e8:42:a3:
                    27:e4:16:fd:7e:5f:be:e3:d0:78:3e:41:0a:aa:07:
                    54:4e:25:11:0c:5a:b3:c3:54:fd:0e:6e:1c:5a:11:
                    f3:e5:a2:0e:2a:c9:cd:8c:e0:a8:36:ea:14:f1:83:
                    cb:15:46:2b:c5:a4:32:31:dd:d9:87:a2:6e:28:78:
                    f2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:64:13:3C:ED:DC:63:A3:F0:6B:58:96:DF:AF:90:23:EE:FE:F9:30
            X509v3 Authority Key Identifier:
                keyid:61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:88:0c:bc:6c:cc:aa:48:e1:1e:ac:c2:cf:16:89:29:10:d2:
         35:60:bd:5b:11:87:30:ef:a5:69:3c:79:08:92:78:ba:c2:0d:
         33:60:8e:95:b3:84:f5:65:7e:ed:e1:4b:18:02:ba:a2:23:c7:
         cc:24:bc:09:fe:64:13:68:0a:ba:d5:38:e7:89:da:1b:89:6c:
         0d:2b:1c:cb:b9:f8:10:2b:a2:8d:cb:65:b2:7c:ad:47:1d:c7:
         ea:89:ba:c7:28:a6:02:dc:4e:6c:21:bd:63:bf:d6:b8:99:c2:
         45:9c:14:55:0b:ae:cd:97:1a:4d:52:1f:d0:d4:0c:a8:7e:3e:
         cc:21:eb:c5:6d:6d:ea:c3:22:f6:49:ef:21:c7:a9:7d:51:1e:
         ab:35:a6:80:e5:1d:f6:19:30:39:49:84:c1:b8:59:d1:74:b3:
         0c:b7:7f:ea:7f:36:44:4b:35:f9:63:98:13:ba:7c:5e:18:7a:
         28:ac:42:1c:e4:c7:4b:9b:ba:ae:85:f7:3d:ef:bf:c3:28:ff:
         14:e6:37:1d:ee:ef:00:60:6e:08:a4:b5:44:f3:76:15:1f:e8:
         7d:fb:7f:7d:a4:36:1c:1f:c6:f5:03:a7:e6:23:44:c7:35:78:
         07:ba:fd:e4:7e:cd:2e:c0:9f:71:41:9f:9d:97:9a:06:4f:a5:
         8f:66:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:21:34 2026 by rpki-client