Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
File:                     yAlz0WzMyeGME6aIAz3E0PDmHEo.mft (raw, json)
Hash identifier:          kbQqigLeCc8D3f57Fd6PxdSNhwgLBohBGenFGuhGitU=
Subject key identifier:   89:E2:F1:A6:49:66:E1:A6:23:53:5E:DB:60:DE:01:57:7E:60:17:51
Authority key identifier: C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A
Certificate issuer:       /CN=A91657FE/serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
Manifest number:          AC
Signing time:             Mon 11 May 2026 07:21:30 +0000
Manifest this update:     Mon 11 May 2026 07:21:29 +0000
Manifest next update:     Mon 18 May 2026 07:21:29 +0000
Files and hashes:         1: yAlz0WzMyeGME6aIAz3E0PDmHEo.crl (hash: 84NJnpJE4KmuG6BkbIaMIb5DsEejXlKQM2sBRczKnNM=)
                          2: BFEE74284D9811F0930F6465C4F9AE02.roa (hash: 40BbeTseOH9cOE/V8iDSe91ozItNcwOvKSn/Wv2JFTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl
                          rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91657FE, serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A
        Validity
            Not Before: May 11 07:21:29 2026 GMT
            Not After : May 18 07:21:29 2026 GMT
        Subject: CN=6a018379-bac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:81:f2:df:b4:63:f4:5e:4f:cc:4e:c4:5a:a0:
                    eb:e1:02:11:38:39:d5:8f:a9:9b:e4:99:33:44:5a:
                    7c:ec:a5:a0:3b:a2:1e:31:e3:7d:85:f5:ae:02:bd:
                    58:8d:86:cd:bb:d2:6f:b3:f7:7a:0d:d0:a4:d4:e6:
                    dd:d4:83:5b:12:78:c2:b8:ca:6b:31:be:c3:4d:8e:
                    41:83:8f:dd:bc:f4:3a:5a:6b:d5:0d:37:8b:d2:e4:
                    e2:da:a9:c8:e2:32:c2:91:2b:45:1a:83:c6:81:26:
                    59:dd:b0:a4:ed:d4:91:61:70:d7:ae:f9:37:2e:19:
                    1a:7b:35:11:29:22:dd:89:dd:8d:2e:16:c8:83:19:
                    ac:8b:1d:c6:f9:f6:38:bc:e9:6b:8b:b2:98:86:d9:
                    7b:20:99:91:0f:40:21:d6:f9:74:26:cf:71:a1:ea:
                    2b:fc:2a:a4:09:32:14:e2:fd:e3:58:42:39:21:de:
                    0a:df:53:69:12:da:e9:7f:0b:fa:2c:b8:7a:04:42:
                    56:bb:3d:12:12:13:6f:88:d5:d7:20:81:2d:ee:53:
                    8b:70:57:d8:87:bf:5a:b3:38:96:6d:13:0c:de:57:
                    47:ea:3d:88:9d:8e:97:89:4f:1b:0a:9c:ca:a2:36:
                    d9:f1:2c:1d:8d:87:d8:51:a3:13:ca:2c:9a:c1:ea:
                    1b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E2:F1:A6:49:66:E1:A6:23:53:5E:DB:60:DE:01:57:7E:60:17:51
            X509v3 Authority Key Identifier:
                keyid:C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:73:2d:af:30:a6:26:fd:09:81:8a:ed:41:f7:cc:4e:2d:67:
         68:f8:24:75:48:a9:fa:f6:26:77:c7:fa:56:b6:32:39:28:4d:
         5a:72:cd:4f:3c:c4:e0:14:f3:61:ae:48:8f:91:78:ce:1c:b4:
         56:5c:64:73:7a:12:db:37:8a:10:9d:d6:56:cb:2d:c8:31:c6:
         e1:52:42:63:14:cd:54:33:33:fc:8f:c0:e8:d5:d9:14:1f:f3:
         18:30:a3:e4:91:2b:8f:49:ab:52:01:7f:18:f3:6b:5a:8e:c9:
         fa:e9:05:53:24:3c:84:88:68:0f:63:b7:cc:89:b9:bc:c8:da:
         f8:be:03:da:ab:79:dd:00:46:a9:32:c5:a9:8f:7a:94:a7:0f:
         3a:e8:d1:6c:41:67:85:22:cc:00:b0:7c:17:aa:86:e9:a5:ca:
         aa:06:80:cf:e8:c1:9d:28:80:5e:c3:b4:96:04:0d:f9:34:14:
         65:b3:74:f7:0c:9f:d0:f2:6a:09:ac:f3:d7:fe:55:da:e4:ee:
         54:be:25:b9:a2:70:24:4c:65:a8:1f:ba:62:84:b5:2c:67:12:
         60:e7:cf:3b:48:91:3b:65:81:46:01:ec:a7:bf:42:91:c1:e5:
         35:bd:41:1e:b3:c6:5e:d3:51:14:e8:f6:4e:d5:59:57:b9:6b:
         3c:d8:52:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:22:16 2026 by rpki-client