Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
File:                     YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json)
Hash identifier:          59kqJ9sLKWr31jVUjCUxHEj1GhWMI1ITeGlg6XK6fXQ=
Subject key identifier:   28:98:7E:1E:8F:8C:55:01:42:81:68:0C:E7:9A:6A:42:0C:15:19:08
Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Certificate issuer:       /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
Manifest number:          0119
Signing time:             Wed 13 May 2026 06:21:02 +0000
Manifest this update:     Wed 13 May 2026 06:21:01 +0000
Manifest next update:     Wed 20 May 2026 06:21:01 +0000
Files and hashes:         1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: IIbm1GLSLKqy9pzzdS+LXyQ1M2C2Nj53vWryUe2ZQ2w=)
                          2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: yjuBkaQ9iRKgMQ7a+4P/BtzlYCvqc8B89mQbeBjPRXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
                          rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
        Validity
            Not Before: May 13 06:21:01 2026 GMT
            Not After : May 20 06:21:01 2026 GMT
        Subject: CN=6a04184e-ca41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f0:9f:58:88:7f:65:ab:27:b6:2b:17:93:88:
                    51:76:60:04:fe:70:70:50:8a:33:35:fa:56:a4:08:
                    dc:46:cc:b9:bb:04:e0:29:0d:35:32:52:70:53:a1:
                    af:53:ba:56:69:10:ef:c4:70:ca:90:a5:00:b4:99:
                    f6:05:7b:85:6d:91:93:e3:90:fd:6c:7e:6a:46:ec:
                    ef:41:96:1d:b7:77:9e:d3:78:93:00:62:99:16:a5:
                    71:ec:ae:e1:1b:4e:b2:f7:84:0a:ef:e8:08:5e:ee:
                    64:53:aa:e4:25:90:9a:38:09:b5:8f:65:4f:93:11:
                    7c:6f:94:33:89:67:ca:de:16:55:ab:f4:53:38:f7:
                    72:50:24:11:02:61:91:b0:30:95:45:22:cd:1e:23:
                    cc:82:bd:05:32:2d:55:d9:be:9b:c5:77:c3:1c:85:
                    eb:40:d8:2e:e6:6b:1f:cc:41:49:0f:77:4e:8a:c9:
                    e7:b0:d5:76:af:35:d2:a4:fa:e8:c5:62:b9:ad:ac:
                    ba:a8:0c:a2:52:15:33:a9:15:41:6b:12:18:a7:c4:
                    cf:df:ca:b3:43:d2:c6:ed:1f:cf:63:fe:00:0b:4d:
                    1b:c5:e1:13:93:09:9d:09:a6:51:df:db:35:33:40:
                    a7:19:f8:ed:61:d5:8a:a5:e7:ee:db:73:98:29:4e:
                    ee:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:98:7E:1E:8F:8C:55:01:42:81:68:0C:E7:9A:6A:42:0C:15:19:08
            X509v3 Authority Key Identifier:
                keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f0:2b:d6:63:c9:2c:cc:8b:ac:f5:b9:14:36:c9:7f:f4:57:
         fe:8e:91:b6:ff:a1:3d:13:4f:b5:94:5d:41:46:12:d1:9a:51:
         ef:74:3e:d1:38:c9:c3:31:40:d4:07:64:5f:83:d2:fa:3f:0f:
         83:8f:d8:f1:ab:4d:8a:17:e6:3c:7c:38:0c:d6:82:dc:9e:91:
         ce:25:8e:30:fe:ec:d2:18:6f:2a:03:4f:9f:61:03:3a:e5:c9:
         ff:d4:20:98:1b:a6:99:9c:90:2a:13:18:ee:43:56:59:29:f3:
         a0:67:b0:d6:27:58:d0:ae:99:54:48:a3:02:55:01:2e:6e:61:
         87:24:0e:a6:11:f0:d3:f0:99:6d:ba:f7:38:d4:4c:85:de:75:
         6a:ba:47:8c:ad:4d:5b:58:f7:05:e1:f5:3a:7a:77:da:2c:ca:
         6a:73:d7:39:b4:56:43:57:d4:af:9b:eb:3c:8a:b0:58:2e:da:
         46:f7:e5:b7:0b:42:0f:02:34:fd:c2:ae:6d:f3:82:61:3c:11:
         9b:1d:b9:07:aa:62:ed:9f:56:a5:cb:1f:90:1a:8e:be:ab:b0:
         d7:e0:7f:b3:a5:70:1d:ce:99:b3:70:26:3e:bf:62:21:6a:04:
         33:49:0f:5a:b0:ce:b4:a5:02:87:83:f0:a7:ec:b7:42:5e:42:
         44:fa:2c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:00:10 2026 by rpki-client