Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
File:                     YiiraKJGC9xWaItuVYkXkN2ASxA.mft (raw, json)
Hash identifier:          /7jyqN69YKKlXEZN/0o44s/0edI7jhWfUhvoq+VjbH4=
Subject key identifier:   54:88:E3:5A:F3:3C:4E:16:50:39:F4:A2:31:43:EB:12:A9:9F:F9:D6
Authority key identifier: 62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10
Certificate issuer:       /CN=A916A285/serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10
Certificate serial:       0263
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
Manifest number:          025A
Signing time:             Wed 13 May 2026 02:18:21 +0000
Manifest this update:     Wed 13 May 2026 02:18:20 +0000
Manifest next update:     Wed 20 May 2026 02:18:20 +0000
Files and hashes:         1: YiiraKJGC9xWaItuVYkXkN2ASxA.crl (hash: VxIuRNafxQHZHlBA3vZf5earAUsokKBvNa1ck45chN8=)
                          2: BCAF365487C111F0AC525C39C4F9AE02.roa (hash: qXkatjQdk9/LRncp/cgGtu7Z2Y3FqEqyaJABgXad1Wc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl
                          rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A285, serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10
        Validity
            Not Before: May 13 02:18:20 2026 GMT
            Not After : May 20 02:18:20 2026 GMT
        Subject: CN=6a03df6d-4bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:cb:83:a6:fb:8e:c7:36:b2:8e:05:19:cd:
                    d1:42:04:0d:5f:9a:5a:ba:be:6d:e9:ca:59:77:68:
                    21:5a:57:b8:63:3e:66:9a:e0:3e:bd:77:2c:43:e5:
                    f7:6e:a4:0b:49:ea:c0:b8:12:55:33:8b:e1:2d:46:
                    96:a5:44:3e:67:6c:82:2d:e6:93:48:bd:bf:d1:5e:
                    cc:9a:d0:27:2d:0d:1b:50:61:a4:75:ef:f2:bd:e1:
                    0d:a8:fe:83:ea:8a:7e:92:69:1c:56:03:ef:c8:ea:
                    11:cb:5d:7d:8e:14:b6:8c:f8:1a:70:4e:25:8f:85:
                    82:d8:30:1a:6a:c2:90:c5:32:02:ce:fa:33:6f:20:
                    67:e0:9e:50:b3:17:cf:3d:03:fc:d4:1a:05:e8:3e:
                    e2:a0:e0:1b:d5:61:cc:83:b1:01:63:20:dd:cd:c6:
                    62:d6:12:30:08:1f:35:a1:68:af:f8:28:17:71:c4:
                    b1:ec:8b:1d:a3:89:4b:cf:b5:20:83:af:fa:d2:10:
                    03:be:01:81:5e:8f:63:8a:62:1f:b9:16:a4:94:2b:
                    67:fd:74:ec:f2:0b:04:67:be:95:d2:dc:34:8b:2e:
                    ed:a6:d5:3f:75:bf:3c:06:61:b7:fd:8f:02:77:1a:
                    7e:00:07:32:ad:e5:92:f0:68:1f:c2:01:54:39:9e:
                    a6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:88:E3:5A:F3:3C:4E:16:50:39:F4:A2:31:43:EB:12:A9:9F:F9:D6
            X509v3 Authority Key Identifier:
                keyid:62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:77:4e:44:04:2b:21:e8:de:46:da:1c:0b:0c:f2:59:71:e7:
         22:53:94:5c:77:b0:65:4d:d6:80:29:4a:c7:4a:9e:64:a2:b4:
         cd:86:d9:fb:49:68:ea:13:2b:e2:8f:e2:b9:15:e2:f4:88:a2:
         e8:50:67:70:c4:46:ef:0b:71:50:da:17:60:70:79:bb:d5:63:
         3b:28:4e:ea:b1:ec:bd:84:7c:a7:1f:db:ba:1e:fa:f0:71:dc:
         a6:1b:9a:db:e7:94:03:5b:5b:03:67:09:4e:0f:75:23:96:49:
         f0:9f:f2:7f:b1:83:d8:d5:a7:8b:37:e5:cc:1e:18:4e:d7:42:
         99:f8:93:14:9e:3b:f8:9f:7a:74:d5:27:c3:2b:24:9a:88:56:
         f5:03:1a:d8:05:b6:54:72:2f:57:73:2b:98:5d:a2:da:5a:87:
         d3:e9:56:58:37:91:91:64:82:e5:a6:9d:4f:f9:7c:80:2a:db:
         3d:cc:2e:88:34:ba:9d:f7:73:be:ac:58:b9:66:6e:20:6d:6e:
         ab:73:13:32:b5:21:8e:2e:cf:50:63:0e:14:20:85:65:c1:48:
         62:35:b0:30:82:65:07:83:ba:56:85:a6:88:eb:c0:0e:d6:26:
         f6:df:09:98:d2:81:00:fd:37:1b:5a:3b:b7:a1:a6:f5:c2:e5:
         7c:67:7e:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEyODUxMTAvBgNVBAUTKDYyMjhBQjY4QTI0NjBCREM1NjY4OEI2RTU1ODkxNzkw
REQ4MDRCMTAwHhcNMjYwNTEzMDIxODIwWhcNMjYwNTIwMDIxODIwWjAYMRYwFAYD
VQQDEw02YTAzZGY2ZC00YmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsHnLg6b7jsc2so4FGc3RQgQNX5paur5t6cpZd2ghWle4Yz5mmuA+vXcsQ+X3
bqQLSerAuBJVM4vhLUaWpUQ+Z2yCLeaTSL2/0V7MmtAnLQ0bUGGkde/yveENqP6D
6op+kmkcVgPvyOoRy119jhS2jPgacE4lj4WC2DAaasKQxTICzvozbyBn4J5QsxfP
PQP81BoF6D7ioOAb1WHMg7EBYyDdzcZi1hIwCB81oWiv+CgXccSx7Isdo4lLz7Ug
g6/60hADvgGBXo9jimIfuRaklCtn/XTs8gsEZ76V0tw0iy7tptU/db88BmG3/Y8C
dxp+AAcyreWS8GgfwgFUOZ6mewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFSI41rz
PE4WUDn0ojFD6xKpn/nWMB8GA1UdIwQYMBaAFGIoq2iiRgvcVmiLblWJF5DdgEsQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTI4NS9FODE5MjAzOEI5
N0ExMUVEQTI4NUE1NTRDNEY5QUUwMi9ZaWlyYUtKR0M5eFdhSXR1VllrWGtOMkFT
eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lpaXJhS0pHQzl4V2FJdHVWWWtYa04yQVN4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTI4NS9FODE5MjAzOEI5N0ExMUVEQTI4NUE1NTRDNEY5QUUwMi9ZaWlyYUtKR0M5
eFdhSXR1VllrWGtOMkFTeEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAondORAQrIejeRtocCwzyWXHnIlOUXHewZU3WgClKx0qeZKK0zYbZ+0lo6hMr
4o/iuRXi9Iii6FBncMRG7wtxUNoXYHB5u9VjOyhO6rHsvYR8px/buh768HHcphua
2+eUA1tbA2cJTg91I5ZJ8J/yf7GD2NWnizflzB4YTtdCmfiTFJ47+J96dNUnwysk
mohW9QMa2AW2VHIvV3MrmF2i2lqH0+lWWDeRkWSC5aadT/l8gCrbPcwuiDS6nfdz
vqxYuWZuIG1uq3MTMrUhji7PUGMOFCCFZcFIYjWwMIJlB4O6VoWmiOvADtYm9t8J
mNKBAP03G1o7t6Gm9cLlfGd+XA==
-----END CERTIFICATE-----
Generated at Wed May 13 10:53:30 2026 by rpki-client