Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft
File:                     Ys-2EOllD-PIACvGF7cFck0qAt0.mft (raw, json)
Hash identifier:          Z5eONSNuk0H0rTmpoFAqm+sFCarQPyvke38WqHOCBKI=
Subject key identifier:   1E:02:1B:77:2F:E3:2E:0B:DF:1C:34:22:6D:BD:4A:41:B9:67:55:03
Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD
Certificate issuer:       /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD
Certificate serial:       18DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft
Manifest number:          18CE
Signing time:             Tue 12 May 2026 16:28:18 +0000
Manifest this update:     Tue 12 May 2026 16:28:18 +0000
Manifest next update:     Tue 19 May 2026 16:28:18 +0000
Files and hashes:         1: Ys-2EOllD-PIACvGF7cFck0qAt0.crl (hash: cJeWXN9F5cHPtoRuPkRONPzbb+qmWhYggIqTd7pE6WI=)
                          2: C1C12662CFC811EB9A5C5879C4F9AE02.roa (hash: dwc6e0VZe8kImW/u7x+c+fHQZoxulC4UHHkO0IPYi7Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl
                          rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6366 (0x18de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD
        Validity
            Not Before: May 12 16:28:18 2026 GMT
            Not After : May 19 16:28:18 2026 GMT
        Subject: CN=6a035522-5ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9b:7d:d8:54:d8:65:f5:c2:8b:c1:1e:af:ee:
                    9e:15:5d:57:86:e8:08:ea:0c:aa:19:f2:15:ca:51:
                    93:12:f7:b2:f5:7e:4e:c4:1f:25:84:cc:f6:55:fe:
                    79:d4:4e:b4:d0:69:dd:83:b0:4c:2a:c7:e6:77:0d:
                    e0:50:e2:84:ba:23:5b:1f:90:6d:d9:7d:79:b8:44:
                    c3:76:47:c4:5f:ab:85:f7:1d:00:c6:f7:c7:22:5b:
                    dc:7d:bc:5d:4c:f8:2d:19:57:ee:4d:88:88:7f:1d:
                    f1:1b:7f:cc:7b:8f:82:04:47:6e:92:cb:ce:f7:0b:
                    07:0c:44:f6:41:63:49:ad:80:94:b0:70:15:75:50:
                    38:6e:d0:66:56:c1:bd:58:f5:8a:61:52:f1:70:82:
                    f8:35:7d:bc:ee:53:ac:db:cb:d6:49:61:5e:bd:ff:
                    da:a7:f6:a2:d8:a5:98:98:c6:a3:56:36:bc:91:16:
                    f0:91:52:48:f3:11:53:78:6a:5f:d6:ae:e7:10:ff:
                    f6:4c:19:a8:99:a9:43:7d:84:39:bf:97:36:ce:24:
                    6c:ec:f4:51:73:64:ca:3f:de:be:2d:71:95:26:d1:
                    70:62:82:c8:2c:8c:51:3f:95:43:85:32:58:07:9a:
                    b8:3f:80:fb:d9:4d:b3:8e:e8:bb:a9:65:38:e3:bb:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:02:1B:77:2F:E3:2E:0B:DF:1C:34:22:6D:BD:4A:41:B9:67:55:03
            X509v3 Authority Key Identifier:
                keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:81:93:b0:be:c5:f9:9a:ee:53:41:0a:d8:1a:78:a0:77:a8:
         6e:65:2d:4d:f7:2d:99:89:c2:d6:98:b1:34:13:c4:1d:97:0d:
         ae:56:a5:bd:08:67:a4:73:c4:5c:22:85:d2:69:9b:b9:e3:3c:
         4a:f8:8e:70:91:6d:5f:33:07:d7:1c:6a:98:f5:63:2a:0d:93:
         98:0e:dc:e2:e0:42:94:af:f6:16:1d:ed:18:cb:62:62:81:17:
         06:58:8a:93:5f:7f:80:2f:21:bc:72:ed:7e:14:07:20:e4:4f:
         03:45:87:f2:ac:85:b6:e2:a0:44:0c:4e:25:d1:3b:fa:1e:8b:
         c2:b7:89:e0:1a:58:0a:b1:c6:b2:4f:e9:57:04:c6:d7:88:72:
         5b:0f:fa:19:54:4f:56:90:2b:75:a6:19:8f:5a:50:22:65:18:
         11:d0:c9:84:34:65:08:c4:cf:54:71:99:fd:b0:39:d3:70:f3:
         46:16:8c:6d:2a:7b:1c:40:85:a6:75:f0:e0:e8:a9:79:ee:8d:
         49:a5:fe:33:77:39:51:99:40:06:81:84:74:7b:46:91:f3:c3:
         b6:16:59:69:48:c5:c8:27:41:b3:2a:39:2f:be:80:ec:a4:e5:
         56:b0:d6:ec:32:15:e3:8e:77:c3:51:8c:7b:3f:2a:7d:6e:c1:
         1e:ca:05:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:30:37 2026 by rpki-client