Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
File:                     YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft (raw, json)
Hash identifier:          6k/nEWpFRbg5lWisASMkFe7ChXF49WSbREXhS2sBhR0=
Subject key identifier:   9A:27:2E:32:79:34:91:9C:C6:FD:4B:25:92:F3:E9:16:FF:ED:5F:3F
Authority key identifier: 61:FA:70:86:81:1C:B0:3F:CB:94:C3:16:CF:EE:AD:88:9A:85:27:F7
Certificate issuer:       /CN=A918E3C0/serialNumber=61FA7086811CB03FCB94C316CFEEAD889A8527F7
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
Manifest number:          37
Signing time:             Mon 11 May 2026 08:49:32 +0000
Manifest this update:     Mon 11 May 2026 08:49:32 +0000
Manifest next update:     Mon 18 May 2026 08:49:32 +0000
Files and hashes:         1: YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl (hash: lCNstEJSYLw4wHbZrVeukbaFsieuHzE/6FGx7im+Z20=)
                          2: 3F6F4A1A01B211F19B62C4E66C6F56BC.roa (hash: tMHj5+/ILv6Qo4xWUT+IoiNMESbwl2vJsPhAT7WrKns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl
                          rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E3C0, serialNumber=61FA7086811CB03FCB94C316CFEEAD889A8527F7
        Validity
            Not Before: May 11 08:49:32 2026 GMT
            Not After : May 18 08:49:32 2026 GMT
        Subject: CN=6a01981c-32d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:33:f5:25:51:a0:db:2b:c9:5e:e8:fc:e2:af:
                    10:c4:3c:ea:81:3e:5a:69:b4:97:43:cf:ee:50:b2:
                    f0:09:8d:6f:b1:ef:42:16:f8:37:1d:b4:fc:4d:03:
                    18:94:82:05:30:6e:1d:1a:00:5b:e6:78:66:ba:4b:
                    dc:34:a4:10:2d:68:3f:95:04:4a:ce:80:12:9d:94:
                    e6:f3:5c:e2:1a:7d:5e:90:c4:68:11:c3:67:7b:96:
                    b0:17:60:e4:80:4b:57:4b:47:4d:85:cc:05:40:c2:
                    f9:9e:bf:5f:65:82:d3:0d:e0:4e:54:49:49:19:83:
                    3b:e7:65:56:07:1f:23:dc:1d:87:38:33:35:48:b9:
                    9d:01:9d:8a:02:6c:77:8f:ef:74:7d:22:a7:55:4d:
                    04:61:2f:b7:39:17:11:22:56:96:24:58:84:d7:06:
                    a4:58:d3:ad:93:ba:9a:a8:57:b9:6f:7b:dd:20:49:
                    45:39:01:68:41:f5:50:75:68:03:53:30:4e:b8:18:
                    91:ba:04:ea:44:dc:fa:8a:6d:fb:27:4a:25:63:e1:
                    e0:bb:57:db:8a:b6:b0:9f:52:0e:b3:a6:b8:85:93:
                    fa:75:16:b3:1e:dc:d2:ea:38:f9:ac:3e:0c:83:4a:
                    33:11:21:bc:84:60:87:98:ad:82:6c:a2:f9:18:bc:
                    bb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:27:2E:32:79:34:91:9C:C6:FD:4B:25:92:F3:E9:16:FF:ED:5F:3F
            X509v3 Authority Key Identifier:
                keyid:61:FA:70:86:81:1C:B0:3F:CB:94:C3:16:CF:EE:AD:88:9A:85:27:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:16:3b:1c:c0:3e:db:8c:3b:da:53:3f:23:3a:34:c7:c3:d9:
         9a:8f:a5:d5:74:7a:a5:a5:8f:93:88:c5:b0:95:5c:52:fa:69:
         30:5f:28:a0:78:98:30:6b:6e:8f:dd:9f:dd:87:17:ec:d4:1e:
         0e:b6:08:50:0d:bf:3e:f3:67:df:6c:a7:f5:19:3c:6c:48:12:
         c2:19:92:75:ea:32:9a:43:68:99:25:d8:75:55:9d:0d:ed:71:
         98:03:29:45:5c:fd:d7:95:ff:37:41:e6:4a:9d:58:15:84:08:
         cf:bf:c3:50:f0:81:fa:15:c2:1b:ee:f1:1d:1b:a7:63:cb:d8:
         c3:78:7a:a7:5b:a4:90:41:ab:ec:8d:4b:ad:26:a0:0e:36:63:
         8a:b7:27:b2:b3:24:04:dc:8f:aa:6b:9a:09:28:91:28:36:67:
         5a:e3:66:d1:8e:19:6c:38:90:bc:30:fa:df:36:87:97:f9:32:
         fc:19:86:dd:72:a7:4f:3c:70:8e:ff:0a:2e:d8:f6:33:f9:79:
         7a:c5:8c:a1:ae:86:6a:62:2c:1c:12:f4:2b:10:b5:6c:c1:60:
         3e:a2:38:1d:67:8f:dd:16:aa:db:7f:b0:6b:8e:34:c2:c4:e4:
         66:e1:d1:2f:bd:fc:18:e5:8d:25:c0:66:39:09:cb:e1:df:d9:
         52:2d:da:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:55:28 2026 by rpki-client