Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
File:                     -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json)
Hash identifier:          frSYfg2g+HUIFosAPvCd2Ol18soxjlmUvzjbd6zgLlk=
Subject key identifier:   CF:B9:66:48:A3:74:B9:F9:81:92:EC:84:FE:69:86:DD:FC:7D:9B:7A
Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
Certificate issuer:       /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Certificate serial:       0169
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
Manifest number:          0164
Signing time:             Wed 13 May 2026 04:53:46 +0000
Manifest this update:     Wed 13 May 2026 04:53:45 +0000
Manifest next update:     Wed 20 May 2026 04:53:45 +0000
Files and hashes:         1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: t468zm0i/HqmC2SoiJPK3J1B09Tuy3LCZ41WFb8Mel0=)
                          2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: SKhqrlepkMrk6BddxM6G2PMvfO6t8Ob/zKNcmmPpDSU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
                          rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
        Validity
            Not Before: May 13 04:53:45 2026 GMT
            Not After : May 20 04:53:45 2026 GMT
        Subject: CN=6a0403da-ce4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0f:25:f8:c9:2e:77:5b:fb:6f:16:86:11:a9:
                    f0:ab:3c:d4:42:bc:0e:03:5a:2a:80:2c:93:64:e5:
                    49:38:a5:ab:db:44:81:94:a8:04:b5:d0:25:14:1a:
                    23:66:e6:2d:90:c7:85:15:c0:0a:4c:63:af:d6:7d:
                    26:f3:89:6f:1a:e5:71:b2:08:4b:99:ee:0f:6d:4e:
                    be:5d:60:3b:cb:a5:a1:d8:d5:91:a0:5a:64:cb:44:
                    61:49:d7:8f:d2:ce:8b:9b:9e:e8:f7:b6:06:7e:42:
                    b0:eb:b6:8f:a9:da:ae:50:c0:61:ca:44:62:9f:1e:
                    2a:71:d0:ad:91:bf:4b:2d:67:b0:29:ab:fa:8c:1e:
                    bd:2c:f9:2d:fc:c3:47:45:e4:87:e8:f7:98:ba:77:
                    a8:ad:10:e9:b8:9c:be:ed:f3:04:2b:68:34:46:f3:
                    d4:cb:96:c0:59:7c:2f:2f:b8:31:90:e8:bb:87:f9:
                    c2:3d:1a:07:65:cb:8f:a8:cc:9c:43:da:83:61:8d:
                    30:c9:b2:f6:24:08:e2:7b:77:60:1e:5d:ac:c6:40:
                    24:cb:52:bc:e9:b5:30:61:2d:88:30:fa:d3:19:22:
                    f2:1f:ee:95:0f:e7:47:56:10:6c:8a:f2:42:f5:7c:
                    89:75:61:60:09:cc:9d:d7:bb:44:4c:62:f4:42:b8:
                    04:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B9:66:48:A3:74:B9:F9:81:92:EC:84:FE:69:86:DD:FC:7D:9B:7A
            X509v3 Authority Key Identifier:
                keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:5e:30:7b:af:44:90:e1:c9:02:a0:2e:f9:75:16:c8:8d:81:
         29:ab:9f:34:34:84:25:0d:e3:1c:31:23:bd:02:d8:4d:a4:12:
         a9:8c:87:ea:1d:2f:be:65:fc:ef:f9:10:aa:5f:d5:48:28:ef:
         57:aa:25:79:3b:23:2d:5a:08:00:de:a7:2a:dc:1b:87:11:ad:
         b7:80:17:3e:c4:2e:12:05:5e:16:a7:c9:5c:2a:c2:8c:1e:d3:
         26:eb:8a:0c:f1:df:b1:f6:bb:32:a5:32:e6:f9:1d:98:3a:3e:
         04:f9:08:3c:21:2a:16:0b:c1:a6:a2:ec:cf:98:79:35:e9:35:
         f1:49:2d:b7:a2:c8:47:03:e9:f2:f3:80:90:06:87:a6:01:af:
         ac:7b:c1:5d:4a:4f:5b:7e:38:97:1e:06:50:f1:2f:b1:e2:16:
         1f:58:6c:46:48:d9:54:10:91:18:57:02:25:19:e3:5a:d4:ac:
         e4:33:ec:c3:1b:a4:ad:ab:14:35:63:24:dc:07:f3:b1:5d:6a:
         79:28:dc:d6:d9:5b:d4:da:51:e9:64:48:57:68:71:c4:6b:80:
         80:03:2e:1e:1f:0e:25:40:f7:bc:c7:cd:20:fd:b3:20:4a:a5:
         69:bc:ad:8d:84:53:a8:04:a3:f3:e7:4b:f0:e6:8a:d7:ee:90:
         bb:b0:de:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQ5QzExMTAvBgNVBAUTKEY5OEJFOTQyRDlFQjc4NTZBNDMwRDFCQzI5NDczQkM0
REQ2NzdGRUEwHhcNMjYwNTEzMDQ1MzQ1WhcNMjYwNTIwMDQ1MzQ1WjAYMRYwFAYD
VQQDEw02YTA0MDNkYS1jZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2w8l+Mkud1v7bxaGEanwqzzUQrwOA1oqgCyTZOVJOKWr20SBlKgEtdAlFBoj
ZuYtkMeFFcAKTGOv1n0m84lvGuVxsghLme4PbU6+XWA7y6Wh2NWRoFpky0RhSdeP
0s6Lm57o97YGfkKw67aPqdquUMBhykRinx4qcdCtkb9LLWewKav6jB69LPkt/MNH
ReSH6PeYuneorRDpuJy+7fMEK2g0RvPUy5bAWXwvL7gxkOi7h/nCPRoHZcuPqMyc
Q9qDYY0wybL2JAjie3dgHl2sxkAky1K86bUwYS2IMPrTGSLyH+6VD+dHVhBsivJC
9XyJdWFgCcyd17tETGL0QrgElwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+5Zkij
dLn5gZLshP5pht38fZt6MB8GA1UdIwQYMBaAFPmL6ULZ63hWpDDRvClHO8TdZ3/q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8wOUY1MkIxNDJE
RDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVGYWtNTkc4S1VjN3hOMW5m
LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLy1ZdnBRdG5yZUZha01ORzhLVWM3eE4xbmYtby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDlDMS8wOUY1MkIxNDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVG
YWtNTkc4S1VjN3hOMW5mLW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR14we69EkOHJAqAu+XUWyI2BKaufNDSEJQ3jHDEjvQLYTaQSqYyH6h0vvmX8
7/kQql/VSCjvV6oleTsjLVoIAN6nKtwbhxGtt4AXPsQuEgVeFqfJXCrCjB7TJuuK
DPHfsfa7MqUy5vkdmDo+BPkIPCEqFgvBpqLsz5h5Nek18Uktt6LIRwPp8vOAkAaH
pgGvrHvBXUpPW344lx4GUPEvseIWH1hsRkjZVBCRGFcCJRnjWtSs5DPswxukrasU
NWMk3AfzsV1qeSjc1tlb1NpR6WRIV2hxxGuAgAMuHh8OJUD3vMfNIP2zIEqlabyt
jYRTqASj8+dL8OaK1+6Qu7DeJQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:14:58 2026 by rpki-client