Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
File:                     YeQBev9HdnE8_cggXML7IXhGK6E.mft (raw, json)
Hash identifier:          OPHPThWMwD3Rsjx/KyhBrKb4H7fT71lt+1LcW37Q6hg=
Subject key identifier:   E2:3D:0C:F5:6B:CF:6D:04:57:3F:33:98:8D:5E:2B:B2:72:3C:53:87
Authority key identifier: 61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1
Certificate issuer:       /CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1
Certificate serial:       0AF5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
Manifest number:          0AE3
Signing time:             Tue 12 May 2026 19:28:20 +0000
Manifest this update:     Tue 12 May 2026 19:28:19 +0000
Manifest next update:     Tue 19 May 2026 19:28:19 +0000
Files and hashes:         1: YeQBev9HdnE8_cggXML7IXhGK6E.crl (hash: fblGFXYdb9+WiwK6UC0g1qAaoXg9JEmifCVF9XIoS2E=)
                          2: E3DD6362787A11ED89732760C4F9AE02.roa (hash: vve9hwKv+mYDRAl8TbHYr+BUbKVZsWenZHWGJC3Di3g=)
                          3: 1B2FD0247B3511F0AB5E9728C4F9AE02.roa (hash: Q1rC4uxku9zNUGZfldpV6C2HUrRjj+DFtRhXQLJUhNQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl
                          rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2805 (0xaf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A824, serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1
        Validity
            Not Before: May 12 19:28:19 2026 GMT
            Not After : May 19 19:28:19 2026 GMT
        Subject: CN=6a037f54-feb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:7e:79:88:83:2e:73:d0:fc:46:7d:8c:d5:
                    d8:ab:64:3f:1b:05:83:55:27:ab:f3:5a:f3:77:53:
                    31:71:30:96:9a:b7:47:35:5f:4a:3d:66:3d:78:cf:
                    72:44:b1:6f:b3:09:1b:ff:ee:58:88:9f:01:b1:33:
                    cc:96:2c:5d:0e:70:91:c1:b8:2c:49:30:34:e8:e4:
                    6a:8e:bd:fc:9c:6c:ca:ab:de:77:e0:b5:38:fb:55:
                    97:00:f7:e0:8e:32:b2:ba:83:98:20:b4:c9:1b:6d:
                    5d:98:af:da:d2:4a:59:25:ea:7e:43:f5:9e:4b:1b:
                    98:1d:c9:70:54:02:a8:17:39:be:d4:d3:7c:f0:68:
                    34:44:d1:d3:4d:be:d8:cb:97:9a:61:d6:aa:d3:e1:
                    4e:3f:72:85:a4:cd:47:37:a8:d6:a2:8e:5c:98:2b:
                    49:b5:2c:1a:2f:49:d9:b9:7f:d3:dd:c1:66:3a:6b:
                    cd:e8:4d:6d:31:22:59:6a:a9:aa:44:25:06:e7:39:
                    38:5d:bf:4a:92:18:c2:40:ed:74:e2:99:83:1b:f4:
                    db:c1:8d:b3:13:73:d8:92:c5:cd:16:db:ad:31:6b:
                    0c:d9:f4:12:88:1e:66:3e:3a:6e:33:2e:fb:1b:03:
                    08:fe:60:2a:32:86:52:00:dd:a8:b6:c6:26:63:8a:
                    dc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3D:0C:F5:6B:CF:6D:04:57:3F:33:98:8D:5E:2B:B2:72:3C:53:87
            X509v3 Authority Key Identifier:
                keyid:61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:55:29:63:ed:39:97:12:4a:21:09:ce:26:8b:c7:37:dc:ce:
         d2:9d:af:fa:25:5f:19:26:c7:97:97:22:7c:76:71:2d:20:21:
         ed:6e:63:80:a8:e6:53:1a:d8:8f:f8:e5:bf:df:d1:35:5e:24:
         a9:29:3a:44:e6:fd:4d:06:31:c7:b1:c5:61:ff:5a:19:5e:83:
         30:9c:47:df:d5:e3:62:a9:68:34:87:17:85:37:4f:13:4a:32:
         ee:55:2b:ff:c9:4c:d5:c1:d2:fd:27:ad:50:8e:dd:4d:0a:4c:
         c8:e0:63:19:bc:05:c9:07:74:9d:ff:b4:ac:c5:04:fc:a7:00:
         54:d2:b4:78:bd:19:55:5d:f6:6b:a1:45:af:9b:71:c1:98:74:
         29:87:99:bf:23:c2:be:47:9f:ce:df:5e:c3:b4:71:8c:24:e0:
         5b:55:c2:35:18:ec:bc:f5:f0:f3:e7:62:b3:ab:3e:3c:82:b5:
         e6:f6:16:23:8f:25:58:0b:58:46:99:09:9f:d2:8e:55:00:38:
         3f:0a:0c:33:bc:47:d6:4a:3f:02:11:56:cc:49:70:22:13:05:
         4c:88:08:8b:21:4c:b9:26:ef:56:06:2d:fd:28:c3:e5:a8:3d:
         18:77:7f:12:8f:ed:ea:f0:23:6e:03:b2:a8:22:e8:5e:68:9a:
         c4:91:66:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:22:28 2026 by rpki-client