Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
File:                     1yELbplCSp6CpNRQAnNvZIOqJ5o.mft (raw, json)
Hash identifier:          do8gQTqoQszds9RbI2keRWCc3fjWjTO4k3sjhl786BY=
Subject key identifier:   E8:86:8A:F7:DD:0C:5C:99:CB:0D:0E:BF:A2:57:D5:AB:A4:54:2F:41
Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
Certificate issuer:       /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
Manifest number:          0170
Signing time:             Wed 13 May 2026 04:52:44 +0000
Manifest this update:     Wed 13 May 2026 04:52:43 +0000
Manifest next update:     Wed 20 May 2026 04:52:43 +0000
Files and hashes:         1: 1yELbplCSp6CpNRQAnNvZIOqJ5o.crl (hash: HuwAqRE/aBImpqpisD2iMzFJb9p7ubRz89sulD3IIOY=)
                          2: 1D5C0B90475D11EFBD75C15EC4F9AE02.roa (hash: dvMAmyh/hxtc1oBr5SYuyecDOjC5pr35ilz+dVjcw8U=)
                          3: A12190D8109411F1899116B2353D8C67.roa (hash: QIM5OQhz8QrW/58S7ybtOUdL75BxjSCO7dYUN29W8QE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
                          rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A909, serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
        Validity
            Not Before: May 13 04:52:43 2026 GMT
            Not After : May 20 04:52:43 2026 GMT
        Subject: CN=6a04039c-95a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:71:d8:d3:09:84:99:bf:10:48:ae:9b:b4:
                    d1:c9:d4:ec:ea:00:d6:0a:e5:03:12:b3:65:bf:b9:
                    7a:d9:da:7c:0c:85:4d:b2:74:25:e2:4b:af:b7:84:
                    97:2d:93:7c:88:c5:cc:b5:5d:41:19:ce:7e:ff:f5:
                    36:6d:17:47:a8:4b:b4:0d:90:a6:cb:33:3b:38:b6:
                    85:aa:22:49:dc:6b:0e:1a:2f:31:c8:d2:b7:c6:8d:
                    95:ab:9f:0c:8f:01:eb:87:4d:df:49:2d:92:e7:15:
                    cd:fa:55:0c:c0:40:0c:e9:af:5d:fd:e5:e7:3f:fb:
                    d8:88:b3:b4:4f:6d:af:6d:9f:11:8f:5e:4b:69:aa:
                    8d:4e:bc:1e:8b:56:89:dc:34:7e:8b:c3:77:d9:91:
                    02:a6:03:8b:35:34:da:34:1d:da:c6:d1:db:b2:37:
                    4d:a0:0e:46:36:ef:80:10:4d:d0:c1:ad:63:89:b7:
                    cf:72:18:fe:d4:ef:ce:e8:8b:b9:dc:c6:f0:cb:cd:
                    19:8e:e6:b4:4c:81:e0:dc:f9:19:a9:7d:de:2c:7d:
                    18:77:32:f4:5c:a4:65:20:59:c2:31:09:0f:e3:e0:
                    36:78:01:2e:fd:60:94:ab:f1:a1:37:d0:3f:43:b3:
                    47:10:4f:83:c1:cf:a9:97:a2:03:21:eb:50:cf:52:
                    b4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:86:8A:F7:DD:0C:5C:99:CB:0D:0E:BF:A2:57:D5:AB:A4:54:2F:41
            X509v3 Authority Key Identifier:
                keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b1:88:65:52:a4:28:23:d8:c9:1d:95:8b:88:a8:49:0d:f3:
         60:f1:dd:d5:a6:cf:b8:52:66:a1:d2:e5:df:70:74:cb:dd:6f:
         fb:cc:38:e9:cf:34:35:2a:9d:2b:96:d3:d7:e9:63:d6:e6:ec:
         d7:2c:82:18:1b:29:26:56:b5:b7:6f:e3:fe:04:04:e4:88:aa:
         bf:bb:27:5a:5d:4d:39:45:fe:42:24:d7:3e:f2:a6:e0:37:d2:
         ec:83:cb:d0:bf:61:fb:e3:fb:29:1f:7b:b6:77:11:71:80:16:
         78:80:3f:74:3e:73:32:f2:c7:cc:e7:91:f5:32:bf:d8:bd:1f:
         3d:b9:ea:c0:1a:58:e3:b5:de:29:6d:85:cb:c5:14:4e:d4:11:
         26:73:fd:77:7a:4c:6b:b4:2d:c1:21:6f:78:63:f1:21:6b:b8:
         a6:1a:38:4e:9d:6c:5f:13:57:4e:f0:f3:28:0d:f5:b3:57:2d:
         7f:c7:eb:ce:6d:27:bd:a2:71:a0:e7:6a:8d:a9:c2:1b:4e:32:
         33:93:2b:5e:3c:04:83:ca:8a:36:9c:bd:be:ad:a5:64:10:65:
         15:5a:28:37:83:21:54:5e:19:58:49:7a:31:c9:49:af:7d:d2:
         b5:28:95:92:e0:2f:10:a1:8b:d8:a8:6e:05:86:c9:01:64:6b:
         73:7f:10:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE5MDkxMTAvBgNVBAUTKEQ3MjEwQjZFOTk0MjRBOUU4MkE0RDQ1MDAyNzM2RjY0
ODNBQTI3OUEwHhcNMjYwNTEzMDQ1MjQzWhcNMjYwNTIwMDQ1MjQzWjAYMRYwFAYD
VQQDEw02YTA0MDM5Yy05NWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqCJx2NMJhJm/EEium7TRydTs6gDWCuUDErNlv7l62dp8DIVNsnQl4kuvt4SX
LZN8iMXMtV1BGc5+//U2bRdHqEu0DZCmyzM7OLaFqiJJ3GsOGi8xyNK3xo2Vq58M
jwHrh03fSS2S5xXN+lUMwEAM6a9d/eXnP/vYiLO0T22vbZ8Rj15LaaqNTrwei1aJ
3DR+i8N32ZECpgOLNTTaNB3axtHbsjdNoA5GNu+AEE3Qwa1jibfPchj+1O/O6Iu5
3Mbwy80Zjua0TIHg3PkZqX3eLH0YdzL0XKRlIFnCMQkP4+A2eAEu/WCUq/GhN9A/
Q7NHEE+Dwc+pl6IDIetQz1K0LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOiGivfd
DFyZyw0Ov6JX1aukVC9BMB8GA1UdIwQYMBaAFNchC26ZQkqegqTUUAJzb2SDqiea
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTkwOS8xNjZFNzQ3QzJB
MzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1NwNkNwTlJRQW5OdlpJT3FK
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzF5RUxicGxDU3A2Q3BOUlFBbk52WklPcUo1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTkwOS8xNjZFNzQ3QzJBMzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1Nw
NkNwTlJRQW5OdlpJT3FKNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfLGIZVKkKCPYyR2Vi4ioSQ3zYPHd1abPuFJmodLl33B0y91v+8w46c80NSqd
K5bT1+lj1ubs1yyCGBspJla1t2/j/gQE5Iiqv7snWl1NOUX+QiTXPvKm4DfS7IPL
0L9h++P7KR97tncRcYAWeIA/dD5zMvLHzOeR9TK/2L0fPbnqwBpY47XeKW2Fy8UU
TtQRJnP9d3pMa7QtwSFveGPxIWu4pho4Tp1sXxNXTvDzKA31s1ctf8frzm0nvaJx
oOdqjanCG04yM5MrXjwEg8qKNpy9vq2lZBBlFVooN4MhVF4ZWEl6MclJr33StSiV
kuAvEKGL2KhuBYbJAWRrc38Qrw==
-----END CERTIFICATE-----
Generated at Wed May 13 10:02:38 2026 by rpki-client