Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft
File:                     ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft (raw, json)
Hash identifier:          eE4laLvlIUnsdHiaN+bTkoSTn1ytyPjkLOLStIfaHZ0=
Subject key identifier:   DA:72:3B:4C:F3:22:42:7B:62:CA:55:78:E1:D3:C2:F2:C4:0C:99:59
Authority key identifier: CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09
Certificate issuer:       /CN=A919B5BB/serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309
Certificate serial:       218C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft
Manifest number:          217E
Signing time:             Tue 12 May 2026 15:55:03 +0000
Manifest this update:     Tue 12 May 2026 15:55:03 +0000
Manifest next update:     Tue 19 May 2026 15:55:03 +0000
Files and hashes:         1: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl (hash: +xLIW3fyrEwCZmT4yskBXBb0+zN38+QJkmOREdGNWh0=)
                          2: C49E2E22FF0111E591C15659C4F9AE02.roa (hash: HhQxUt8kfX+mJlXHn9AIcVCVvv1AbgL+l8SBK6m5XSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl
                          rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8588 (0x218c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B5BB, serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309
        Validity
            Not Before: May 12 15:55:03 2026 GMT
            Not After : May 19 15:55:03 2026 GMT
        Subject: CN=6a034d57-5f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5a:2e:9c:52:9f:d6:c4:7f:7d:86:38:0c:8b:
                    48:ee:eb:3f:52:9d:93:97:88:84:e0:36:82:88:81:
                    3f:df:58:3a:b8:e9:48:f2:86:25:a0:2e:7f:04:41:
                    f1:a9:ee:a7:99:de:5f:83:94:4e:69:99:f2:58:fb:
                    5e:89:c8:a4:8e:bd:4e:95:48:ae:f4:6b:1c:12:e3:
                    ba:0c:62:48:d3:77:40:99:e9:f8:5c:04:81:98:3a:
                    f5:c2:2b:d6:47:84:52:ba:2e:f7:48:d1:78:cc:64:
                    74:fc:2b:83:a9:1f:61:87:fa:09:01:81:4d:3b:28:
                    bb:d5:37:bc:21:35:9f:79:d7:d8:58:e7:f2:88:ec:
                    04:4d:d1:29:92:68:4e:d5:e6:d9:22:f9:76:91:12:
                    a9:b1:d0:17:3e:7b:f9:f1:3e:bf:d1:7b:ac:e4:f6:
                    d1:62:4e:99:0a:4f:a3:ac:46:2e:47:e2:fd:6a:52:
                    d7:64:ad:94:bc:c9:2e:c5:df:e0:6f:d9:66:c7:c2:
                    62:32:5b:e8:8e:a9:5c:1d:06:eb:e2:f7:e8:3b:95:
                    38:fe:d8:a7:d2:44:16:97:11:a5:dc:00:ee:67:a7:
                    06:62:03:ea:e3:53:2e:35:63:51:06:d1:9f:23:86:
                    d6:0f:18:af:00:e3:2f:91:f9:95:78:fd:e6:9c:40:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:72:3B:4C:F3:22:42:7B:62:CA:55:78:E1:D3:C2:F2:C4:0C:99:59
            X509v3 Authority Key Identifier:
                keyid:CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d2:45:24:44:9f:90:1a:da:c3:17:75:56:eb:a1:4c:a2:2d:
         75:59:89:26:e4:ed:c6:ec:7d:25:26:d8:7d:cf:3d:f2:db:c4:
         71:5d:51:90:50:68:60:e9:90:d9:f4:8a:9d:55:87:6a:90:e9:
         3b:e2:46:91:e2:11:6a:3a:b5:1e:0e:d7:a6:50:4a:89:18:73:
         48:d1:82:74:5d:9e:b2:47:e6:0a:76:98:60:91:10:43:5a:5d:
         6e:aa:73:ef:ec:cc:07:59:25:29:3a:c9:22:91:73:d8:b5:ff:
         d2:9d:0d:50:ef:29:81:a0:02:d7:1b:72:13:4f:a7:b9:c7:50:
         0e:9f:33:18:66:9a:15:e4:8b:67:26:10:fc:46:ea:d0:2c:f6:
         b5:f5:33:e8:1a:31:da:e8:35:8f:dd:e4:a8:2a:70:cd:5b:8d:
         b3:8c:0b:75:68:4f:3c:59:94:dc:3e:98:bc:fb:18:5d:b8:3e:
         ed:07:46:7f:75:d5:38:6a:38:49:a5:8b:07:de:d2:f4:7f:88:
         ce:36:73:02:9e:73:eb:37:d5:eb:87:dc:e5:43:a4:4f:4e:86:
         b8:0a:bd:bf:97:70:bb:18:0e:97:4c:27:7d:19:36:cb:7e:5a:
         5e:6c:7d:4d:04:6b:51:ba:7e:1f:22:37:09:32:3f:38:4d:b0:
         ad:83:81:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:04:53 2026 by rpki-client