Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft
File:                     yhlef9JZjYWjbJnsSBs1dMBuOxc.mft (raw, json)
Hash identifier:          sRjGMwm+sPUXLU/vg077oIzHhSWf/1l50Qbp45dIH5A=
Subject key identifier:   01:92:76:2E:23:A3:3E:5C:63:30:4D:21:D6:66:19:73:13:2A:8D:9A
Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17
Certificate issuer:       /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17
Certificate serial:       08B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft
Manifest number:          08AF
Signing time:             Tue 12 May 2026 20:32:49 +0000
Manifest this update:     Tue 12 May 2026 20:32:48 +0000
Manifest next update:     Tue 19 May 2026 20:32:48 +0000
Files and hashes:         1: yhlef9JZjYWjbJnsSBs1dMBuOxc.crl (hash: 5kp91aYyUzatxvoPSrrn4JmVZsKe8WOM1HATLV1CtW0=)
                          2: B65C355AE1E411EAAD5D8545C4F9AE02.roa (hash: a0ikFcPtz4uKTdxcDLlrrrB8ZBAu38Rn0L19Tx4gd1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl
                          rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2231 (0x8b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DA63, serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17
        Validity
            Not Before: May 12 20:32:48 2026 GMT
            Not After : May 19 20:32:48 2026 GMT
        Subject: CN=6a038e71-2ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:30:5c:99:80:01:4d:28:76:c5:68:60:dc:c3:
                    9a:af:68:8c:91:bf:03:46:a9:5e:11:04:0a:0d:00:
                    ee:5f:29:0c:f6:10:ce:b5:73:de:7b:a0:61:b0:0c:
                    7a:8f:cc:7c:49:e5:32:af:4d:39:5d:ce:13:b8:e1:
                    f2:f8:3f:b5:c8:8f:7c:08:36:26:07:b6:e2:80:64:
                    f8:ff:65:9b:18:68:85:6e:d4:2e:90:8a:82:6d:8a:
                    76:7d:39:e9:ae:d5:e6:d4:37:67:da:6c:26:63:41:
                    bf:b6:6f:7e:9f:89:2e:f8:c7:50:05:df:95:b5:75:
                    76:53:fc:42:b2:b9:bc:6e:b3:73:c9:e5:2e:39:8f:
                    af:1b:e3:a1:c5:09:99:62:e7:e2:59:bc:93:f1:fe:
                    2f:dc:76:36:61:a9:46:42:a6:86:4b:59:a7:92:65:
                    4d:74:b7:1b:f7:ab:27:81:37:59:6a:5d:a9:0b:7b:
                    55:a0:0e:68:36:d1:2f:1c:a4:66:cc:2e:aa:8e:65:
                    c3:a2:b4:2d:78:f8:99:9f:19:14:d6:7f:4d:22:93:
                    67:b6:ee:d7:2f:0f:c0:17:0e:c1:8a:37:e2:42:de:
                    f2:f3:c7:80:32:07:44:51:d7:b7:4d:63:0c:88:63:
                    4e:a0:f7:14:5f:39:6c:04:ba:a3:f3:dd:15:4d:87:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:92:76:2E:23:A3:3E:5C:63:30:4D:21:D6:66:19:73:13:2A:8D:9A
            X509v3 Authority Key Identifier:
                keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:89:55:14:e0:77:75:12:1e:4a:86:23:f9:fc:a7:73:2f:3c:
         49:6f:55:2f:21:bb:fc:53:9e:3e:25:08:24:28:31:00:f8:e7:
         07:b2:db:45:b3:67:e3:43:66:b8:47:48:71:44:b7:fc:35:66:
         39:fb:58:e1:dd:3e:ca:20:20:f8:a9:e7:4e:0e:96:57:2a:72:
         89:f7:52:39:79:3c:08:51:8c:44:e7:d6:87:96:17:12:0b:a6:
         7e:2d:aa:30:fb:be:b0:55:1c:c6:22:fc:8c:ee:f0:e4:7d:d2:
         33:78:f1:00:c8:d5:60:33:5a:b2:69:8f:41:42:bc:f2:24:58:
         fe:2f:c7:1f:c5:72:5c:0d:22:4b:e2:a2:8b:31:bb:eb:3c:a9:
         94:6c:ae:b1:33:eb:b7:ea:2c:12:7b:e5:77:3b:58:95:0d:a0:
         56:d1:95:e9:9f:d7:84:b0:fa:a3:f9:bf:c2:ba:99:b5:0e:00:
         a6:84:ba:6f:69:0c:22:9f:80:8d:b1:81:82:4f:92:27:28:8f:
         f9:21:e6:7e:d5:95:6f:2a:2a:d2:71:5b:a4:d2:a3:16:fa:dc:
         9c:ef:45:04:49:0b:ee:cd:0a:91:93:3d:9a:93:df:49:2a:ca:
         1b:8d:b8:a4:0c:65:e2:7b:ca:22:16:d8:fc:e6:c4:b6:f9:fb:
         b8:db:dd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:52:55 2026 by rpki-client