Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
File:                     yl96MSHB9fmJUgx6UZcT-zpoyn4.mft (raw, json)
Hash identifier:          MM1gZhbJwiDKCEv5s6qwsK3eeblHcJH+NTJVFjleUvs=
Subject key identifier:   FA:4E:23:B5:7B:B4:06:65:4C:9F:19:6C:E3:BA:7D:F6:D7:64:08:8B
Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E
Certificate issuer:       /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
Manifest number:          F0
Signing time:             Wed 13 May 2026 06:32:30 +0000
Manifest this update:     Wed 13 May 2026 06:32:29 +0000
Manifest next update:     Wed 20 May 2026 06:32:29 +0000
Files and hashes:         1: yl96MSHB9fmJUgx6UZcT-zpoyn4.crl (hash: jB0U/Vs28Dh4Ijeh3CPe0NTtuJaYjgmHyrSzQ3TKsyg=)
                          2: 0A34182CE9FC11EF9D3DE972C4F9AE02.roa (hash: 5aZLhkHexwZy2OGn8j73qB9Fr54SX5MLYLq1gSETLgc=)
                          3: 09852FF6E9FC11EF9D3DE972C4F9AE02.roa (hash: +Guf8goiy81fZQZko9cL1+fi1M4VlxC1TorsAeBwzhI=)
                          4: F70CBA98E9B911EFB5B54650C4F9AE02.roa (hash: ApqLcBimI49Avn0PuHyRPruV4UszM9ORBkBlkObwqEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl
                          rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E1FC, serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
        Validity
            Not Before: May 13 06:32:29 2026 GMT
            Not After : May 20 06:32:29 2026 GMT
        Subject: CN=6a041afd-0799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:09:15:e6:83:11:07:3e:67:97:5f:45:4b:a0:
                    6d:96:03:56:34:bd:25:d6:dd:7f:7f:93:77:32:2e:
                    be:04:5a:91:bd:a6:ff:14:ef:05:67:84:64:be:32:
                    26:86:2c:81:9a:1c:51:ed:c1:c2:ef:30:ca:e7:56:
                    25:3c:4b:49:58:ea:5d:33:d2:dd:24:01:5b:e1:d1:
                    51:31:32:f6:be:1e:9a:ec:de:c7:30:d5:8a:5a:a2:
                    89:24:c7:fc:37:4c:70:50:68:cb:a6:61:5b:7b:53:
                    78:2a:f3:da:e4:33:be:e7:bc:38:fe:6c:80:ac:a7:
                    b3:48:5a:e5:a3:f7:c1:48:2d:59:d5:31:c6:a3:73:
                    09:2f:d7:77:f5:36:0d:ba:98:7b:ae:e6:15:fc:46:
                    9f:5a:60:30:05:3d:7f:06:fb:ca:0e:53:89:03:7c:
                    9a:b4:1a:71:eb:55:93:96:6c:c4:2f:c5:f4:58:f0:
                    d9:52:4e:16:66:1c:c5:a6:7f:9d:cc:8b:e4:f3:91:
                    50:f7:f5:99:c2:b2:f8:d3:a8:10:c5:6f:a3:cb:c3:
                    19:0d:76:21:0a:e8:74:15:7e:86:94:4f:e4:c9:29:
                    6d:0f:47:25:7b:7e:45:d1:9a:f3:33:39:f7:3d:ec:
                    3c:06:89:47:fd:60:ad:ef:18:6a:c4:e4:59:22:b8:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4E:23:B5:7B:B4:06:65:4C:9F:19:6C:E3:BA:7D:F6:D7:64:08:8B
            X509v3 Authority Key Identifier:
                keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a3:c3:1a:c9:f4:9a:a8:4f:fc:ed:94:06:46:ea:cb:1b:21:
         f9:0c:ab:9d:1d:2e:ef:b6:e1:82:f1:97:b9:f0:a8:6c:53:f0:
         2e:e7:34:12:74:e2:41:01:47:d7:f9:61:7d:47:ca:0a:5e:42:
         a5:cd:59:b3:30:2d:23:e6:ba:cc:88:3f:07:3e:05:1a:29:fe:
         30:15:37:1a:32:67:1a:b5:4c:2c:72:c3:1e:33:f3:33:6a:f9:
         c2:2f:75:eb:af:b3:bf:0c:5e:15:15:39:03:77:73:80:29:28:
         47:bc:63:04:2a:2f:f3:1c:e2:fe:7b:ca:2e:b5:48:65:6c:1b:
         bc:1d:b6:55:34:6a:4c:a5:74:59:dd:59:bb:f3:75:2b:f4:21:
         b4:66:60:01:7c:fe:46:76:77:37:6d:72:a6:98:e8:d5:f8:3b:
         dc:e8:c9:42:e3:d2:56:ff:4f:b7:22:13:9d:b7:25:8f:a2:25:
         c9:79:01:f2:46:02:09:91:73:dc:6f:fc:87:5e:9b:ea:20:69:
         69:f9:e1:22:dc:09:21:5b:38:a6:18:fd:5a:be:5d:28:ed:7d:
         d5:2b:8f:37:a6:86:1f:d6:6e:7e:23:ad:9f:b8:19:4e:be:87:
         d6:42:2d:56:76:cd:49:0e:00:66:88:72:1e:2d:3e:b7:a1:bc:
         cf:03:04:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:35 2026 by rpki-client