Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
File:                     YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft (raw, json)
Hash identifier:          ll8mbwsPdpBAABGXq4vu4Ty24efVgAcyCiTrbCv6zOU=
Subject key identifier:   AB:85:1C:5C:7A:48:D3:1A:6D:36:E8:A3:9C:F8:65:42:D7:FC:9B:BC
Authority key identifier: 61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79
Certificate issuer:       /CN=A91A0277/serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779
Certificate serial:       0757
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
Manifest number:          0743
Signing time:             Wed 13 May 2026 01:27:09 +0000
Manifest this update:     Wed 13 May 2026 01:27:08 +0000
Manifest next update:     Wed 20 May 2026 01:27:08 +0000
Files and hashes:         1: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl (hash: a9y54RSriSGEovBrnlNDcIBVKPrHFkUnC5t/jE5el8c=)
                          2: BFF1B8A04E6311F1BB35B40EA8833773.roa (hash: o+hcbHfTfjKw25Ns/WHpn8y34UunupoxcmW2ooCHKwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl
                          rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:27:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1879 (0x757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0277, serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779
        Validity
            Not Before: May 13 01:27:08 2026 GMT
            Not After : May 20 01:27:08 2026 GMT
        Subject: CN=6a03d36c-47f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:19:2b:63:fc:f6:96:10:87:db:c0:79:3f:
                    5f:4d:2a:f0:d8:60:a5:35:e4:21:0a:c6:c1:d1:e0:
                    17:e2:28:17:27:fc:26:63:9f:3b:b5:18:68:8f:fc:
                    9c:39:7a:b3:3e:f2:3e:5d:41:71:c6:64:ac:e3:b9:
                    4d:79:7c:55:41:99:23:d0:4b:66:3d:bb:9a:81:4c:
                    26:e2:80:02:db:ac:6d:02:3f:1d:02:9b:93:1d:dc:
                    71:14:f1:76:8e:96:f4:2a:da:43:b8:ec:e1:8b:a8:
                    c8:78:1f:7d:be:0d:60:7f:44:71:3a:2a:a0:7c:7a:
                    a9:0e:74:a5:db:4b:de:68:38:cb:ba:06:09:ed:bc:
                    35:01:0d:91:cb:46:66:1c:c9:12:44:ae:8c:91:22:
                    c6:11:51:e4:12:02:81:b6:9e:b2:3b:7c:1c:e0:db:
                    38:04:38:4e:61:60:ac:c4:10:8c:9f:24:04:33:89:
                    b4:60:d0:26:17:f0:e2:14:4c:17:da:72:da:d7:5a:
                    64:4b:40:ba:bb:0f:3f:f9:69:15:b0:7a:9e:42:54:
                    64:52:33:5d:a2:9b:99:df:68:86:b7:00:bc:ca:37:
                    74:dc:fd:ed:07:e8:85:e7:4a:27:d0:a8:79:2f:97:
                    6d:67:75:cb:20:51:14:95:60:1a:f9:c6:68:46:54:
                    bf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:85:1C:5C:7A:48:D3:1A:6D:36:E8:A3:9C:F8:65:42:D7:FC:9B:BC
            X509v3 Authority Key Identifier:
                keyid:61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d9:4b:60:57:64:37:cc:1c:b9:29:6b:b8:c8:ef:ba:41:df:
         c2:3b:3f:d4:c7:13:e4:da:f3:73:3d:3b:f5:a7:b8:2e:ff:41:
         43:da:8f:03:73:6d:0b:7b:96:c5:a1:10:6a:3a:ee:35:0a:99:
         c3:0c:e9:3d:98:06:9e:4c:c1:0d:0c:f0:f5:f5:47:d5:d6:46:
         0a:3e:f5:05:ab:f7:f9:bf:b1:4e:68:90:97:6d:e4:a9:1f:7b:
         8d:c1:b7:d1:49:56:ea:d2:1a:90:96:f9:b6:ef:25:3a:b8:b4:
         ee:20:c7:87:06:fe:de:30:21:3f:3c:d3:ea:c4:1f:eb:40:b7:
         1c:02:93:80:99:a1:12:98:58:89:ad:c9:93:c1:57:c7:00:9a:
         5e:e0:b1:9b:f6:e9:4c:a4:e9:66:08:a0:ba:19:17:b4:31:77:
         a7:4b:f4:e9:05:ee:31:1c:77:2e:48:d5:31:37:43:32:20:52:
         ac:c4:36:ea:cd:ac:06:eb:d1:2c:3c:6d:c6:a5:17:0d:14:8a:
         64:93:34:20:b2:c3:c8:74:e1:8c:63:35:e0:62:18:2b:b7:71:
         7e:1d:dc:08:fc:97:07:9a:86:01:4a:71:a1:08:97:87:46:cc:
         50:8d:a4:df:d7:fc:7b:1f:9a:13:98:41:5b:ea:b4:17:ff:0e:
         0d:15:b1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:48:44 2026 by rpki-client