Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
File:                     YN1l7H9y62x9qLk3BuLTug8GW_w.mft (raw, json)
Hash identifier:          xAjY8YAp1ziDqMH6wlodLZ7l/8ZsWEZMGBOwIjb8MU0=
Subject key identifier:   12:0B:C9:5D:3E:FB:F1:65:66:02:B3:37:FA:8D:63:0C:D3:5D:1D:A2
Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
Certificate issuer:       /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Certificate serial:       1B21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
Manifest number:          1B0E
Signing time:             Tue 12 May 2026 16:18:02 +0000
Manifest this update:     Tue 12 May 2026 16:18:01 +0000
Manifest next update:     Tue 19 May 2026 16:18:01 +0000
Files and hashes:         1: YN1l7H9y62x9qLk3BuLTug8GW_w.crl (hash: b2WfWwkQWyFa/Y4ekECCnAX9+EmSnj5rg7RoInqBhVM=)
                          2: 91CB97905BD211EBA9178181C4F9AE02.roa (hash: qWp/XIY6bx5m6zPuPTYxt/QlRjZYjzeSmVqLyGiCJPQ=)
                          3: D75BE71A410511E7970A2A5FC4F9AE02.roa (hash: bVX95h5YGIEFl/nNsvVn6rJFnDmppDxCWRFjlU5VtvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl
                          rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6945 (0x1b21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4264, serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
        Validity
            Not Before: May 12 16:18:01 2026 GMT
            Not After : May 19 16:18:01 2026 GMT
        Subject: CN=6a0352ba-2724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:82:7b:cb:31:99:5f:3d:3c:90:2e:d2:2c:
                    4c:a6:73:4b:6c:89:b9:62:eb:ed:7c:fb:59:e4:2d:
                    be:15:a0:ea:86:c3:ef:af:6e:d4:5b:37:d0:55:9f:
                    c1:6a:8f:9d:09:00:09:86:b5:be:70:1f:f1:fa:44:
                    e4:e0:62:4d:47:a4:1e:6a:9f:67:26:24:fe:1b:08:
                    ba:b1:a6:71:41:76:dd:15:28:82:ad:6e:a4:16:c0:
                    84:b5:fe:7d:87:cf:d4:f0:7b:1b:90:50:b0:b7:bc:
                    a0:99:09:3b:b4:05:c2:12:5c:06:7a:b0:92:b9:05:
                    c0:20:95:af:fe:4a:6e:50:e4:79:58:53:75:1d:a9:
                    20:4f:20:5f:e2:8d:c2:2e:10:42:5f:11:9f:39:30:
                    49:71:a3:cc:fc:4c:de:e5:aa:77:fb:6c:77:d5:af:
                    9e:50:66:3d:93:30:29:1e:c8:8c:6a:64:93:31:25:
                    32:8e:91:ba:49:fb:40:1a:ac:68:b3:9f:ef:75:6f:
                    b3:af:51:14:a3:ea:6e:95:1a:79:27:ff:73:5d:5d:
                    30:ba:85:a4:bd:a8:f6:41:07:9e:73:ad:1d:b8:44:
                    25:b4:e1:22:1f:72:f8:fd:6a:60:8a:8e:3c:ac:7d:
                    4d:d9:0c:8f:9b:a4:a6:e5:1e:f2:76:0d:04:d9:39:
                    b8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0B:C9:5D:3E:FB:F1:65:66:02:B3:37:FA:8D:63:0C:D3:5D:1D:A2
            X509v3 Authority Key Identifier:
                keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:fa:48:89:a1:8a:a8:f7:96:ad:26:99:a2:72:e1:2d:06:8f:
         11:fb:a9:23:a9:45:1b:f2:ed:b3:85:66:22:21:a4:89:e5:d5:
         89:e4:7d:1d:05:a9:51:92:fb:73:8b:68:23:f0:2e:9e:5a:85:
         41:94:9d:d4:fc:17:fd:10:77:4c:44:f3:24:52:6d:2b:ec:d0:
         85:78:01:6c:f2:e4:41:ae:5a:08:70:11:3d:a5:3d:f4:63:3f:
         ce:24:19:39:fc:62:0e:7a:50:6a:48:fc:49:90:8f:a4:a1:f8:
         97:98:09:84:53:b7:06:92:4d:a6:33:e8:40:14:8a:ff:73:70:
         ee:77:8d:45:d5:74:43:63:df:26:b9:7a:42:c5:8f:4b:49:cc:
         4a:4d:b4:e9:94:a1:fa:78:b2:ee:e6:69:d8:e5:56:93:21:4c:
         a7:6a:66:f3:b4:97:e7:ba:56:07:39:a7:f2:ae:a3:48:01:5c:
         06:b3:3b:4d:25:e2:e8:d7:ff:68:a1:74:4e:22:53:64:75:f2:
         a6:cc:5f:b8:b8:8b:f6:23:02:c2:fc:09:15:03:36:40:21:20:
         42:c1:2c:89:b6:99:e1:9f:68:96:2b:c2:66:a0:9f:1b:fa:b4:
         58:e5:30:87:a0:82:53:0e:79:f9:02:83:fe:98:b3:fb:2f:e9:
         9e:7f:b2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:13:33 2026 by rpki-client