Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
File:                     2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json)
Hash identifier:          FkOeM1NzV0EQzEPeUhE6uAYDAdZW5yYTBVGGeACWgZM=
Subject key identifier:   6E:DE:60:40:FF:5B:B1:73:98:D4:D7:71:EB:D2:3F:3D:57:B0:BE:20
Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10
Certificate issuer:       /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
Manifest number:          0190
Signing time:             Mon 11 May 2026 04:32:51 +0000
Manifest this update:     Mon 11 May 2026 04:32:51 +0000
Manifest next update:     Mon 18 May 2026 04:32:51 +0000
Files and hashes:         1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: DXd89oOThIzNl6TG3WGwxTAihHEAJ1Tbgs41z5JjtKA=)
                          2: 1B7430784BD411F1A6EB1F4394833773.roa (hash: DQuyMeCRm4a8iG98XqAoF7qWLf73xYDbUnQ5Pzno1lA=)
                          3: BAFD2318E01B11F088B1D0FE636F56BC.roa (hash: nFIjLEFtVNOTTMiweqb0gcEFYFfR+U3yovX2UqgW1o4=)
                          4: DAF8A746E01B11F097920A16646F56BC.roa (hash: LGOwTBglBUqnmp1uBsE0bwegkvn6MaHVF43SRoKPz84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl
                          rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
        Validity
            Not Before: May 11 04:32:51 2026 GMT
            Not After : May 18 04:32:51 2026 GMT
        Subject: CN=6a015bf3-1ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:bf:2d:35:08:13:7a:c9:0c:ac:56:85:64:
                    dd:98:33:4e:c2:49:ad:5f:3d:69:d7:7a:ad:2c:62:
                    56:1e:df:8c:81:83:84:7d:46:6e:d0:2f:f4:64:53:
                    4c:d0:dc:f1:c1:31:ed:f7:93:89:65:f0:2a:b7:c0:
                    bf:3e:7b:61:8a:0b:29:70:49:01:8f:61:a6:97:02:
                    f6:ef:f5:c7:b7:e3:98:79:a6:d6:14:45:2d:ac:38:
                    5c:84:0c:59:0c:5d:0a:68:ae:de:b2:af:0d:6f:81:
                    54:fc:af:cc:78:07:a2:fa:0c:28:82:c0:e3:34:06:
                    33:b7:25:2e:69:c2:22:d0:96:1f:ed:33:8d:67:da:
                    99:47:87:99:d4:bf:78:bb:0f:ab:84:ec:f2:62:21:
                    36:be:f8:11:b3:58:c2:a9:e9:49:ba:09:b2:30:3a:
                    f8:75:49:88:59:c0:23:0c:ce:72:aa:72:4e:e8:b9:
                    3a:46:fc:44:c6:3b:11:a1:f7:6f:52:57:f5:0f:45:
                    ed:a6:11:e6:f5:7f:87:0c:35:0e:db:76:99:ba:8c:
                    60:d3:ee:31:bb:29:1b:01:6c:06:03:7d:c5:cf:13:
                    69:98:2a:4a:6f:28:55:1d:4d:12:ae:3b:51:75:76:
                    40:c1:03:4d:d1:03:30:92:83:53:56:d1:e9:c6:cc:
                    7b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DE:60:40:FF:5B:B1:73:98:D4:D7:71:EB:D2:3F:3D:57:B0:BE:20
            X509v3 Authority Key Identifier:
                keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:20:10:21:f8:3a:33:7d:42:aa:fa:02:6e:09:13:8f:05:65:
         f8:4f:64:74:c1:0b:98:da:3b:24:33:d5:90:1f:00:2c:2a:71:
         34:c2:1c:65:a4:8c:14:75:9b:23:ae:51:e7:78:8b:15:a0:42:
         0c:cb:2b:ff:07:0d:61:54:a3:66:cb:17:1f:ec:f5:b2:fc:c9:
         e5:49:76:c8:48:45:9d:29:6e:7e:0b:09:b7:e8:de:f9:5b:66:
         80:c2:e8:15:45:8c:f0:57:e1:99:e1:6b:e9:d8:cd:fb:b3:9b:
         c2:79:2f:9e:56:24:54:00:2d:03:13:c5:f7:27:cc:65:f1:cf:
         e2:20:4d:0a:7b:a0:be:3c:a0:4e:7a:80:72:b1:ba:1c:d8:33:
         66:c4:1f:58:59:de:82:cc:87:fa:e1:8d:f7:bd:fa:1e:3e:08:
         8f:8b:70:40:b4:a1:7f:1f:ca:0b:47:ed:1e:01:37:32:2f:ce:
         6f:7e:00:56:bb:0f:bb:0e:c6:d8:95:02:5a:99:8a:cd:6a:81:
         f6:c5:9a:c9:0b:a6:6d:55:ed:0e:9d:ba:4e:ea:05:fd:dd:9b:
         12:61:fc:1f:05:02:8b:74:aa:1f:4f:f6:42:e4:48:a8:82:b8:
         55:2d:b0:20:58:20:82:65:c0:dd:3d:53:08:b7:b4:c8:87:b9:
         c4:c2:3c:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgyMkYxMTAvBgNVBAUTKEQ5ODcyQzE5M0UxOERDMTUxRkUzRUY5RTI5QUZFODMx
MjFCMjREMTAwHhcNMjYwNTExMDQzMjUxWhcNMjYwNTE4MDQzMjUxWjAYMRYwFAYD
VQQDEw02YTAxNWJmMy0xZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApES/LTUIE3rJDKxWhWTdmDNOwkmtXz1p13qtLGJWHt+MgYOEfUZu0C/0ZFNM
0NzxwTHt95OJZfAqt8C/PnthigspcEkBj2GmlwL27/XHt+OYeabWFEUtrDhchAxZ
DF0KaK7esq8Nb4FU/K/MeAei+gwogsDjNAYztyUuacIi0JYf7TONZ9qZR4eZ1L94
uw+rhOzyYiE2vvgRs1jCqelJugmyMDr4dUmIWcAjDM5yqnJO6Lk6RvxExjsRofdv
Ulf1D0XtphHm9X+HDDUO23aZuoxg0+4xuykbAWwGA33FzxNpmCpKbyhVHU0SrjtR
dXZAwQNN0QMwkoNTVtHpxsx7uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG7eYED/
W7FzmNTXcevSPz1XsL4gMB8GA1UdIwQYMBaAFNmHLBk+GNwVH+Pvnimv6DEhsk0Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIyRi81ODQyRDMwNEY3
RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNCVWY0LS1lS2Ffb01TR3lU
UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJZY3NHVDRZM0JVZjQtLWVLYV9vTVNHeVRSQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODIyRi81ODQyRDMwNEY3RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNC
VWY0LS1lS2Ffb01TR3lUUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAyAQIfg6M31CqvoCbgkTjwVl+E9kdMELmNo7JDPVkB8ALCpxNMIcZaSMFHWb
I65R53iLFaBCDMsr/wcNYVSjZssXH+z1svzJ5Ul2yEhFnSlufgsJt+je+VtmgMLo
FUWM8FfhmeFr6djN+7ObwnkvnlYkVAAtAxPF9yfMZfHP4iBNCnugvjygTnqAcrG6
HNgzZsQfWFnegsyH+uGN9736Hj4Ij4twQLShfx/KC0ftHgE3Mi/Ob34AVrsPuw7G
2JUCWpmKzWqB9sWayQumbVXtDp26TuoF/d2bEmH8HwUCi3SqH0/2QuRIqIK4VS2w
IFgggmXA3T1TCLe0yIe5xMI8vA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:05:31 2026 by rpki-client