Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
File:                     ycIPtAaIDHHcvabGs_umov85Kks.mft (raw, json)
Hash identifier:          LAGcIcylWJtd9BZxRLsT4j38yXWKbhIbrHG5NRNjiBk=
Subject key identifier:   93:1E:16:64:78:E7:C2:AA:CD:C7:9E:5B:15:CA:63:DA:64:6F:0C:DD
Authority key identifier: C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B
Certificate issuer:       /CN=A91B86F6/serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
Manifest number:          4E
Signing time:             Mon 11 May 2026 08:27:43 +0000
Manifest this update:     Mon 11 May 2026 08:27:43 +0000
Manifest next update:     Mon 18 May 2026 08:27:43 +0000
Files and hashes:         1: ycIPtAaIDHHcvabGs_umov85Kks.crl (hash: gFbqnqNtJKtRlSzC856TCdlhNuPne6V+OkCB7lKfhV0=)
                          2: 41E03246DA3E11F0A9D9994C8ED3641D.roa (hash: RSEIybSMpRGlyt7iVSAaODWDkzpxlz37Tk1zS8mwuzM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl
                          rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B86F6, serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
        Validity
            Not Before: May 11 08:27:43 2026 GMT
            Not After : May 18 08:27:43 2026 GMT
        Subject: CN=6a0192ff-5a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:79:95:b4:78:72:fd:29:c6:09:cd:74:3d:96:
                    a2:11:98:af:aa:12:42:91:dc:0b:32:be:54:88:0d:
                    20:7c:f4:14:b9:a9:af:a3:ef:cc:fa:d5:23:9c:4f:
                    46:0a:10:5f:46:ce:5f:01:84:7a:c1:c9:d5:ec:c4:
                    01:0d:0c:2c:87:2b:b8:8a:97:68:a4:67:4e:11:fc:
                    03:10:59:03:8f:db:e3:d3:34:e3:e2:90:1c:69:d8:
                    41:d4:62:10:64:37:ad:b9:51:13:2f:30:a6:58:9a:
                    07:bc:aa:c4:c7:23:ef:b4:6d:e4:24:be:bd:7d:e8:
                    05:05:b5:e0:30:47:77:7f:a8:9b:1d:c4:54:17:69:
                    d7:57:04:f1:06:63:7a:7f:8d:a9:f2:68:67:b7:c2:
                    c3:c7:5a:d5:73:04:6d:e0:bd:8c:8d:d3:ee:04:d5:
                    f3:20:e3:87:4b:2f:b1:bd:6a:d0:d8:53:5d:34:a5:
                    c8:09:66:e7:70:99:2b:a4:3a:21:cc:73:f8:72:43:
                    db:3e:f2:98:87:cb:1e:cd:30:da:62:9e:78:94:0e:
                    35:b6:87:fd:69:41:53:11:96:97:2d:df:c8:fd:48:
                    bc:44:d3:6c:02:8c:fc:ff:b8:e3:98:49:95:cb:22:
                    ca:64:77:fb:14:bc:e3:b2:90:45:d1:14:94:7f:e0:
                    20:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1E:16:64:78:E7:C2:AA:CD:C7:9E:5B:15:CA:63:DA:64:6F:0C:DD
            X509v3 Authority Key Identifier:
                keyid:C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b2:33:80:86:98:95:73:31:a3:ba:b9:03:96:3b:61:88:a1:
         33:e2:a4:b8:0d:33:2f:ce:8b:61:6d:ae:8b:3f:87:bf:fc:c4:
         44:67:18:55:34:c8:f5:df:b9:d9:38:fd:f6:d2:62:4f:97:48:
         b3:8f:3e:d6:a5:e4:93:ab:b5:e3:42:c7:c1:40:a2:48:b0:94:
         e9:7b:62:e7:84:69:74:26:71:c7:6c:9f:c4:8c:28:ca:b3:ba:
         ab:a8:d2:fc:bf:ae:45:c8:ab:e2:60:32:4c:52:a9:66:f3:33:
         81:d9:a1:4b:8a:b6:6f:05:13:8c:81:fe:a4:5a:dd:e8:92:59:
         ed:16:36:7b:69:ac:98:26:20:d6:1e:45:12:be:51:b2:e6:24:
         d0:40:0c:b3:c8:b6:85:92:cc:92:aa:1f:db:68:45:ab:57:84:
         a5:cd:80:5c:e3:87:41:60:8d:a0:0d:eb:a8:f5:c6:69:3a:fa:
         c3:93:bd:db:15:20:cb:19:79:6b:52:71:a7:fd:8d:ca:1a:19:
         78:56:80:1f:f8:b4:88:ae:ee:02:94:9c:d1:ea:e2:ba:6a:7b:
         8a:44:d6:2e:86:6d:50:72:8c:ed:e1:9a:36:10:8a:61:4b:0f:
         3b:08:34:46:27:92:13:0f:b7:8d:39:ae:b1:9b:d0:21:44:de:
         0d:ca:88:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:27 2026 by rpki-client