Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
File:                     YC_0-oCgAKxh5tSrL3L72Wph-II.mft (raw, json)
Hash identifier:          s4XTaKCmDOnTjnyaseDGFsaWxdtB78QAFoHWSCjOgaI=
Subject key identifier:   AD:DA:A6:A8:74:80:83:A1:1C:11:91:EF:5E:B2:A6:9E:03:91:DF:23
Authority key identifier: 60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82
Certificate issuer:       /CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882
Certificate serial:       0323
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
Manifest number:          031B
Signing time:             Wed 13 May 2026 01:17:55 +0000
Manifest this update:     Wed 13 May 2026 01:17:54 +0000
Manifest next update:     Wed 20 May 2026 01:17:54 +0000
Files and hashes:         1: YC_0-oCgAKxh5tSrL3L72Wph-II.crl (hash: sGcyITtJD3g2bjRNH71LyrBHqF71JA0nDTISX5x7rWE=)
                          2: 008C0876148311ED856EF438C4F9AE02.roa (hash: JMFnVMq8cx34sWu7oB7qPIb3K+S3Rgi+dhrM6C7KtRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl
                          rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803 (0x323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9293, serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882
        Validity
            Not Before: May 13 01:17:54 2026 GMT
            Not After : May 20 01:17:54 2026 GMT
        Subject: CN=6a03d143-db43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:be:0e:8c:0d:b1:c2:70:f1:19:fc:23:c5:58:
                    ee:2f:bc:5e:51:f7:19:3a:fe:a0:6c:19:8c:78:d2:
                    c6:19:e1:9d:02:ee:61:d6:d0:ac:8f:2e:e4:62:38:
                    3c:7c:4d:d1:c8:8d:ad:0b:94:9f:b6:0e:e9:fd:e7:
                    ad:36:db:00:a4:f1:03:00:c0:3b:04:89:e3:d0:19:
                    ab:b7:0b:f0:2b:d5:d9:e0:9b:c1:1e:8c:5a:08:28:
                    84:e3:74:6c:44:27:10:7c:97:d0:de:d9:ff:9b:f2:
                    a3:0a:a1:d2:15:de:68:cd:eb:0b:cb:24:d8:eb:63:
                    cf:99:23:39:2b:bd:48:3f:f2:ef:31:48:7f:0c:4b:
                    a9:47:f6:51:d0:a0:8a:4d:6a:1e:5c:c4:2d:98:a8:
                    36:04:aa:be:3e:14:87:aa:d0:44:28:b3:27:4f:70:
                    54:f0:e3:24:42:b0:1c:4f:da:74:39:64:ba:59:d8:
                    0d:c1:e2:13:c1:8c:57:a1:66:62:c3:bb:c1:74:d3:
                    2b:a7:1b:41:bc:d3:5e:2b:e9:af:8c:78:c6:7e:91:
                    31:8f:36:d3:e3:20:26:86:65:ac:8b:61:1c:4e:12:
                    55:78:15:1c:79:2f:76:da:77:2c:11:c0:4c:ec:71:
                    95:a4:0c:3c:99:02:6a:46:ed:f1:22:41:17:c7:fa:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DA:A6:A8:74:80:83:A1:1C:11:91:EF:5E:B2:A6:9E:03:91:DF:23
            X509v3 Authority Key Identifier:
                keyid:60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:8e:09:c9:80:da:96:a8:b7:ac:75:a0:d0:9b:7f:c7:89:05:
         10:ea:ab:f1:b5:79:cf:50:69:5a:a8:11:03:62:07:8c:59:64:
         1f:e4:90:73:d8:3d:f8:53:38:7f:5e:77:f6:ea:54:e6:54:cb:
         e5:5c:c7:01:98:06:31:f5:7a:9a:e5:a1:4c:52:65:07:2e:cc:
         48:24:4b:97:04:78:32:ec:3a:c4:42:bc:de:b4:e2:15:14:60:
         e1:db:d3:ce:5c:58:6d:94:1a:38:67:e7:e7:8c:e0:44:88:c5:
         ac:f5:9a:f6:45:1c:8a:1b:da:0f:68:33:ee:a7:4c:1f:fd:b2:
         9f:d6:37:6c:69:88:e3:3d:b2:86:ff:27:49:0b:2b:6e:fe:15:
         be:2d:9e:fa:b7:b5:f4:ae:fc:3b:4d:66:27:62:93:f8:78:2b:
         54:ed:7c:55:65:eb:2d:c7:ce:70:91:19:09:7d:e8:42:0e:9d:
         bf:0a:48:3e:2c:08:39:7c:2e:53:7c:7b:41:a6:9a:da:38:b2:
         e8:f3:1f:45:92:7c:00:ee:22:a7:d2:cb:3e:4a:f5:8e:85:a5:
         e4:30:d2:34:88:da:48:e1:dc:08:c7:81:1f:53:60:cf:c9:50:
         de:2b:fb:0b:16:bc:d9:41:bf:bd:3b:8a:a2:ea:49:ee:f8:29:
         76:42:e5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:10:37 2026 by rpki-client