Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
File:                     Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft (raw, json)
Hash identifier:          Ocs50ndONlxf0lmv2k2tPQrdwJhyFvpAz9GRpyWUUP8=
Subject key identifier:   A7:39:0D:41:E7:50:CE:DB:9B:93:93:A8:5A:60:20:27:6B:AB:E9:FA
Authority key identifier: 63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0
Certificate issuer:       /CN=A91BB629/serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
Manifest number:          0159
Signing time:             Mon 11 May 2026 05:09:16 +0000
Manifest this update:     Mon 11 May 2026 05:09:16 +0000
Manifest next update:     Mon 18 May 2026 05:09:16 +0000
Files and hashes:         1: Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl (hash: ddZH5tSC2BWf77aWb9ka2Oo7XmirjDZNnx/1p5Mpz0M=)
                          2: 7CE4326245B511EFBAC06E1EC4F9AE02.roa (hash: y32dMEUN6YUCKolUe/uVA0r0aXZ6vWR2Ez2nh841QQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl
                          rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB629, serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0
        Validity
            Not Before: May 11 05:09:16 2026 GMT
            Not After : May 18 05:09:16 2026 GMT
        Subject: CN=6a01647c-eb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:fd:58:fe:7b:9c:96:e1:73:7c:14:71:31:
                    34:ff:c9:6b:95:a8:e2:a2:53:30:6c:89:33:96:2a:
                    19:16:ee:39:72:58:ca:34:1b:19:fc:6d:1a:59:84:
                    29:32:80:2d:4c:fb:e3:58:29:4a:68:18:33:df:c3:
                    b3:db:ee:ad:20:28:97:06:6f:73:5a:1c:9c:75:98:
                    72:2a:49:2d:1f:12:c7:69:70:6c:2a:a7:ee:0d:ce:
                    56:c0:1f:e9:17:31:12:51:19:12:d8:68:5e:3d:4f:
                    d7:eb:c3:3f:83:ec:d7:76:4f:90:22:3f:f7:75:b1:
                    66:0a:a6:e5:f2:8e:19:86:91:05:d6:45:44:50:6e:
                    a3:fe:2f:ec:22:aa:40:85:98:78:a6:b2:45:9e:45:
                    86:8b:6c:0b:5e:6c:d3:11:96:1c:44:ff:74:58:8e:
                    dc:7c:75:9f:0d:a7:64:8f:fb:5e:9c:cf:f4:2b:97:
                    0c:18:d2:c9:f2:ec:79:2b:03:30:e5:8d:53:fc:1a:
                    44:5b:bc:34:b3:7d:bc:d7:a1:26:e2:db:84:3e:c3:
                    3e:b7:58:77:0b:78:45:f3:0b:0c:ce:86:b9:94:41:
                    9b:aa:fb:06:00:71:e0:72:77:3e:35:4b:6c:ac:9e:
                    a5:d2:1e:74:08:85:bf:44:0d:b2:e3:a0:d4:f9:c8:
                    45:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:39:0D:41:E7:50:CE:DB:9B:93:93:A8:5A:60:20:27:6B:AB:E9:FA
            X509v3 Authority Key Identifier:
                keyid:63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ff:2a:58:8d:ac:a7:09:40:4d:84:7b:3f:22:83:83:00:eb:
         44:d1:ff:20:35:aa:4c:e3:5f:2a:eb:4d:17:0f:b3:88:c6:f3:
         4e:8f:46:82:90:3e:b1:21:e9:3e:77:4e:0b:52:e8:23:2a:d0:
         d6:ce:2d:77:34:d0:00:8c:c7:72:47:8b:88:8d:36:2d:28:cd:
         b5:26:34:a7:11:7e:4e:d4:6b:40:20:a4:a3:76:6f:69:33:46:
         ee:48:ba:a7:dc:96:72:b1:ac:b9:ea:00:d3:9f:45:ba:fc:c3:
         dd:0d:08:39:a8:e0:0d:84:ab:59:28:b8:05:55:9f:4b:84:b8:
         1d:a2:34:f7:33:60:a2:3c:3c:90:c4:28:4c:b1:e8:e8:14:02:
         86:51:ec:c9:f2:4b:41:cf:3c:5a:58:a3:0f:0a:63:21:d6:aa:
         cc:5e:41:2b:c9:34:bc:37:cd:91:d2:bd:b7:bc:19:ed:73:f3:
         41:f1:bb:86:c5:22:0e:df:4f:b2:8d:39:95:f4:15:ac:aa:46:
         4e:41:ee:4e:c4:c5:0d:44:05:da:b4:47:80:97:76:b5:25:e3:
         97:f8:67:2a:34:47:23:12:18:e4:40:7b:41:f5:32:71:3e:ef:
         46:af:52:0b:95:6a:c5:e6:cf:34:e1:78:f9:94:69:ab:8e:c0:
         c0:30:82:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI2MjkxMTAvBgNVBAUTKDYzMEVGQzhCQzgyNDdGOTlBMDEyODA3NDFFNEExQTBE
QjdGMTQ3QjAwHhcNMjYwNTExMDUwOTE2WhcNMjYwNTE4MDUwOTE2WjAYMRYwFAYD
VQQDEw02YTAxNjQ3Yy1lYjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxVL9WP57nJbhc3wUcTE0/8lrlajiolMwbIkzlioZFu45cljKNBsZ/G0aWYQp
MoAtTPvjWClKaBgz38Oz2+6tICiXBm9zWhycdZhyKkktHxLHaXBsKqfuDc5WwB/p
FzESURkS2GhePU/X68M/g+zXdk+QIj/3dbFmCqbl8o4ZhpEF1kVEUG6j/i/sIqpA
hZh4prJFnkWGi2wLXmzTEZYcRP90WI7cfHWfDadkj/tenM/0K5cMGNLJ8ux5KwMw
5Y1T/BpEW7w0s32816Em4tuEPsM+t1h3C3hF8wsMzoa5lEGbqvsGAHHgcnc+NUts
rJ6l0h50CIW/RA2y46DU+chF/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKc5DUHn
UM7bm5OTqFpgICdrq+n6MB8GA1UdIwQYMBaAFGMO/IvIJH+ZoBKAdB5KGg238Uew
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjYyOS9FMkNGOTQwQTQ1
QjQxMUVGOEZEQjc0MURDNEY5QUUwMi9Zdzc4aThna2Y1bWdFb0IwSGtvYURiZnhS
N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1l3NzhpOGdrZjVtZ0VvQjBIa29hRGJmeFI3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjYyOS9FMkNGOTQwQTQ1QjQxMUVGOEZEQjc0MURDNEY5QUUwMi9Zdzc4aThna2Y1
bWdFb0IwSGtvYURiZnhSN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtf8qWI2spwlATYR7PyKDgwDrRNH/IDWqTONfKutNFw+ziMbzTo9GgpA+sSHp
PndOC1LoIyrQ1s4tdzTQAIzHckeLiI02LSjNtSY0pxF+TtRrQCCko3ZvaTNG7ki6
p9yWcrGsueoA059FuvzD3Q0IOajgDYSrWSi4BVWfS4S4HaI09zNgojw8kMQoTLHo
6BQChlHsyfJLQc88WlijDwpjIdaqzF5BK8k0vDfNkdK9t7wZ7XPzQfG7hsUiDt9P
so05lfQVrKpGTkHuTsTFDUQF2rRHgJd2tSXjl/hnKjRHIxIY5EB7QfUycT7vRq9S
C5VqxebPNOF4+ZRpq47AwDCCuw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:20:52 2026 by rpki-client