Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
File:                     YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json)
Hash identifier:          /qQJHfQEOjZfs1TVc8MvvCMYlGizdGXP5hXQasGUxJU=
Subject key identifier:   2E:17:9C:91:6B:BD:4A:86:08:C6:E9:68:36:27:16:D4:17:E1:9D:A7
Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04
Certificate issuer:       /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204
Certificate serial:       01E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
Manifest number:          01DF
Signing time:             Wed 13 May 2026 03:35:53 +0000
Manifest this update:     Wed 13 May 2026 03:35:53 +0000
Manifest next update:     Wed 20 May 2026 03:35:53 +0000
Files and hashes:         1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: tPXgCwFRNedP0K/gAkHv4pSXDEfqYqnFTXWzAtwyz5w=)
                          2: 2BA240AC994111F096074C40C4F9AE02.roa (hash: BaVQtlGks/nXODj3nVj6X8TPxl0CNzfAzBCFqERU/qA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBED0, serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204
        Validity
            Not Before: May 13 03:35:53 2026 GMT
            Not After : May 20 03:35:53 2026 GMT
        Subject: CN=6a03f199-88e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:81:4c:42:f3:05:a6:d7:59:fa:73:12:84:
                    b2:16:bf:cb:61:d9:12:d5:98:c2:93:2e:70:23:76:
                    66:6e:a7:99:ac:c5:5b:48:0b:18:24:3f:95:16:e1:
                    c6:9c:96:4c:8c:d4:7e:b2:d0:ec:ce:5f:04:4e:d6:
                    5c:68:81:d2:50:3a:31:f6:a7:82:a9:26:f7:45:e4:
                    0c:55:cc:9d:b9:c6:8a:8b:f9:9d:aa:2e:17:3f:2a:
                    84:57:ee:d8:82:ca:78:6f:90:34:15:53:31:d5:ef:
                    7d:b0:73:5e:13:b3:2b:8c:69:d4:59:5d:07:71:d5:
                    de:a5:a5:3a:f8:84:66:45:2b:7f:5d:19:b8:a3:07:
                    92:22:46:81:64:9f:70:29:6a:e1:90:eb:1e:32:35:
                    55:4e:5b:7a:fe:5b:f0:9d:e8:70:61:d4:5b:8b:fc:
                    92:bb:0e:5c:e1:2d:f1:ac:c3:8c:01:1d:d6:bb:44:
                    de:57:e5:e0:e6:e5:99:cc:1e:25:0b:95:db:1d:32:
                    b9:dc:24:5f:68:e5:d2:b8:1d:41:79:59:e1:33:3c:
                    db:0a:71:99:bb:c5:08:31:89:a8:78:1a:f8:c9:48:
                    c1:ea:28:ac:87:89:89:0e:58:d5:59:00:08:f3:1c:
                    51:1f:cf:ae:d1:53:67:4e:56:4b:93:52:63:ed:e8:
                    91:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:17:9C:91:6B:BD:4A:86:08:C6:E9:68:36:27:16:D4:17:E1:9D:A7
            X509v3 Authority Key Identifier:
                keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:66:79:4c:d5:19:28:6e:f4:cd:a1:f1:b8:1b:4c:d3:9e:cc:
         28:65:c5:38:53:ec:0a:40:92:e5:5b:f6:07:db:a3:4f:d0:ca:
         e0:e4:fa:34:19:64:bc:c6:0a:c8:04:14:70:8b:aa:78:d1:3b:
         0b:13:45:f9:54:4c:05:24:2e:e3:2d:8f:dc:46:68:65:df:88:
         e1:0e:ea:4b:1e:c7:59:17:00:e4:ca:b4:62:fb:75:17:7f:38:
         4f:af:a4:75:4b:ae:d6:af:8b:94:83:aa:30:7f:30:b6:fb:28:
         f6:9e:22:01:d4:64:85:ff:9e:2a:12:d3:16:ac:92:c7:39:03:
         a2:69:89:af:a5:de:cc:02:c1:0b:85:d7:8f:51:f5:91:12:8a:
         2b:f0:37:0c:65:d5:b2:68:b2:f8:bf:32:dc:72:8b:6e:33:da:
         7b:56:e2:02:3e:ce:dd:38:3c:16:67:2f:bd:9c:87:e9:bc:03:
         3f:19:61:4d:41:dd:d4:21:46:28:97:99:d1:dd:23:83:cb:1a:
         16:5e:22:08:20:ec:d9:e1:15:c4:81:09:d8:d5:1f:51:8d:27:
         46:da:d5:43:ff:2f:1e:92:02:7a:4e:e0:0b:7d:d5:b7:66:53:
         d1:3c:68:83:b4:f6:1a:f4:e3:52:6d:8e:02:0c:23:3f:c7:0e:
         0f:0c:46:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:07:26 2026 by rpki-client