Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
File:                     zyFayRHKpSBlx-xKx5V4NTgr4-0.mft (raw, json)
Hash identifier:          WMYjD/is+gbC/w9ADnEeFduSib9LRvVwrc8BPj60sJI=
Subject key identifier:   51:D7:EF:90:D6:7B:5B:1B:7C:0A:AE:1E:CD:6B:0C:0C:60:45:F2:6E
Authority key identifier: CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED
Certificate issuer:       /CN=A91BF2DB/serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
Manifest number:          5F
Signing time:             Mon 11 May 2026 08:13:02 +0000
Manifest this update:     Mon 11 May 2026 08:13:02 +0000
Manifest next update:     Mon 18 May 2026 08:13:02 +0000
Files and hashes:         1: zyFayRHKpSBlx-xKx5V4NTgr4-0.crl (hash: /UEdvv6LZDbRVXQbOE20hvAdBAqKDAXv5KbIpi6hXfQ=)
                          2: FD88540EF5E311F0AB8204204D6F56BC.roa (hash: 15B38ymuojJsU1lBlmAxw+iYaANkqD35wxiK+F+Bx6E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl
                          rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF2DB, serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED
        Validity
            Not Before: May 11 08:13:02 2026 GMT
            Not After : May 18 08:13:02 2026 GMT
        Subject: CN=6a018f8e-1cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4a:50:e8:06:66:eb:1b:d2:f1:2f:fa:07:eb:
                    d7:c3:01:ee:e0:ff:6c:6d:8d:44:1f:37:e0:ee:d2:
                    03:ed:6a:7f:32:68:10:6a:85:e0:5c:f5:32:d4:26:
                    d4:7a:44:e1:a9:37:9d:99:8c:8d:32:14:7a:db:f7:
                    75:8a:98:ab:1a:f4:a6:52:d8:37:fb:5e:15:ff:1e:
                    a8:be:54:b4:47:a5:c5:af:2c:93:67:6e:65:18:d1:
                    f4:03:d0:04:8f:d5:71:b8:94:19:7a:bd:70:ce:d5:
                    45:38:bd:49:9d:b5:0d:45:00:30:24:9d:41:cb:24:
                    ff:76:60:23:5f:36:2c:80:db:47:e6:67:0d:f5:37:
                    42:1a:01:58:f9:8a:71:7b:fc:bd:70:16:c1:53:1c:
                    c9:d6:7d:e6:2f:d9:54:2c:64:27:8c:a0:3c:4b:27:
                    65:4c:43:30:07:50:79:2e:d3:0f:20:61:a9:2d:69:
                    25:dc:90:b3:79:b5:73:38:f9:7a:45:62:c6:58:ff:
                    e1:05:5e:d3:5d:c4:a3:75:49:8a:62:23:21:97:80:
                    c1:1c:5c:b1:17:a6:ce:fc:da:cf:33:c4:36:2c:12:
                    49:0e:d7:03:55:62:08:34:58:3c:2c:04:80:f1:73:
                    49:51:fd:78:5a:1b:6a:2d:2d:f7:9e:cc:f0:2b:c0:
                    54:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D7:EF:90:D6:7B:5B:1B:7C:0A:AE:1E:CD:6B:0C:0C:60:45:F2:6E
            X509v3 Authority Key Identifier:
                keyid:CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:09:69:e8:9d:db:9b:fa:c4:87:ab:e9:82:b6:de:6a:f3:fc:
         7a:6c:66:d7:3e:62:15:ad:a8:9c:5e:21:55:4f:d0:4a:d1:18:
         cb:c9:a4:f1:15:08:9b:6e:f3:4f:ea:49:af:0f:ef:3c:1e:02:
         78:0a:64:8d:a3:00:db:63:27:e3:06:01:4a:05:70:e8:5d:44:
         76:1d:91:31:3c:b8:96:47:24:cd:04:84:87:3e:d0:08:1d:f9:
         aa:21:5b:40:19:79:b3:0f:1b:9f:fb:57:ff:9b:31:82:9e:43:
         e3:da:e8:9d:6b:b2:93:0f:ea:ad:45:f4:d1:18:bb:66:e3:b2:
         12:65:39:2a:ed:00:05:49:98:57:c6:9c:69:d8:41:51:32:fc:
         dc:56:59:29:20:2f:f3:94:60:91:ea:48:58:0c:70:0b:62:5b:
         75:a3:63:79:3a:41:1e:6f:b2:02:cb:ea:9b:9b:03:a9:e0:d6:
         19:b8:f5:ea:ce:79:de:95:7f:f4:48:61:fd:c0:a5:ad:85:55:
         1c:3f:2c:33:73:05:1c:ce:47:32:08:56:98:aa:80:5b:a7:17:
         42:21:12:c0:b4:79:3a:5b:82:b3:74:55:1a:76:f0:eb:73:08:
         fd:06:ca:ab:ea:4e:25:4f:63:69:a2:e5:24:d0:66:f9:92:98:
         78:4e:fb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:05 2026 by rpki-client