Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
File:                     FYuWZk-xya7us9KHB_h3_iN7Atw.mft (raw, json)
Hash identifier:          sQ8FQhey/QQiBEIgyemRSxz50DYgHbQgfitBmszsN3g=
Subject key identifier:   A9:5F:FC:D5:05:84:8D:85:70:6D:61:D3:FD:D1:74:C9:B4:05:F7:7A
Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
Certificate issuer:       /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Certificate serial:       02D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
Manifest number:          02BC
Signing time:             Wed 13 May 2026 01:35:19 +0000
Manifest this update:     Wed 13 May 2026 01:35:19 +0000
Manifest next update:     Wed 20 May 2026 01:35:19 +0000
Files and hashes:         1: FYuWZk-xya7us9KHB_h3_iN7Atw.crl (hash: GsysZK70+Kruj7BOODSQp+X9Qs8qTVycusi4vGOXdSk=)
                          2: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (hash: 9JCyRgRs6j+igw+gtUtxDvzUhWBvN1Zyyhk+gm4t+MI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
                          rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C08EE, serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
        Validity
            Not Before: May 13 01:35:19 2026 GMT
            Not After : May 20 01:35:19 2026 GMT
        Subject: CN=6a03d557-d722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ea:89:5c:b5:50:f1:cb:e3:73:86:33:d3:d2:
                    de:2a:58:c5:c1:00:ae:27:ef:9c:d8:d3:40:ee:c1:
                    00:f9:a4:3f:a2:36:1d:7e:8d:d0:8b:c4:a7:44:15:
                    0c:15:4c:74:0a:12:88:9a:4e:d1:ef:67:fe:98:e1:
                    e3:fd:80:43:7b:5c:b5:36:75:95:b4:7f:31:7d:30:
                    c0:fa:b6:5e:69:52:6f:64:f9:6d:69:31:1c:9c:eb:
                    75:d5:df:f8:32:d6:18:22:cf:71:23:02:88:71:5e:
                    c7:52:fe:29:4d:c9:e2:75:e6:c9:cd:5a:c3:c5:e0:
                    ac:24:07:e7:50:3d:ef:98:dc:76:2d:c7:5e:c3:12:
                    e7:70:f8:a0:6c:c3:80:3d:02:71:90:a6:3c:b5:70:
                    ca:13:f6:40:aa:6c:44:d8:11:a6:51:5c:17:e4:5a:
                    f0:d4:d2:de:06:2d:dc:0c:32:82:fe:22:f4:b5:fc:
                    d8:18:ee:fd:f2:da:d9:e2:50:c2:15:52:e9:46:74:
                    dc:78:64:35:d1:a4:32:53:e9:5d:df:07:fa:72:92:
                    8f:c9:14:94:3a:13:b8:0c:dc:ec:0c:2d:53:f2:ee:
                    77:23:2e:7e:54:24:1a:43:dc:9b:0c:d3:67:5f:9f:
                    98:0c:40:b8:a9:c5:34:7f:32:b8:a8:be:f8:f9:e9:
                    cb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5F:FC:D5:05:84:8D:85:70:6D:61:D3:FD:D1:74:C9:B4:05:F7:7A
            X509v3 Authority Key Identifier:
                keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ef:bc:7c:6c:f6:f8:ab:1f:4f:f6:ac:ca:fc:8b:41:30:17:
         73:40:4a:6b:e0:58:ce:0a:02:5f:8f:98:d5:d1:42:e3:25:93:
         11:82:1f:eb:55:b7:e9:f1:69:b1:79:b0:8e:f8:d3:90:f0:de:
         77:07:cb:4a:92:17:05:91:bb:87:f3:5d:09:b8:b9:da:a8:33:
         b9:4f:c5:a1:f6:40:f0:20:9d:0e:5a:3e:fb:b6:44:85:34:44:
         ab:35:35:9d:c1:36:08:c0:c4:1f:ef:95:fa:e0:8c:52:34:8c:
         e5:a2:08:a6:b2:52:d5:b1:4c:68:93:c5:69:50:5d:71:ac:d7:
         2d:b4:42:d0:b5:1a:23:c9:98:15:cd:c9:34:69:60:91:8c:cc:
         12:42:16:fc:5b:dd:cf:71:a2:c2:87:52:d8:de:d1:81:3b:e2:
         a9:c4:1c:ba:a2:03:3b:32:0f:be:a2:00:f6:2e:13:d9:82:32:
         61:f0:0d:78:96:f8:9f:a9:bc:89:4b:4d:f5:e2:a8:51:bc:bb:
         49:a0:60:a5:ee:df:65:d1:01:4d:0a:c3:a2:e3:81:7f:19:50:
         54:5c:78:1f:43:8d:23:2f:9e:c1:82:86:4c:4a:be:4d:f9:cc:
         ec:d9:57:2b:b7:26:82:c9:54:18:4c:3b:40:bf:3e:84:c0:d1:
         72:12:39:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:58 2026 by rpki-client