Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
File:                     yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json)
Hash identifier:          rUfNJNQcNMfJvcsctEkV/sycf/I7GHCCwXPcd+13Jik=
Subject key identifier:   65:4D:4E:CB:57:E8:DD:5C:08:62:6A:66:3C:16:61:9A:89:8A:8C:2C
Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05
Certificate issuer:       /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
Certificate serial:       0779
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
Manifest number:          1787
Signing time:             Tue 12 May 2026 17:27:53 +0000
Manifest this update:     Tue 12 May 2026 17:27:52 +0000
Manifest next update:     Tue 19 May 2026 17:27:52 +0000
Files and hashes:         1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: qqcclr8810Qd8p9ToQjfKH50M4+hgn0WTSJNEv4fu5s=)
                          2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: hwOf7SRKK2ExdUeCLcvf4HAC8wZaCK5Ulx58N9GVET8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1913 (0x779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C5F, serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
        Validity
            Not Before: May 12 17:27:52 2026 GMT
            Not After : May 19 17:27:52 2026 GMT
        Subject: CN=6a036319-ff7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1a:fa:e9:ce:08:b3:f8:6f:c9:43:63:d2:8a:
                    9f:7e:49:a2:55:98:38:9e:cf:87:83:73:82:9c:1c:
                    2e:98:35:cb:b6:c4:db:79:7c:b1:23:cf:8a:fa:73:
                    c4:04:c2:f9:72:00:b8:de:cf:a5:21:14:3e:fd:b8:
                    08:3d:7f:79:d3:c9:63:1d:c1:6f:ef:c1:e5:32:1e:
                    5d:7c:0f:54:63:8e:be:12:b4:24:ff:18:60:b7:fe:
                    6b:43:b8:0a:0e:60:7c:f0:26:57:48:23:0d:d9:d7:
                    c0:8f:2f:bf:99:c2:e2:13:f9:e3:9a:98:51:2f:6e:
                    3f:22:58:97:9f:a8:45:fe:63:9b:b2:d5:7c:48:05:
                    9e:6b:3a:60:09:49:5d:42:71:9f:84:35:06:93:b5:
                    39:50:19:89:67:1a:85:f8:24:f3:91:c4:66:b3:20:
                    d9:f7:26:05:fc:12:54:5e:02:5f:bc:e0:93:62:da:
                    f8:50:39:ef:45:dc:eb:c0:ae:31:d6:3d:25:04:de:
                    3a:b8:94:bc:59:2e:d9:3b:5c:e2:ba:75:bb:81:f5:
                    ed:cf:8d:48:a2:6b:7f:8e:31:60:d9:bb:fd:83:47:
                    da:99:c1:f9:de:e7:fe:e9:ff:b1:2e:45:aa:59:25:
                    f4:59:c1:ec:98:a5:6c:87:90:7c:43:01:86:29:3b:
                    4f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4D:4E:CB:57:E8:DD:5C:08:62:6A:66:3C:16:61:9A:89:8A:8C:2C
            X509v3 Authority Key Identifier:
                keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f6:a6:49:3f:d1:37:d8:c4:77:c3:33:7d:1a:6d:be:8b:6b:
         df:d7:d3:d9:74:09:2c:0d:54:b4:90:ea:2b:3f:fb:c9:9b:6c:
         35:10:ea:1f:4d:07:2c:7b:fb:ff:87:39:3a:41:64:ac:9f:93:
         38:52:8d:82:07:73:94:19:64:1e:b4:32:e8:93:f2:52:69:43:
         c2:07:1f:ff:b4:79:c0:26:b2:77:0e:3d:90:9f:0f:bc:e6:e1:
         be:da:7d:c7:ab:27:31:1b:a2:43:46:d9:53:dd:41:38:cf:50:
         a9:3d:e4:b7:f2:11:cd:a6:69:ae:cc:e4:60:9d:ed:f4:6e:5d:
         c8:3d:26:24:52:40:8b:56:cc:60:0e:a1:b3:15:cc:f2:8f:2c:
         7f:27:24:d8:09:b8:a1:0c:3b:2e:01:25:99:06:04:7a:63:4f:
         bd:93:2b:7f:75:75:a2:38:42:02:c7:c2:44:37:31:0f:0f:74:
         22:12:17:35:d7:cd:e5:2f:12:5d:b0:d3:0c:51:e6:df:87:f7:
         f4:ab:f0:25:6b:47:a0:5d:66:65:42:50:07:a4:93:1e:21:d4:
         14:51:70:7f:44:9a:d8:6b:33:59:ba:b9:0f:8c:19:d0:54:f2:
         67:b1:b7:66:77:c4:f3:a2:74:dd:d2:9b:d2:47:c3:93:f0:eb:
         7c:f1:4c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:59:18 2026 by rpki-client