Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
File:                     yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft (raw, json)
Hash identifier:          pJ9TvBHM8unbip4wCC+oXNcV9yrKinGYitvNloe+gsM=
Subject key identifier:   7B:DB:C9:BF:CA:1C:74:73:58:12:D0:F3:B4:8C:A1:FC:5D:51:07:AC
Authority key identifier: C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
Certificate issuer:       /CN=A91E4D3D/serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Certificate serial:       06A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
Manifest number:          0676
Signing time:             Mon 11 May 2026 14:20:28 +0000
Manifest this update:     Mon 11 May 2026 14:20:27 +0000
Manifest next update:     Mon 18 May 2026 14:20:27 +0000
Files and hashes:         1: yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl (hash: NhoimKMLUOswAsdpATVd7VEqp7usG1OzVWeYBHcRzBw=)
                          2: 5FA1BF8802DD11EE86865A23C4F9AE02.roa (hash: GFfQfs1rBXk5RvNn/1eLrsagDcvE+KrBjwNFBGF3aQo=)
                          3: 6954A6281D1811F1BB26F0200F3D8C67.roa (hash: KMQkYHwxx5aSS7rydydLWp6dwej9Nv7JCvCAwY0nrqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
                          rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 14:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1698 (0x6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4D3D, serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
        Validity
            Not Before: May 11 14:20:27 2026 GMT
            Not After : May 18 14:20:27 2026 GMT
        Subject: CN=6a01e5ab-cb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:02:70:e8:8d:e4:33:4b:6e:a1:a1:6e:f7:02:
                    a1:fc:de:c0:1a:a4:ba:52:35:95:19:7a:80:da:11:
                    a8:f1:5b:04:a8:79:2d:06:90:35:59:0c:a2:a9:ad:
                    be:14:9c:29:43:6b:12:96:e8:15:10:4d:35:d9:67:
                    84:be:ba:68:f5:8f:25:76:a3:06:4a:aa:18:e6:ca:
                    81:d1:ff:19:a6:17:07:89:ab:2b:78:ac:78:dc:0c:
                    a6:d6:8f:0c:b2:68:63:2c:fe:25:66:f8:3c:e2:99:
                    0f:2d:42:cd:c9:2a:fe:97:5b:1c:6b:a1:83:f5:d1:
                    88:ae:70:86:1d:33:87:53:0d:9d:b5:14:7e:cc:5a:
                    b5:2f:69:8a:71:ba:e5:e9:27:23:2c:8b:d7:50:af:
                    59:7f:d4:97:4d:dc:e5:43:3c:11:d4:06:26:bd:a6:
                    37:50:ca:74:29:91:58:7c:11:8c:6f:13:32:3a:45:
                    d0:d4:f7:87:40:50:3a:a2:94:81:e8:5f:c3:e5:80:
                    e7:92:48:6f:a5:15:79:17:2b:61:56:2a:70:3b:93:
                    dc:05:74:32:c1:79:c5:e3:ac:f7:7e:ef:66:bc:42:
                    31:5b:e5:37:30:87:a8:66:96:24:06:b9:9d:0a:66:
                    1a:a1:d1:cb:c4:2f:0d:64:11:04:6b:8b:67:02:a5:
                    cb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DB:C9:BF:CA:1C:74:73:58:12:D0:F3:B4:8C:A1:FC:5D:51:07:AC
            X509v3 Authority Key Identifier:
                keyid:C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d8:be:f5:e3:db:e9:f3:96:01:74:e6:af:8e:36:7c:20:ff:
         a6:ea:aa:95:54:5d:9e:bb:47:77:8d:78:18:31:ef:f5:bc:1c:
         a1:1f:b9:ff:09:0f:aa:df:fb:e0:41:4f:70:3a:00:de:5b:9a:
         50:95:1a:ed:02:fb:0f:05:3b:99:89:23:36:68:4e:27:7d:6e:
         a6:f9:dc:35:02:61:59:64:29:8f:04:87:19:81:f1:bd:de:58:
         c6:ce:0c:92:ea:37:94:ac:f7:69:0e:f1:cb:f4:5e:43:18:69:
         54:a5:8d:a7:e0:6b:bf:d3:00:04:03:ea:31:5d:54:80:90:3b:
         33:08:ba:0d:6d:ad:c4:af:3f:3f:20:20:6d:d4:35:de:35:af:
         90:c5:3f:32:55:97:d2:a9:61:31:55:f1:34:01:2c:e0:d5:aa:
         41:88:e2:40:0d:da:7b:84:89:b3:ff:52:0c:4d:0d:bc:92:20:
         44:59:fc:04:f7:aa:cf:7f:48:f6:fa:61:81:99:9b:b1:eb:65:
         a5:f2:95:ca:94:ea:01:7c:03:5d:f6:fd:b1:2e:dc:43:0c:61:
         d1:66:bd:de:86:d2:53:a3:b0:53:66:b8:39:41:30:c2:70:80:
         7f:10:92:7a:d4:45:0f:8c:41:29:d9:30:e5:e4:0c:19:1c:71:
         a0:87:46:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:15 2026 by rpki-client