Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
File:                     yL8GWnSCLvjMYvSlTlnVhxILb0c.mft (raw, json)
Hash identifier:          kzrxrWoeVEKOt76NRUEOE/DfhS5WYa8qlmR0Bm0ZrhA=
Subject key identifier:   4F:77:1F:88:A4:6E:3F:89:90:D1:A7:84:93:B1:10:BB:09:2D:7B:76
Authority key identifier: C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
Certificate issuer:       /CN=A91E85F1/serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
Manifest number:          D3
Signing time:             Mon 11 May 2026 06:52:30 +0000
Manifest this update:     Mon 11 May 2026 06:52:30 +0000
Manifest next update:     Mon 18 May 2026 06:52:30 +0000
Files and hashes:         1: yL8GWnSCLvjMYvSlTlnVhxILb0c.crl (hash: 0/v5gPgFvMzcE6hiFcL5CxeBCzXnwZLX4llv26bha74=)
                          2: 4D144B780DFE11F09C46E054C4F9AE02.roa (hash: ZgPtES9Kb7/bZDuku74P3oPXELpqML+BgkqSggVYIcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
                          rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E85F1, serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
        Validity
            Not Before: May 11 06:52:30 2026 GMT
            Not After : May 18 06:52:30 2026 GMT
        Subject: CN=6a017cae-ba36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:63:a4:71:4b:0e:05:ba:5d:59:d1:a1:25:
                    18:79:c7:13:71:04:30:7f:dd:9c:01:63:86:ee:c8:
                    3e:fc:6a:a9:5c:0d:50:c1:62:06:5a:e2:fa:48:84:
                    3f:94:3e:0d:fa:61:5f:9a:01:a3:ac:89:5b:46:7c:
                    6d:8f:ac:09:de:76:d8:59:30:80:8c:27:36:e0:c7:
                    ed:44:6c:5a:ce:8d:26:45:36:c3:15:0e:7f:6e:d8:
                    8b:cf:81:91:1c:ee:4a:de:61:7b:76:25:7b:5c:71:
                    6c:4d:53:9a:ae:f7:74:dd:4b:e6:2d:49:28:da:fc:
                    51:11:aa:ce:46:13:ce:5b:1b:a9:2f:4e:2a:70:b0:
                    62:69:53:38:7f:88:4a:24:e2:b7:5b:f9:00:c9:d6:
                    f4:23:30:6e:5e:a4:b7:1d:9d:6b:04:3a:b5:cb:4f:
                    60:e2:43:50:2b:7e:a5:bc:99:87:43:79:33:2a:cd:
                    a5:80:1d:4b:28:06:52:da:ae:bf:e3:8c:cc:30:50:
                    dd:ee:c0:b5:a2:a1:e9:09:f1:d0:88:8a:f3:66:d0:
                    5c:7d:c0:b3:2f:ae:03:15:45:46:a9:d8:29:da:8f:
                    83:c4:44:21:1e:a0:60:98:5b:04:89:7f:d3:e7:b0:
                    2f:16:d6:66:2b:51:1a:db:35:0c:5a:87:d6:12:42:
                    89:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:77:1F:88:A4:6E:3F:89:90:D1:A7:84:93:B1:10:BB:09:2D:7B:76
            X509v3 Authority Key Identifier:
                keyid:C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:8a:7b:f4:19:aa:fb:86:70:51:eb:73:04:4c:3e:3d:a8:f2:
         4b:3d:d9:a6:ce:21:63:ec:86:05:4b:32:4d:7d:ab:87:2b:f8:
         d0:cf:11:19:99:23:ec:9c:a2:dc:d5:68:b7:f9:d0:4e:7b:7c:
         aa:dd:53:1d:6d:e9:ff:d7:c6:60:1c:65:6f:a3:a4:b9:4a:41:
         37:e3:e0:ae:a5:c6:d5:b2:28:93:8d:9d:a1:ce:3d:48:d8:a2:
         ae:64:96:e0:99:2c:07:24:69:40:49:29:72:70:80:10:33:d6:
         59:b0:a6:b8:cc:a8:de:30:ba:4b:31:41:3b:45:8e:72:d2:f7:
         a4:0f:f4:2f:67:96:56:4e:06:c3:6b:0a:fb:02:41:84:36:98:
         b4:35:5f:08:53:e3:b4:9d:9a:5e:b0:8b:1a:e9:9d:2f:cf:fe:
         57:0e:da:0c:d3:1f:44:5c:26:b7:99:c4:01:be:43:eb:a0:27:
         e7:9f:6d:5e:0d:e9:2d:2c:8b:84:7a:18:47:ed:ec:7a:31:6b:
         32:09:7a:63:c6:71:4e:b9:8e:5d:0b:c3:bc:1b:82:3d:01:76:
         92:85:c3:80:64:07:57:38:0c:e4:af:c3:61:b6:77:48:21:51:
         01:62:c3:00:49:f6:74:dc:60:1b:ca:a6:f1:49:5e:f8:59:a1:
         ca:2d:26:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:23 2026 by rpki-client