Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
File:                     ysouRCIiw-2H53WblewRGMOLhbY.mft (raw, json)
Hash identifier:          5g1lxa2WDamH55i5iCoJrcnSUG1yOlwbGNhJ03/RF5k=
Subject key identifier:   23:27:CB:EA:ED:E6:55:33:5A:1D:B5:D0:D1:F8:A8:70:D4:C9:5E:8D
Authority key identifier: CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6
Certificate issuer:       /CN=A91E9A44/serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
Manifest number:          60
Signing time:             Mon 11 May 2026 08:11:46 +0000
Manifest this update:     Mon 11 May 2026 08:11:45 +0000
Manifest next update:     Mon 18 May 2026 08:11:45 +0000
Files and hashes:         1: ysouRCIiw-2H53WblewRGMOLhbY.crl (hash: rPvzFR/kXRQB+GFQ+HMPqHkGVutMYFx80xDe5+MX5hE=)
                          2: 769D5C68C09711F08165E157C4F9AE02.roa (hash: 3tYLBRUzTfxYAnjVbgvjgG4344sWcV2hWfRHWFTWJRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl
                          rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9A44, serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
        Validity
            Not Before: May 11 08:11:45 2026 GMT
            Not After : May 18 08:11:45 2026 GMT
        Subject: CN=6a018f42-c7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:dc:09:ba:d1:62:89:af:dc:0f:40:cb:48:
                    77:dc:0a:82:53:2f:a6:6f:99:fb:45:e3:93:74:b2:
                    c4:6b:57:68:d5:d6:03:51:a1:20:9e:61:c3:ec:b4:
                    bb:ac:c6:85:52:83:e7:a4:fe:15:ba:16:fb:e3:55:
                    b9:11:a5:e3:ba:3c:f7:b9:7a:e8:d3:a1:bf:df:cf:
                    4c:c7:0a:df:9c:66:08:88:51:de:e2:75:cc:37:ac:
                    c3:38:29:62:84:ff:de:88:d0:ca:38:26:7d:5d:40:
                    43:6a:0d:41:91:dd:31:31:3a:e9:fc:f6:c6:b8:a9:
                    d0:fb:85:98:79:68:96:8c:0e:06:67:cf:59:43:fd:
                    4f:dd:48:4b:13:da:1c:f1:ff:d3:23:0c:11:00:00:
                    f0:a4:8d:ea:f0:05:93:72:aa:a0:78:0f:6a:56:1a:
                    50:70:fe:07:e1:72:22:59:7b:c0:74:e3:46:1c:91:
                    b5:f5:6b:76:8c:e8:01:50:46:a9:c1:0f:db:f5:24:
                    ae:e8:2f:ea:f3:51:55:18:c8:58:e7:25:04:3a:55:
                    b0:b5:dc:01:8c:7d:d8:b8:cb:d2:48:ea:99:3b:97:
                    34:41:49:84:45:55:c9:d5:4d:4b:3b:8a:19:e3:9d:
                    3a:28:95:fe:ab:ea:13:7a:5e:cb:24:ab:22:dc:32:
                    03:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:27:CB:EA:ED:E6:55:33:5A:1D:B5:D0:D1:F8:A8:70:D4:C9:5E:8D
            X509v3 Authority Key Identifier:
                keyid:CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:38:bc:2a:e5:fb:11:89:98:4a:b4:b7:1f:8c:ec:d7:4a:a7:
         d7:9c:fe:c4:6b:fc:3a:63:8f:5b:bd:19:e2:6c:0a:f4:2a:ec:
         e2:28:c3:98:10:5f:de:45:bf:15:3b:06:9f:7a:28:d3:f1:84:
         aa:c9:49:06:4c:c3:3a:b5:a3:22:7a:d6:ce:a2:e7:33:b5:4e:
         88:82:9c:3f:d9:e1:65:48:c9:82:61:6f:92:64:ce:10:88:70:
         32:fb:93:2f:0d:81:4e:9f:db:09:11:17:55:cf:d4:45:68:c5:
         62:a7:12:a7:a7:c8:89:6d:e3:9c:51:40:fd:a5:77:49:5a:57:
         eb:9e:a6:3b:a1:01:1b:36:02:37:dc:5e:b7:63:7b:60:28:0d:
         23:a7:52:21:84:b9:fd:19:4a:12:af:ad:38:df:26:97:1f:1b:
         4b:75:a0:fe:d6:ad:29:86:59:97:67:0e:18:51:d4:c2:0e:01:
         46:0a:fe:49:85:86:98:58:95:c0:86:7f:8f:7a:8d:9c:e2:11:
         41:0c:69:05:2a:d5:f1:5c:89:5c:77:a1:3e:e0:77:27:b7:ba:
         91:ac:7e:ea:dc:b2:2b:a8:bf:38:fb:57:e7:54:54:8e:5b:4a:
         51:25:31:df:29:a5:2d:7e:73:55:9c:d4:52:ff:da:14:15:02:
         46:77:cb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:03 2026 by rpki-client