Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
File:                     _RYHGGNz6B9E0TeyoOlpV-YquKE.mft (raw, json)
Hash identifier:          dTU/uIP6MzJolPi14YAI8ZiEOEpD7M/deWwSZpGfROI=
Subject key identifier:   54:EF:4F:5A:20:58:AE:85:12:7B:62:D4:27:65:F0:D7:9F:45:BD:FD
Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
Certificate issuer:       /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
Certificate serial:       3585
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
Manifest number:          355F
Signing time:             Tue 12 May 2026 15:02:31 +0000
Manifest this update:     Tue 12 May 2026 15:02:30 +0000
Manifest next update:     Tue 19 May 2026 15:02:30 +0000
Files and hashes:         1: _RYHGGNz6B9E0TeyoOlpV-YquKE.crl (hash: 6+wjuEN+rHMsMszLLB7OsU6puzNZ35FWP0CK2EeTdl0=)
                          2: D347187A7E9511ECA9132A0BC4F9AE02.roa (hash: hOPjAACYFIMnZpYQK50BQrHSZKRavg8kb8cFoUPdabA=)
                          3: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (hash: OqYW8F4250vX2cVPr/WKUGN/bLRsN60JeF92JnIapyY=)
                          4: 59F4A758BD2F11EBB84EE532C4F9AE02.roa (hash: m731XVB6b1xAGYHDb9IkvhodV8wFo5nHOoj74jQNmhY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13701 (0x3585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA958, serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
        Validity
            Not Before: May 12 15:02:30 2026 GMT
            Not After : May 19 15:02:30 2026 GMT
        Subject: CN=6a034107-c11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:21:97:da:44:c4:17:52:09:be:bf:72:7f:
                    3c:6a:17:1e:fc:a6:f8:a9:d8:a3:8b:37:ec:99:58:
                    c7:3d:2b:b0:e7:0f:80:9b:ff:a3:ec:b5:21:ef:cc:
                    21:45:21:11:0e:00:d0:cf:3b:98:2c:f3:16:2f:45:
                    9c:90:f7:ba:03:44:3e:6f:2c:c4:67:29:91:1b:2d:
                    84:8d:8e:8c:b5:dc:b7:40:47:e1:3c:0b:44:17:f2:
                    9f:be:b4:36:a8:2a:86:d0:ef:ec:a4:84:08:40:e1:
                    4d:65:5b:c7:17:12:ca:b5:44:22:cd:3c:eb:91:c7:
                    48:1f:e6:fe:ec:32:31:c5:50:69:a3:f8:b5:f1:b8:
                    93:a1:c1:a7:13:81:78:be:8d:e6:79:79:f7:4f:33:
                    21:4b:80:ad:9a:19:58:da:d3:37:dd:06:8a:97:88:
                    cc:cc:1e:53:02:9a:fe:9f:62:a6:bf:31:ad:ee:b9:
                    c0:a2:d8:f5:ec:e7:1e:fd:1b:b6:9f:e7:f1:a7:85:
                    18:a5:28:ce:44:40:bb:f4:4f:06:c8:2d:7e:1e:23:
                    25:09:bc:18:65:4d:3b:78:0c:31:b0:de:94:9e:27:
                    d3:c7:db:57:88:df:ff:37:12:89:d1:72:89:3a:72:
                    fa:56:64:30:da:32:b0:a3:f0:77:f2:74:5f:36:b9:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EF:4F:5A:20:58:AE:85:12:7B:62:D4:27:65:F0:D7:9F:45:BD:FD
            X509v3 Authority Key Identifier:
                keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:80:9a:7d:e3:a5:8b:b9:3c:f6:5c:03:3b:78:05:09:69:24:
         52:5e:40:91:ff:67:ec:cc:0e:18:62:45:5a:43:af:30:8c:80:
         23:b6:e1:68:60:57:fc:c1:fd:7d:d8:b0:2d:e9:83:98:5c:89:
         7c:4c:1e:4a:91:d5:88:e7:2a:e3:a0:02:81:59:10:d9:c1:15:
         46:fa:4d:07:70:ef:82:be:d8:82:16:75:eb:cc:41:86:63:95:
         ab:cb:62:9f:19:b4:f3:6a:12:32:65:3a:a3:ae:3d:e2:bb:d4:
         1d:9b:d8:ab:fe:ae:e1:f0:51:c9:0c:07:28:b1:0a:d7:57:f9:
         7c:03:de:e0:a1:a6:ff:34:f8:76:89:44:3d:13:7c:55:cb:72:
         bd:a2:31:87:85:c4:1f:dc:0e:8c:e1:e9:6a:6d:40:7d:a6:7c:
         1a:8a:01:db:13:49:54:42:e1:ff:d1:3c:15:28:0a:7b:45:ba:
         85:26:d1:a2:b5:90:cd:f1:19:0d:10:1d:0a:f4:07:f6:33:f4:
         bc:5c:94:c6:c4:81:f7:0d:9a:1d:b4:68:62:ff:0c:bc:39:41:
         2b:00:17:e8:b5:83:25:f6:36:33:82:ea:20:03:f0:b2:aa:25:
         25:f4:bc:15:bc:f0:95:78:d5:1c:60:bc:0d:4e:dd:ff:95:40:
         a7:89:3d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:13:24 2026 by rpki-client