Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
File:                     YmfJfrSg3wHtvW-dQahqh54CeX8.mft (raw, json)
Hash identifier:          iQ6+iRSHzyoqkngZ4VdDeJpSh7vhtD9OjLCDpovtarw=
Subject key identifier:   C7:07:55:22:98:08:56:8B:06:C9:D6:AF:26:B8:D5:E0:1A:C4:E7:EA
Authority key identifier: 62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F
Certificate issuer:       /CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F
Certificate serial:       025F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
Manifest number:          0259
Signing time:             Wed 13 May 2026 02:23:24 +0000
Manifest this update:     Wed 13 May 2026 02:23:23 +0000
Manifest next update:     Wed 20 May 2026 02:23:23 +0000
Files and hashes:         1: YmfJfrSg3wHtvW-dQahqh54CeX8.crl (hash: iRFn5d5QKr9JtxEAplUN532euhKW4BG+YJgcNBW9AdI=)
                          2: B2DE2498C4FD11ED909F2770C4F9AE02.roa (hash: 3w67fjihibZok1qWjIP39FszAZUqgmCtMKGJLAm88jM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl
                          rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA66B, serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F
        Validity
            Not Before: May 13 02:23:23 2026 GMT
            Not After : May 20 02:23:23 2026 GMT
        Subject: CN=6a03e09c-053d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c2:0d:03:30:b0:43:a5:96:8b:8a:16:cb:a1:
                    b8:53:b6:22:04:5f:f5:86:41:82:1d:93:7c:f8:4f:
                    e0:37:4d:35:03:41:64:dc:b5:a4:b8:6e:ae:3c:9b:
                    4b:64:f8:3a:16:1d:5c:d1:46:4e:13:44:b0:20:8a:
                    35:df:33:d6:f8:0e:d9:53:e8:35:7c:e6:7e:b6:b1:
                    f1:7d:c0:48:c6:a0:a7:bd:33:a7:95:a8:f9:d0:2f:
                    0d:35:de:ad:df:a1:27:57:76:e1:a5:33:a4:c3:d9:
                    cb:5e:24:66:ba:1d:7b:e0:3d:02:e9:a3:10:be:a7:
                    16:32:86:a0:04:db:f5:eb:8b:6e:c6:7a:1f:60:25:
                    b2:dd:b0:f9:c0:67:57:1c:6c:22:66:7f:a0:87:4c:
                    81:f6:f3:13:8a:1b:d9:9d:f4:13:f3:17:10:c4:60:
                    72:90:18:c6:13:d1:a3:31:b0:af:02:df:b8:18:69:
                    4c:5f:d5:02:b8:16:c5:f1:52:7f:29:2c:19:bf:e3:
                    52:ed:8c:1f:10:b7:7b:d8:40:4a:d9:7b:db:bb:66:
                    da:1d:7e:e6:e8:6f:fc:9a:ad:73:ac:63:07:8c:bb:
                    6c:7e:48:13:2f:a7:21:82:6c:9b:97:06:fd:af:bd:
                    6b:77:16:19:be:30:c3:53:97:d1:53:1c:16:41:76:
                    7a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:07:55:22:98:08:56:8B:06:C9:D6:AF:26:B8:D5:E0:1A:C4:E7:EA
            X509v3 Authority Key Identifier:
                keyid:62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:1f:9b:a9:1c:70:11:fa:66:6f:c5:d4:1e:0d:36:05:64:d3:
         94:f0:84:a9:4c:f0:2d:f2:e4:c6:da:c5:ba:24:79:dc:0c:a2:
         db:23:5b:7b:d6:ab:e8:a8:10:0d:af:bf:8c:a1:5c:18:47:94:
         ac:68:d3:3a:f9:17:33:24:cd:a3:98:10:87:5e:9c:fd:b3:ff:
         7e:e2:90:f1:b1:3f:e5:0a:92:a3:2c:ab:1d:54:51:da:cb:a3:
         3d:d1:5f:21:17:32:26:f7:ff:d0:6f:70:d9:1a:6e:35:53:c5:
         04:c2:cd:4d:ae:41:09:f8:1c:b6:6a:78:6b:55:29:3b:72:fb:
         8d:0d:0c:fa:88:ef:52:ac:f9:df:43:c2:07:96:57:70:1e:eb:
         de:e5:42:32:27:d2:3d:a5:95:c9:d5:d9:5f:47:29:f2:8c:52:
         eb:a7:2d:44:06:38:7e:74:cd:f4:fd:58:9c:88:ab:6c:b7:34:
         da:32:7c:28:40:5c:71:d3:7c:05:86:c0:c8:89:78:47:e8:4b:
         a5:a6:d3:22:d1:02:9c:dc:93:b2:a7:f4:bb:1b:0d:73:48:ff:
         32:ab:6e:b5:6e:15:0d:75:f1:ee:1d:72:8b:f9:80:fb:c7:6a:
         22:43:44:93:1c:ef:7b:71:04:9e:2a:8d:54:6a:36:a0:a2:57:
         9d:92:3a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:37:19 2026 by rpki-client