Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
File:                     yLK8O4qx665KdD-Q2Mih39HUzhc.mft (raw, json)
Hash identifier:          OSiWA3oVIhatQqPe9mL+3OWYi8+LJLJlxwzuLfhxEvU=
Subject key identifier:   5F:BB:50:9D:C1:02:52:96:20:5A:25:10:28:10:A0:A8:CF:B6:27:2B
Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17
Certificate issuer:       /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
Manifest number:          D3
Signing time:             Mon 01 Jun 2026 07:31:56 +0000
Manifest this update:     Mon 01 Jun 2026 07:31:56 +0000
Manifest next update:     Mon 08 Jun 2026 07:31:56 +0000
Files and hashes:         1: yLK8O4qx665KdD-Q2Mih39HUzhc.crl (hash: Ul/DMFAU9N+tQWLS4DNR8m06UcuUgpJ6o1RBjtRvRHc=)
                          2: 758E8E941EFA11F0A6533A31C4F9AE02.roa (hash: 3KZYWiJqZH8n9U/9eCnSUD7SavXQ/Ekzxh7yjVvlx04=)
                          3: 8C19B3A21EFD11F0B822DF56C4F9AE02.roa (hash: TSbzXgPkumBg0cDwPI2XndJNJ0jn2eg2lDv16RkcG74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl
                          rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
        Validity
            Not Before: Jun  1 07:31:56 2026 GMT
            Not After : Jun  8 07:31:56 2026 GMT
        Subject: CN=6a1d356c-e03f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:d1:bf:f7:a0:a4:a1:e3:a1:57:3f:25:40:
                    ea:69:95:42:7c:5b:4a:d0:fa:7d:51:0d:8a:10:d6:
                    9a:b9:1d:10:1d:f6:84:99:a5:4a:5d:85:35:c0:c8:
                    dc:66:f7:b5:87:97:72:a7:6b:7a:76:6b:b7:4b:02:
                    69:fe:71:b8:ac:86:cc:2f:50:73:c9:a2:6d:c5:21:
                    ba:8f:fa:31:e3:55:51:5c:dc:4d:8c:37:1e:e9:02:
                    c5:77:79:f3:c2:c2:5d:ad:80:07:9d:af:34:5f:97:
                    af:c3:f8:e4:1d:6e:a2:87:a5:c1:06:9c:69:90:a0:
                    a2:3c:0a:3b:94:ba:bd:35:70:45:77:3c:7f:44:01:
                    00:2e:09:0b:28:d9:46:1b:ab:ad:39:89:b5:41:7a:
                    95:e5:7a:ee:85:71:0f:78:c2:9c:69:06:2f:29:77:
                    9f:29:42:61:ad:a3:23:43:9e:bb:0a:a5:7d:6f:b1:
                    a4:14:25:ac:1a:8a:bf:4e:d5:63:45:3f:a7:78:61:
                    20:3b:20:1b:21:9c:d2:25:49:29:65:6a:5a:2a:8c:
                    e3:e1:fd:49:f4:d4:4a:97:86:01:fc:ca:bc:81:b1:
                    11:b3:82:82:81:4d:af:bc:4f:ee:3e:c6:a5:24:c6:
                    3b:73:00:87:ee:5d:a8:70:60:9b:0d:e4:93:7c:20:
                    a2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BB:50:9D:C1:02:52:96:20:5A:25:10:28:10:A0:A8:CF:B6:27:2B
            X509v3 Authority Key Identifier:
                keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d8:58:ef:aa:21:30:86:c1:bf:da:3b:58:96:b7:44:71:ec:
         e2:d4:22:5c:06:47:02:f0:ee:2a:ad:9e:da:05:04:a4:7d:04:
         aa:f6:97:81:71:06:32:c1:64:a5:06:21:93:c7:56:f3:41:41:
         8f:24:33:77:9e:a2:0f:03:97:59:bb:e5:e2:1e:01:0f:4f:1f:
         77:4f:40:75:36:6c:bc:b9:3f:ef:c4:d6:36:4b:4f:73:6c:c1:
         1a:e0:65:e8:63:da:49:1c:6d:3c:a7:00:ba:e4:98:18:ed:62:
         d9:6f:65:d4:e4:5e:5e:39:30:c4:ba:89:a0:c8:a7:7b:c4:88:
         47:2f:25:dd:ca:ab:91:7e:28:df:99:bc:a3:31:35:cc:15:12:
         23:a7:ba:a9:73:65:8d:d4:73:2a:93:39:19:19:d1:f5:a1:be:
         99:1d:5d:4b:74:32:d7:6b:70:11:d2:9c:b0:13:f5:be:1f:47:
         09:48:b9:a2:d0:58:b1:69:6d:7a:1f:db:14:82:ab:b8:b7:2a:
         84:da:d6:03:b5:d9:90:a8:e6:0f:95:1d:cc:8a:7c:16:ef:ab:
         1d:d0:b3:50:46:a1:e9:9f:1f:38:48:a0:a4:4f:75:bc:fa:3a:
         05:90:38:65:a3:7b:85:95:35:b4:d1:7c:86:86:d4:1d:5f:ce:
         f1:06:7d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 22:24:13 2026 by rpki-client