Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
File:                     yUSBytAO-x3qepOcvimo9F8l4gs.mft (raw, json)
Hash identifier:          GK+q2ifv7R4W48SSSz/2NMlYjECEiT/3+wYpo1OYtT0=
Subject key identifier:   AE:EB:B0:40:A7:F5:A3:A5:21:DF:7D:20:95:A9:46:E1:C4:39:42:D9
Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B
Certificate issuer:       /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
Certificate serial:       02B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
Manifest number:          02AB
Signing time:             Thu 21 May 2026 01:31:38 +0000
Manifest this update:     Thu 21 May 2026 01:31:38 +0000
Manifest next update:     Thu 28 May 2026 01:31:38 +0000
Files and hashes:         1: yUSBytAO-x3qepOcvimo9F8l4gs.crl (hash: b5pdJ8V0XKPksKrSOf71JJIZ3a6bX9tQS2Al/1R8YfY=)
                          2: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (hash: NLXZ65JDAAnPzadraE0zYkg0or9UL4J3E22WlvbjmhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl
                          rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689 (0x2b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113F63, serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
        Validity
            Not Before: May 21 01:31:38 2026 GMT
            Not After : May 28 01:31:38 2026 GMT
        Subject: CN=6a0e607a-8cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b5:05:ee:e9:dd:61:e2:7b:1d:3d:5b:ca:e4:
                    c4:8b:03:0c:f3:d5:72:e4:c8:f4:7f:d5:64:65:53:
                    44:51:92:6d:03:4c:b8:1c:41:9a:88:81:3d:9f:ae:
                    40:8b:25:a1:8e:b6:b0:de:91:54:61:3a:1f:59:c4:
                    6f:65:b4:ac:89:32:52:a4:d5:ee:f5:3b:f2:ed:27:
                    4f:cf:ed:06:72:3a:e9:6d:fd:5d:e3:d3:1c:50:12:
                    fb:d6:cf:cb:68:3e:ab:bd:1d:84:05:a9:61:3e:92:
                    a3:ed:5f:89:39:d4:a7:33:35:44:c6:ab:6e:cb:06:
                    04:f2:4e:62:64:25:4d:53:9d:14:bc:80:c0:ee:8b:
                    28:9f:04:5d:73:38:e8:51:5c:29:c5:5e:09:3b:f2:
                    aa:92:5c:ac:d4:02:b7:ec:d8:d0:03:c0:4d:4a:da:
                    bf:2c:ac:64:44:2e:e1:27:3e:2e:b6:57:a9:63:e6:
                    34:08:db:ae:f5:5a:a8:68:f9:e2:cb:7c:a2:c3:63:
                    6f:c9:7d:92:eb:18:c3:7d:69:44:b1:60:07:0a:bd:
                    82:f8:26:7b:7e:1b:d7:01:d0:c3:23:b8:ff:5c:20:
                    5b:b9:1f:12:9f:ab:50:7d:eb:ad:2f:ff:1f:10:af:
                    86:76:d1:a1:81:a3:1d:67:d2:87:b8:cb:4a:0d:39:
                    1b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EB:B0:40:A7:F5:A3:A5:21:DF:7D:20:95:A9:46:E1:C4:39:42:D9
            X509v3 Authority Key Identifier:
                keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:fa:57:5f:a8:a7:18:a0:7d:94:02:ba:c7:02:31:e9:df:c4:
         b0:7a:a6:9c:a3:7a:49:ad:57:96:19:7b:07:58:42:06:48:01:
         4e:bb:60:f7:85:21:aa:da:c0:6a:f9:09:a0:fd:50:11:b1:cc:
         80:00:c0:a9:e2:b7:1e:53:55:f6:70:20:a4:a6:e7:11:29:87:
         00:0e:d6:c4:64:04:99:71:c2:bd:1c:ad:45:48:e8:03:0d:37:
         fd:e3:3d:fe:a2:3c:64:7b:df:dc:34:3b:7c:cd:2d:a0:55:c8:
         aa:92:3f:f3:d9:3e:5c:32:41:3d:a5:4a:64:11:34:9d:b7:07:
         04:44:00:9a:31:6e:bd:69:00:f0:95:69:0b:43:dc:78:26:d1:
         f2:fd:47:a3:06:77:54:05:32:20:25:58:fb:a3:66:32:72:0e:
         16:13:a4:bb:95:61:8d:32:e4:ca:00:32:98:d5:ff:ef:b5:f7:
         01:0e:3c:10:91:98:c4:c9:ac:4b:cc:6f:d0:0c:3f:82:e8:e0:
         a7:bd:cd:31:1d:ae:ee:d4:2c:da:ca:14:00:f3:c7:78:d0:0c:
         64:10:28:77:05:47:47:36:34:dc:54:7d:51:46:2f:cb:73:01:
         34:d3:0d:b8:48:31:44:b7:05:c1:30:41:fe:5e:cb:54:98:ea:
         2d:8b:d3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:45 2026 by rpki-client