Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft
File:                     yyTPMxKhYnFYzDraiI5bywxnzqE.mft (raw, json)
Hash identifier:          bxLUoshUyHilJS76BHrUxNYIkIh+sqXFFOnSroYLXmc=
Subject key identifier:   B8:F5:CF:2D:D3:0E:D4:E5:FA:C7:91:83:65:AD:A2:74:E8:C3:1E:D2
Authority key identifier: CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1
Certificate issuer:       /CN=A9122342/serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1
Certificate serial:       0A46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft
Manifest number:          0A3D
Signing time:             Wed 20 May 2026 19:44:28 +0000
Manifest this update:     Wed 20 May 2026 19:44:28 +0000
Manifest next update:     Wed 27 May 2026 19:44:28 +0000
Files and hashes:         1: yyTPMxKhYnFYzDraiI5bywxnzqE.crl (hash: jDIR1a1v4TMgPd20oRHANImSjLdIvv8OOqtQipCNh2U=)
                          2: 4D23A77E8E8F11EAB30DCA1AC4F9AE02.roa (hash: VM+ufWIxL8v6s4z+EhTaWud7bus1nKbI0TTrUJfbrMY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl
                          rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:44:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2630 (0xa46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122342, serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1
        Validity
            Not Before: May 20 19:44:28 2026 GMT
            Not After : May 27 19:44:28 2026 GMT
        Subject: CN=6a0e0f1c-39b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:5d:51:56:9d:a2:89:b2:f5:39:7b:4e:b9:
                    91:87:96:dd:51:01:fb:67:da:d4:e3:4c:ae:d4:d9:
                    3e:1a:ff:5c:bd:47:07:fb:e5:04:99:66:2a:e6:25:
                    6c:6e:01:e4:0c:18:16:f7:5a:d0:1c:0e:f1:8d:56:
                    1f:98:19:4f:1a:35:5b:e0:fd:7e:59:46:03:b6:f8:
                    05:62:95:13:8f:d1:de:2e:45:1c:cd:b8:26:3b:12:
                    51:0d:9d:4a:84:cb:fe:d6:86:5d:11:80:da:d6:20:
                    5d:e4:df:19:5e:e7:82:d5:43:d1:a2:68:a7:a4:74:
                    ac:15:a7:68:54:29:16:7d:3f:ad:23:c5:f2:1d:2e:
                    c4:6a:f2:2c:ae:ca:22:0e:16:e6:07:60:af:02:77:
                    7b:36:66:1f:3e:96:cf:8d:07:57:24:b7:46:b7:37:
                    0d:68:19:45:4b:b0:a5:37:e2:18:e3:00:1a:f9:30:
                    c1:02:80:d1:7e:44:41:54:16:f0:d6:3b:62:6a:91:
                    e4:22:ee:14:76:d5:94:b6:c6:e9:5c:4a:9c:0f:80:
                    ef:eb:9b:1b:83:80:ef:b7:41:37:a9:f9:54:39:83:
                    43:79:00:ce:9b:4e:18:97:c0:33:96:b8:d6:42:82:
                    16:71:53:e2:15:5e:3e:17:bd:bd:9d:aa:b8:b9:14:
                    f4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F5:CF:2D:D3:0E:D4:E5:FA:C7:91:83:65:AD:A2:74:E8:C3:1E:D2
            X509v3 Authority Key Identifier:
                keyid:CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:92:25:e7:3d:0c:90:1d:0c:41:f5:d8:f4:c7:7c:75:bd:38:
         11:34:78:84:38:5d:e9:49:e2:70:81:0d:dc:1d:90:c9:7b:3b:
         4f:4e:a6:08:c8:47:6c:a2:f8:7d:7d:37:9c:64:d5:14:28:93:
         ca:d3:08:98:7c:a2:c6:6c:e8:0d:dd:a6:44:68:56:4c:ef:6c:
         97:c1:51:ae:8e:7f:10:ce:42:53:79:f9:16:cc:42:80:0d:80:
         ce:fe:f9:0f:76:c3:d4:e6:50:32:db:68:df:74:23:9f:64:60:
         6d:73:10:b5:0f:26:e6:92:3f:4e:04:f9:be:76:c4:47:30:cc:
         f5:99:ed:fb:30:b0:9f:de:d0:92:39:5c:e9:b4:50:db:22:9b:
         43:34:61:38:17:80:d2:e0:c6:f5:66:1a:fc:72:6a:65:ec:c6:
         a1:09:15:c4:24:8a:75:75:a8:0c:99:a4:9b:4d:dc:28:9b:2c:
         bf:ca:9e:74:5a:19:2c:3a:6d:f6:7b:f0:63:c3:82:2b:bf:59:
         6f:43:30:03:0a:7b:53:c0:39:33:66:53:d5:7c:17:74:c0:9c:
         77:aa:83:2a:fd:b8:f0:fe:ce:b9:f8:fa:90:0a:18:22:06:f0:
         56:ea:a0:b7:a6:5d:57:28:56:59:d3:53:86:f0:98:c4:3e:4a:
         13:17:d9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:09 2026 by rpki-client