Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
File:                     yl3F7VK2QLF0vjjiadTEniVnTxc.mft (raw, json)
Hash identifier:          jgSySIYLUnwS1tYFsPQ4EXfspoBSe1gzb3m5O3485hA=
Subject key identifier:   F9:EA:6B:21:C0:A1:73:D2:2A:8F:F3:31:46:25:BD:06:8E:7D:BC:C0
Authority key identifier: CA:5D:C5:ED:52:B6:40:B1:74:BE:38:E2:69:D4:C4:9E:25:67:4F:17
Certificate issuer:       /CN=A9127687/serialNumber=CA5DC5ED52B640B174BE38E269D4C49E25674F17
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
Manifest number:          06
Signing time:             Tue 19 May 2026 09:06:55 +0000
Manifest this update:     Tue 19 May 2026 09:06:55 +0000
Manifest next update:     Tue 26 May 2026 09:06:55 +0000
Files and hashes:         1: yl3F7VK2QLF0vjjiadTEniVnTxc.crl (hash: AuJZ4w8HmwP3lWl6sKzbD2PrZyMHw/HgfuP0fQ4sn7Q=)
                          2: 76FA27AE4E0E11F190083CE1CC833773.roa (hash: va/1lyhr1y7ZVbyMMDIeDeUDTkfRGTrO+6LCCS/pWVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.crl
                          rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 09:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127687, serialNumber=CA5DC5ED52B640B174BE38E269D4C49E25674F17
        Validity
            Not Before: May 19 09:06:55 2026 GMT
            Not After : May 26 09:06:55 2026 GMT
        Subject: CN=6a0c282f-34bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e9:88:e1:d2:64:f5:26:c9:69:2e:91:0a:2c:
                    74:86:4f:12:85:65:9d:c2:55:bc:cf:e8:b5:0a:de:
                    7a:77:be:46:a9:23:98:6f:f1:4f:a5:ee:cd:b5:33:
                    db:d4:5f:e6:1f:ce:cb:b8:05:fe:ed:a3:d7:66:71:
                    c4:fc:e5:c0:aa:c9:4a:7d:ae:09:d2:aa:a3:76:66:
                    bc:1d:c7:37:01:07:ff:84:55:55:74:27:40:24:52:
                    e7:b0:6c:d2:50:86:44:29:11:16:54:b4:c8:3a:09:
                    85:9d:49:b1:f6:0b:ba:e1:80:e7:34:59:f9:e1:c3:
                    88:dc:50:f2:e3:2c:4f:78:00:94:44:aa:68:68:e7:
                    96:97:a9:29:20:dd:1c:fd:79:0b:3a:f5:be:02:30:
                    72:fc:6c:8b:f7:fd:d8:00:ef:0a:12:2d:57:52:89:
                    58:bf:40:a8:24:6c:bf:4f:a6:bf:79:9e:3d:0f:7c:
                    fe:58:a8:a7:56:54:c1:1a:c7:95:02:90:b8:38:20:
                    61:1b:f5:bc:71:2f:65:c7:a8:d6:b5:40:b7:43:1a:
                    34:6c:88:98:28:b8:01:8b:b1:fb:da:1f:d3:09:9b:
                    02:5f:3f:9d:3f:1c:bd:a5:1b:67:b8:46:7d:6e:0f:
                    56:91:bc:4e:6e:cd:8a:7a:75:f6:4e:f3:fe:7b:f8:
                    91:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EA:6B:21:C0:A1:73:D2:2A:8F:F3:31:46:25:BD:06:8E:7D:BC:C0
            X509v3 Authority Key Identifier:
                keyid:CA:5D:C5:ED:52:B6:40:B1:74:BE:38:E2:69:D4:C4:9E:25:67:4F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:be:ca:09:44:96:60:6e:a9:f1:c9:d8:9f:7d:53:80:a6:40:
         8e:2a:cd:99:56:d3:ce:65:2a:f7:f7:8a:6c:ce:33:34:34:9b:
         4c:3f:c6:d8:94:c4:e4:d3:d1:bb:14:f2:dc:3a:61:90:ce:b5:
         69:b8:bc:7f:12:2d:59:7a:30:09:b2:38:66:b0:85:27:a6:ed:
         c0:4b:98:82:91:98:a9:f8:ad:33:1a:9c:fe:52:23:ee:db:ba:
         dc:3c:41:f2:d5:46:b7:1f:91:89:c4:16:27:02:56:a3:98:f1:
         18:56:3a:9d:55:09:c1:2f:a1:a4:cb:d4:71:b8:19:f3:74:df:
         dd:aa:57:49:09:f7:cf:56:c0:4c:87:8a:13:2c:04:aa:69:ac:
         89:2b:36:d5:31:90:17:c8:f9:1b:37:5a:4b:ff:dd:6c:15:c8:
         9e:5e:2d:a0:bd:b0:59:d0:79:39:2e:5f:1a:e3:89:9f:e3:12:
         6f:84:10:23:da:ad:54:c5:0e:ce:80:73:a9:b1:c9:2f:fe:ba:
         24:af:ea:c2:2f:3d:96:37:72:13:9b:99:ba:65:03:8b:d7:40:
         49:e7:21:69:59:38:c8:58:a0:ad:c5:41:2a:91:93:d1:b2:57:
         40:8a:d9:ae:d1:92:e0:52:41:e8:b3:55:63:a3:28:85:33:66:
         41:12:e1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:34:23 2026 by rpki-client