Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft
File:                     YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft (raw, json)
Hash identifier:          0zBt5FfOw+T+wd1Tc8UCmNulowmHF2PWI6+2LIbZD9A=
Subject key identifier:   E1:7D:6F:52:3D:32:2B:56:22:99:1C:CD:46:1E:AA:AF:97:BE:86:20
Authority key identifier: 60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA
Certificate issuer:       /CN=A913A839/serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA
Certificate serial:       0AF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft
Manifest number:          0AEB
Signing time:             Wed 20 May 2026 19:25:18 +0000
Manifest this update:     Wed 20 May 2026 19:25:18 +0000
Manifest next update:     Wed 27 May 2026 19:25:18 +0000
Files and hashes:         1: YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl (hash: edXRkCayjqBxgoZPcoCn3x3nGnSsS+N7/4hQq2ufvLw=)
                          2: 0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa (hash: OzzisHqp9aMxr1INfPGQv4pLf3uDSdbaDwDpJkSYQh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl
                          rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2804 (0xaf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A839, serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA
        Validity
            Not Before: May 20 19:25:18 2026 GMT
            Not After : May 27 19:25:18 2026 GMT
        Subject: CN=6a0e0a9e-aa01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:38:ee:62:e9:10:be:52:dc:09:76:3a:8c:
                    81:1e:0e:7b:e9:bb:f7:42:ce:b3:ec:c3:55:bb:3d:
                    54:be:a7:ea:b0:80:0d:42:c3:ed:16:e9:cd:66:d0:
                    74:55:14:fd:ba:bc:56:59:93:9f:b4:2f:35:fb:4e:
                    49:00:14:7e:e2:8d:2f:57:f8:7f:28:f7:89:9b:f2:
                    07:64:94:6a:e1:a1:af:24:04:a6:a0:5b:2a:c8:db:
                    fa:ec:35:85:1d:dc:db:a1:54:3f:2d:db:2f:c0:46:
                    62:15:db:49:5f:81:69:5e:da:6a:fd:37:1e:10:cf:
                    14:47:0b:66:a8:1f:4e:ce:93:98:1e:2f:28:0c:b6:
                    be:80:58:21:84:56:2e:64:c8:23:e9:87:5f:94:9b:
                    dc:ad:98:d3:e7:1d:d4:1c:20:9f:02:8a:25:c5:5c:
                    e1:70:d9:e2:db:5d:dc:6d:57:3a:a2:b6:5b:aa:84:
                    85:f5:b0:2b:2b:c6:33:da:34:61:c3:21:a3:85:50:
                    e8:9f:4a:76:34:39:25:cd:5f:ea:9c:4d:fd:4e:d9:
                    62:30:34:aa:63:14:ca:5d:c3:ff:94:1d:c8:27:21:
                    17:4e:df:05:25:d6:7c:fa:d3:5d:cf:99:fc:23:9a:
                    37:07:60:c7:b5:61:1a:75:df:98:ce:c2:ac:8d:0d:
                    a6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7D:6F:52:3D:32:2B:56:22:99:1C:CD:46:1E:AA:AF:97:BE:86:20
            X509v3 Authority Key Identifier:
                keyid:60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f8:32:0d:1e:56:ac:9b:1e:71:a3:7a:ed:43:11:db:eb:e5:
         46:d5:7b:29:6f:56:43:53:96:bf:e1:ac:55:7e:e6:c4:55:ff:
         04:7a:5a:c1:28:32:c4:f9:7b:3e:e2:67:89:a5:a7:f2:d4:02:
         38:2c:14:a6:ba:f1:3e:34:e6:cd:51:83:c4:a8:a1:1f:8b:68:
         07:4b:3b:7a:68:b9:4d:30:f8:37:66:6d:85:2b:49:28:53:a6:
         32:03:28:4e:e1:98:44:84:58:0e:15:63:54:a0:de:f8:b9:52:
         42:60:45:49:01:f8:f1:0d:a6:63:01:d4:80:7d:a6:81:7d:44:
         57:32:6f:0a:68:e3:1c:d5:be:ee:3a:63:51:11:d2:9a:d4:99:
         fe:77:2b:a2:75:9d:16:57:3d:25:87:10:25:8e:5c:6e:ae:a3:
         ba:d0:e4:47:21:f3:7f:35:20:7f:ba:05:78:f6:1c:76:c7:ae:
         a5:b1:38:ef:79:03:4f:f5:b9:c5:e5:22:bd:09:ab:e7:bd:18:
         74:f0:04:7f:ca:e0:c2:3c:02:48:4e:ce:85:d4:3d:3f:d5:74:
         6b:f7:90:fb:4f:17:72:83:72:fa:af:28:56:7e:47:a8:07:c3:
         30:63:ea:ee:0a:4f:e4:f0:af:a7:40:31:90:6c:26:a6:5f:54:
         c6:b1:d4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:38:31 2026 by rpki-client