Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
File:                     y539cqjfUOBlAEN4BraiAY7Mvf0.mft (raw, json)
Hash identifier:          5zN/Ys9j6RznuqybQpylfjU0/NGIPezEJI1fjM5UJ7E=
Subject key identifier:   5E:42:80:35:FC:E9:C8:34:C1:72:86:2B:D3:97:23:69:D1:98:81:7A
Authority key identifier: CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD
Certificate issuer:       /CN=A9150733/serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD
Certificate serial:       0BE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
Manifest number:          0DFA
Signing time:             Wed 20 May 2026 18:56:05 +0000
Manifest this update:     Wed 20 May 2026 18:56:05 +0000
Manifest next update:     Wed 27 May 2026 18:56:05 +0000
Files and hashes:         1: y539cqjfUOBlAEN4BraiAY7Mvf0.crl (hash: f5tv9a/c/nwjR9DhO87WKoA0sIsv7GUuoxsi5HN0WEI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl
                          rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3043 (0xbe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150733, serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD
        Validity
            Not Before: May 20 18:56:05 2026 GMT
            Not After : May 27 18:56:05 2026 GMT
        Subject: CN=6a0e03c5-5489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:60:49:dd:b6:0d:16:84:e1:08:dc:4f:1b:
                    19:66:d7:20:ac:16:36:7a:5c:92:d4:d2:70:ad:3d:
                    53:c8:0c:09:39:5c:53:6b:5d:d2:d3:64:a4:7d:bb:
                    ef:4a:c8:e9:c4:91:bf:cc:86:02:43:0d:47:c4:ec:
                    c5:1f:9f:60:96:f6:bb:12:15:c9:c2:9a:5a:67:ee:
                    ee:c7:f3:6e:11:0d:35:8d:f5:75:8b:fb:df:97:14:
                    c3:93:72:57:bd:b7:99:60:03:38:ae:33:9f:c3:59:
                    9b:1c:6f:19:d8:f5:87:ed:b6:23:07:3b:13:bc:59:
                    d7:4f:56:e5:42:25:d3:ff:46:0d:b3:ef:35:42:2a:
                    4f:22:b1:be:3e:51:45:14:4c:d8:f6:bf:5a:4c:70:
                    2a:f8:33:f8:10:1e:c4:d4:12:41:c4:e5:75:ed:e9:
                    53:12:1b:63:d0:14:e6:61:42:a9:34:e8:f4:f8:a2:
                    e2:af:c0:2b:37:55:15:07:9a:2c:f4:ad:13:ab:c0:
                    8a:dd:6a:83:32:2b:d1:5a:5a:96:73:9e:be:07:e3:
                    ea:70:1a:a8:0d:03:26:a0:6d:85:a3:42:7d:05:25:
                    fb:ca:e8:ab:93:a4:30:15:11:a4:71:41:bb:26:a8:
                    ae:13:c4:73:58:4c:3e:b0:b8:86:70:2f:07:44:79:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:42:80:35:FC:E9:C8:34:C1:72:86:2B:D3:97:23:69:D1:98:81:7A
            X509v3 Authority Key Identifier:
                keyid:CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:4c:13:57:97:5a:80:54:aa:a5:45:c6:01:3f:bf:51:3e:32:
         c4:ce:1e:fe:47:64:9f:e5:7f:f5:46:90:37:11:d8:e1:d6:36:
         7a:31:f7:75:57:0f:d5:da:8e:2e:6f:08:70:bd:30:72:62:81:
         0f:9c:74:bc:8d:23:7b:c3:be:be:37:c9:1b:46:bc:10:dc:6a:
         68:40:bc:8d:d2:ec:99:25:0a:b5:ef:8a:0a:20:1f:2a:71:5e:
         1e:5b:a2:6c:44:65:f4:96:43:c3:c8:91:2e:94:12:ac:78:4c:
         11:2f:ad:1d:00:12:e3:1f:f9:3e:95:3e:3a:de:ec:2c:7c:72:
         f9:11:42:aa:ff:33:dd:6d:43:f3:6e:83:bb:1e:b6:f7:01:0a:
         09:9c:00:e9:15:6b:3e:58:dc:5a:78:c9:87:9a:71:79:db:05:
         cb:0f:5c:1e:75:d0:26:6f:ac:09:02:be:55:f5:f9:fe:b5:65:
         0e:ce:2f:6a:e6:5b:0e:c5:f0:3c:48:4c:0c:b7:d2:7e:31:24:
         50:fd:fd:72:72:63:f3:f8:75:a5:d7:74:b1:ce:f2:c4:75:1e:
         91:f8:d2:4d:9d:db:5c:aa:98:5e:27:70:ef:c6:aa:b1:c5:e0:
         65:c8:2b:1e:bb:f8:d2:91:78:e7:3e:70:c3:33:c6:7a:9d:01:
         d5:77:55:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA3MzMxMTAvBgNVBAUTKENCOURGRDcyQThERjUwRTA2NTAwNDM3ODA2QjZBMjAx
OEVDQ0JERkQwHhcNMjYwNTIwMTg1NjA1WhcNMjYwNTI3MTg1NjA1WjAYMRYwFAYD
VQQDEw02YTBlMDNjNS01NDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq9xgSd22DRaE4QjcTxsZZtcgrBY2elyS1NJwrT1TyAwJOVxTa13S02Skfbvv
SsjpxJG/zIYCQw1HxOzFH59glva7EhXJwppaZ+7ux/NuEQ01jfV1i/vflxTDk3JX
vbeZYAM4rjOfw1mbHG8Z2PWH7bYjBzsTvFnXT1blQiXT/0YNs+81QipPIrG+PlFF
FEzY9r9aTHAq+DP4EB7E1BJBxOV17elTEhtj0BTmYUKpNOj0+KLir8ArN1UVB5os
9K0Tq8CK3WqDMivRWlqWc56+B+PqcBqoDQMmoG2Fo0J9BSX7yuirk6QwFRGkcUG7
JqiuE8RzWEw+sLiGcC8HRHni0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5CgDX8
6cg0wXKGK9OXI2nRmIF6MB8GA1UdIwQYMBaAFMud/XKo31DgZQBDeAa2ogGOzL39
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDczMy8yMTc4NjhDRTNE
QjUxMUVBQTY0OTEzMTJDNEY5QUUwMi95NTM5Y3FqZlVPQmxBRU40QnJhaUFZN012
ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3k1MzljcWpmVU9CbEFFTjRCcmFpQVk3TXZmMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDczMy8yMTc4NjhDRTNEQjUxMUVBQTY0OTEzMTJDNEY5QUUwMi95NTM5Y3FqZlVP
QmxBRU40QnJhaUFZN012ZjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1EwTV5dagFSqpUXGAT+/UT4yxM4e/kdkn+V/9UaQNxHY4dY2ejH3dVcP1dqO
Lm8IcL0wcmKBD5x0vI0je8O+vjfJG0a8ENxqaEC8jdLsmSUKte+KCiAfKnFeHlui
bERl9JZDw8iRLpQSrHhMES+tHQAS4x/5PpU+Ot7sLHxy+RFCqv8z3W1D826Dux62
9wEKCZwA6RVrPljcWnjJh5pxedsFyw9cHnXQJm+sCQK+VfX5/rVlDs4vauZbDsXw
PEhMDLfSfjEkUP39cnJj8/h1pdd0sc7yxHUekfjSTZ3bXKqYXidw78aqscXgZcgr
Hrv40pF45z5wwzPGep0B1XdVsw==
-----END CERTIFICATE-----
Generated at Thu May 21 10:18:04 2026 by rpki-client