Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
File:                     03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json)
Hash identifier:          FNuc+KpsGWJelx/zTDWl57/SkoWjdu6NzQWEbQyVAQM=
Subject key identifier:   FC:88:E7:3A:4E:49:5E:84:81:08:16:55:0D:DC:9D:CE:74:2E:B1:C8
Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B
Certificate issuer:       /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
Certificate serial:       0580
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
Manifest number:          0575
Signing time:             Wed 20 May 2026 23:23:29 +0000
Manifest this update:     Wed 20 May 2026 23:23:29 +0000
Manifest next update:     Wed 27 May 2026 23:23:29 +0000
Files and hashes:         1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: rM/DobdnraFgsVepZnN1jYTgExdNuhsRmX1sGbOCfBY=)
                          2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: ekGdq5XwvQSiFAECeI1yOoTTSMBYmajgvzc3Dt6ibs8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl
                          rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:23:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1408 (0x580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153C50, serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
        Validity
            Not Before: May 20 23:23:29 2026 GMT
            Not After : May 27 23:23:29 2026 GMT
        Subject: CN=6a0e4271-6d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6a:e3:f5:0b:76:d9:51:a0:03:98:68:03:b8:
                    e4:04:e5:05:f9:6c:11:7b:95:98:1a:2e:93:1b:71:
                    6c:9c:71:98:da:40:03:9c:e9:bb:a1:75:2d:d2:1e:
                    5a:49:60:16:a5:77:74:1f:4e:e2:d5:f0:78:bc:3e:
                    b3:d3:40:95:1d:1d:f9:42:d0:d7:6b:4e:ee:51:a6:
                    9a:36:e4:cb:b5:d7:6a:9e:33:dd:f4:b4:bd:69:4c:
                    b8:0e:20:aa:2e:32:e0:37:82:38:e3:ad:77:51:8c:
                    5c:53:fe:33:90:d0:b0:f0:d8:79:cb:5c:fa:a7:00:
                    6d:86:cc:c8:7d:99:88:84:34:e5:29:a4:eb:9e:47:
                    bd:e6:59:1b:52:c2:8f:f2:01:c3:19:b0:37:4e:c8:
                    03:0f:68:7a:9e:7c:1f:34:7c:dd:04:df:34:46:15:
                    a5:a7:f5:e2:c2:62:f1:5f:7b:32:56:1e:44:3f:b0:
                    de:bd:ae:8a:c6:92:3e:0c:49:58:27:6d:36:06:69:
                    86:24:1a:a6:35:b5:8c:bc:71:c3:3f:61:f4:ec:96:
                    88:29:a0:18:40:cf:f4:eb:4f:22:b3:6e:5a:e2:3e:
                    35:2b:6d:ac:01:02:3a:aa:c0:e6:f1:81:51:ae:68:
                    ee:7d:26:11:2b:4e:ac:1c:3d:d4:7a:a9:76:93:ed:
                    5e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:88:E7:3A:4E:49:5E:84:81:08:16:55:0D:DC:9D:CE:74:2E:B1:C8
            X509v3 Authority Key Identifier:
                keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b7:71:67:9f:7c:b8:8b:bd:1d:35:34:4c:b4:20:29:0a:65:
         e2:ae:e7:ef:9b:f5:23:d9:09:e3:0a:0e:cf:ea:e1:0a:7e:7b:
         c9:32:50:d9:f0:56:58:df:9e:96:d3:93:06:d5:41:2b:c0:5b:
         35:ea:68:b0:6a:a9:7e:10:e1:63:60:cc:ec:60:15:c5:e2:77:
         4d:d2:30:d7:39:39:14:a0:0e:0c:74:3b:b4:8a:5d:e3:97:06:
         46:c3:2c:1e:c2:6b:7c:f3:d6:33:a0:c6:e6:33:91:bc:68:ac:
         a5:5d:e9:d4:95:61:c9:8c:7c:b0:0c:55:87:63:02:1c:ce:fa:
         e4:9a:2f:9d:40:d7:e7:d4:b1:c0:39:a7:3a:f1:91:32:db:39:
         fb:a3:92:d0:67:52:9c:b1:af:0e:c3:c0:4e:ae:44:11:44:50:
         32:4e:92:91:3e:b3:eb:11:c9:50:bc:48:4d:d0:ce:1d:3b:8d:
         9d:79:2c:66:9d:f8:a1:7f:18:d3:0e:4e:05:c3:3e:9b:d5:99:
         00:a4:22:9f:fa:41:7d:05:7e:a7:58:cd:03:e7:fc:51:36:0e:
         d7:23:60:18:c1:61:c2:4b:db:af:02:a1:d2:2d:01:3a:ae:d9:
         5a:1e:29:5e:09:7a:6e:04:c2:6f:89:60:ab:3c:91:7d:ba:44:
         00:4b:f0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:25 2026 by rpki-client