Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
File:                     YeT4YWtiQmYakffQErbNHkCTiQs.mft (raw, json)
Hash identifier:          gf1K/lOEI0/GqsQezqFUFppUHFi/xJLxiGbyrCVC7UE=
Subject key identifier:   15:01:38:BB:C0:A4:85:DE:5B:BB:E0:BD:BB:B7:9C:84:1D:8B:19:86
Authority key identifier: 61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B
Certificate issuer:       /CN=A91605D7/serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
Manifest number:          0199
Signing time:             Thu 21 May 2026 04:19:40 +0000
Manifest this update:     Thu 21 May 2026 04:19:40 +0000
Manifest next update:     Thu 28 May 2026 04:19:40 +0000
Files and hashes:         1: YeT4YWtiQmYakffQErbNHkCTiQs.crl (hash: K4T3dOOfzqDPUAshPTQvgnpNcxXgrNwxMm3a65pmQnw=)
                          2: EA46D7ECE57F11EE96F8FB39C4F9AE02.roa (hash: eGXhWTghID7LXCNSIEK8G8iUBL46dL5mXlz39bqNtkc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl
                          rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:19:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91605D7, serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
        Validity
            Not Before: May 21 04:19:40 2026 GMT
            Not After : May 28 04:19:40 2026 GMT
        Subject: CN=6a0e87dc-44e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bb:2c:65:61:69:cc:f5:fc:81:31:c7:f6:9e:
                    92:07:26:05:b9:02:f3:81:78:f8:5a:a2:84:73:6b:
                    89:9a:01:7a:23:f0:cb:8f:66:ba:fe:ac:61:f0:8a:
                    e1:f2:13:91:4d:97:cf:50:1f:b4:8f:39:f3:5e:02:
                    ed:56:86:68:79:71:7f:0f:a4:3c:bb:bd:4b:ea:9e:
                    60:0f:d0:7b:09:23:02:1b:1c:21:51:f9:a7:fc:e2:
                    cc:a8:28:f5:08:55:11:ca:21:fe:9f:32:7b:e2:94:
                    17:30:26:eb:e0:7f:0f:d4:22:80:d8:12:ea:a4:ab:
                    a6:6e:b9:53:df:98:8b:50:fe:ad:2b:5d:04:bb:a2:
                    f1:69:14:fe:6a:e5:67:ee:80:04:00:68:2b:4e:f7:
                    86:80:7b:4e:1d:10:1a:b2:b8:ec:b1:da:dd:2c:f6:
                    4a:45:70:7d:da:bb:ca:27:ef:28:68:b1:e5:80:1e:
                    0f:b3:70:c8:e5:fd:1a:f4:45:c9:b5:d8:5f:fe:07:
                    26:d6:15:3e:eb:bc:88:cd:91:5b:35:02:9e:1e:fb:
                    e3:2c:2a:2f:53:f6:ad:51:67:87:50:b5:67:a7:ac:
                    61:d9:a0:2a:a1:4c:22:39:07:e4:03:46:40:aa:4f:
                    6d:ed:76:06:42:9b:a4:d5:3d:af:d5:9e:cc:e5:48:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:01:38:BB:C0:A4:85:DE:5B:BB:E0:BD:BB:B7:9C:84:1D:8B:19:86
            X509v3 Authority Key Identifier:
                keyid:61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:42:6c:2b:25:78:50:57:22:8c:41:00:34:52:30:3d:76:80:
         23:c0:e3:7e:7e:b0:61:01:33:40:2b:1c:42:d3:87:e8:a0:b6:
         0f:6d:1c:7c:9c:78:f8:37:04:6c:b4:0f:d8:ca:3b:c5:c0:3f:
         4d:e8:64:d3:6d:f5:09:61:d2:90:43:e4:57:52:74:18:42:df:
         94:17:eb:d8:46:46:8f:9a:bb:0e:a2:d3:66:03:0d:ca:25:64:
         99:1d:22:b9:e1:29:a2:88:10:40:f9:39:97:27:da:d8:27:25:
         70:22:fa:e5:3d:d2:86:a0:bb:22:03:55:78:91:e3:52:be:2e:
         48:69:27:9a:27:84:68:c2:b1:0e:00:74:23:da:37:a3:1e:95:
         b1:58:46:3f:38:c6:f7:e8:1c:9c:47:7b:03:96:5c:51:cb:13:
         ba:58:56:3b:fb:5b:34:f3:30:2e:e8:19:48:15:0e:f5:66:84:
         c6:46:82:71:8d:70:0d:2c:e1:f5:0a:2c:6c:5b:64:a2:10:4e:
         5e:d1:fc:84:a0:d3:22:4b:85:3b:3c:ac:48:fd:66:18:7a:78:
         e1:38:a3:4a:dd:8a:9d:9a:e2:dd:ce:79:25:dd:84:07:01:0e:
         50:bc:8b:f2:05:8f:67:00:ab:76:ce:29:31:a0:5d:3b:5b:7e:
         b1:e5:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:24 2026 by rpki-client