Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft
File:                     YgNWI5rPPPQIizzmK88YvKgIncc.mft (raw, json)
Hash identifier:          XMFs2El00D4uI/jz5jjXIzUod/KJtkcAoNVLrFqXMHs=
Subject key identifier:   6F:0C:16:07:5A:E6:EF:2A:6B:01:11:BB:DD:19:F4:71:67:86:76:5B
Authority key identifier: 62:03:56:23:9A:CF:3C:F4:08:8B:3C:E6:2B:CF:18:BC:A8:08:9D:C7
Certificate issuer:       /CN=A9168497/serialNumber=620356239ACF3CF4088B3CE62BCF18BCA8089DC7
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgNWI5rPPPQIizzmK88YvKgIncc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft
Manifest number:          45
Signing time:             Thu 21 May 2026 08:32:51 +0000
Manifest this update:     Thu 21 May 2026 08:32:50 +0000
Manifest next update:     Thu 28 May 2026 08:32:50 +0000
Files and hashes:         1: YgNWI5rPPPQIizzmK88YvKgIncc.crl (hash: AXJjtAP1K+IMlevEspaiaErcXn6RO8VShieDRjLQCIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.crl
                          rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgNWI5rPPPQIizzmK88YvKgIncc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 08:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168497, serialNumber=620356239ACF3CF4088B3CE62BCF18BCA8089DC7
        Validity
            Not Before: May 21 08:32:50 2026 GMT
            Not After : May 28 08:32:50 2026 GMT
        Subject: CN=6a0ec333-ed20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:69:2a:c4:ef:79:2c:ce:53:69:3e:7b:3f:
                    18:2e:e5:ac:47:0c:0e:52:8c:96:7f:22:42:ea:65:
                    09:10:a8:c1:b5:f5:e5:36:fd:0f:b2:ec:19:c4:af:
                    26:43:e3:31:7e:04:cc:37:c2:36:fa:67:8b:40:27:
                    45:01:d4:19:53:60:55:08:95:b7:dc:a8:63:bc:87:
                    56:23:ed:01:29:09:aa:4e:0b:34:15:19:9a:a0:bf:
                    2a:b6:24:f9:53:9a:fc:52:a5:04:8e:63:b2:5b:23:
                    cf:84:db:9b:15:80:88:ac:ee:ce:b1:df:b1:bb:c4:
                    38:f2:1b:8a:03:47:9a:fe:86:c7:66:01:ed:8a:63:
                    07:81:08:0c:05:14:98:6c:1b:37:29:8e:a1:af:3e:
                    92:3d:c1:6a:88:c8:9a:b3:d7:2f:71:0a:7f:36:4e:
                    2a:3c:c7:46:aa:bb:51:0f:26:55:35:a9:6d:ba:aa:
                    6e:4c:fa:00:ec:da:ab:52:a8:0e:7b:90:cf:e5:08:
                    e9:79:39:3c:d2:b9:9d:9c:b0:5e:be:64:6f:4d:e5:
                    1d:6d:00:ef:f6:94:0a:e5:57:09:73:68:2e:99:76:
                    c1:98:18:10:52:a0:32:88:a5:0e:a6:e7:ce:70:76:
                    f2:e1:cc:10:dc:84:1a:71:5b:79:62:48:8a:5d:73:
                    70:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0C:16:07:5A:E6:EF:2A:6B:01:11:BB:DD:19:F4:71:67:86:76:5B
            X509v3 Authority Key Identifier:
                keyid:62:03:56:23:9A:CF:3C:F4:08:8B:3C:E6:2B:CF:18:BC:A8:08:9D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgNWI5rPPPQIizzmK88YvKgIncc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ad:27:d6:a7:91:bd:5c:ab:ce:56:15:0c:ca:cb:76:2e:05:
         3b:ec:d5:97:09:da:22:0a:73:83:a8:e5:cf:97:bd:93:6a:f1:
         ab:59:98:a9:cc:02:c5:f2:00:d3:8f:54:95:3e:bf:e7:bb:17:
         08:b2:ed:93:b8:a4:c6:3f:3c:0d:92:29:b9:6e:20:83:e0:d4:
         75:bb:04:2e:98:3e:9a:6e:cc:68:93:aa:3a:86:ad:0c:0b:3f:
         01:39:b0:72:36:5b:83:02:1b:19:f3:e9:60:ac:b3:08:93:23:
         90:38:21:f6:2c:87:63:ab:e6:da:bd:ee:52:e5:a6:9d:62:3c:
         bd:28:bf:30:09:0a:15:c8:ad:a4:7b:55:8d:33:65:d7:9a:d7:
         ed:68:73:bb:97:69:fa:8f:4d:52:ec:90:5d:bc:a7:84:9d:a5:
         19:87:8b:58:65:12:83:c0:0b:31:c9:40:0b:92:a8:10:b8:03:
         52:53:c7:aa:df:d6:bb:26:ea:6e:cf:5a:ef:65:05:37:49:1c:
         5f:f1:95:77:36:3c:4e:82:11:e8:f4:fb:97:c2:e2:87:9d:df:
         18:d1:a2:57:a7:c0:50:61:98:a2:15:16:bd:3d:92:94:8d:18:
         86:9c:0c:a3:cc:33:b9:c2:39:2f:9a:34:1f:73:19:fe:74:53:
         45:ff:db:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:40:02 2026 by rpki-client