Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
File:                     5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json)
Hash identifier:          yiNg5N+HX7wOGveMQjA1FkBj2vnpdEw5itoSzuVWD1k=
Subject key identifier:   B9:18:AC:B7:16:51:02:27:FD:11:00:53:2A:38:B7:F9:48:0B:A6:CF
Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
Certificate issuer:       /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
Manifest number:          017A
Signing time:             Thu 21 May 2026 04:45:32 +0000
Manifest this update:     Thu 21 May 2026 04:45:31 +0000
Manifest next update:     Thu 28 May 2026 04:45:31 +0000
Files and hashes:         1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: x3wNwjrM5ZYwxZ/co0QXVBB6kCdN0JqVqiX74HxfGTU=)
                          2: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: HA8Kw92LD3QGPRWQy9en3UrEthfqY+7JRHJQJs+dCaQ=)
                          3: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: 1x0I+eVdWJfH3yy8/IHMHpk/2VtmPzxn2HvmLROgLBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
                          rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
        Validity
            Not Before: May 21 04:45:31 2026 GMT
            Not After : May 28 04:45:31 2026 GMT
        Subject: CN=6a0e8dec-aa6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c1:ee:b8:ba:16:39:dc:7b:ed:c5:51:35:cd:
                    99:7a:52:10:fe:bf:db:f3:e0:23:7a:7e:36:42:0b:
                    df:b2:3c:38:66:2c:aa:11:9f:bc:9b:5b:47:f6:17:
                    b1:e5:4a:e9:99:6e:aa:fc:23:b9:7d:56:28:22:4d:
                    20:7a:4c:c9:eb:25:ae:db:fc:09:4e:2c:f6:d0:f9:
                    84:a2:bb:c4:7b:2d:3c:f5:b6:60:df:1c:47:c9:9b:
                    ec:97:76:77:96:87:b7:15:b9:3e:29:97:11:c0:13:
                    e9:91:be:f2:20:f0:8d:c8:03:b0:88:86:46:5e:f3:
                    f9:f4:8d:87:9f:b5:be:f7:77:e3:88:eb:67:64:9c:
                    4d:61:f2:f6:00:2b:16:95:9f:44:1d:20:2a:7e:77:
                    ae:52:33:f1:7e:d2:26:a0:e9:89:15:15:64:07:57:
                    7a:d9:22:04:38:d0:da:64:2f:4e:ed:f5:30:07:e7:
                    92:1d:66:ab:06:4e:b2:24:c6:4e:12:fd:d6:0a:9a:
                    e6:b8:22:bc:de:df:58:ed:65:ee:1f:9d:ee:10:9a:
                    c9:77:e4:57:5a:25:c0:e3:6a:dd:71:40:8c:73:a0:
                    08:d5:6e:6d:72:e7:09:a3:40:e7:12:5c:b1:e6:f0:
                    7a:b0:a9:de:46:1d:87:a9:b4:78:cf:1b:43:af:2c:
                    8b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:18:AC:B7:16:51:02:27:FD:11:00:53:2A:38:B7:F9:48:0B:A6:CF
            X509v3 Authority Key Identifier:
                keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:7a:88:57:7e:c1:c9:e3:b6:cf:68:26:5f:1d:4c:45:4e:f4:
         ef:f9:5b:a1:cc:8a:0b:bc:14:fd:a3:44:fb:f0:35:7b:6b:ec:
         7f:f2:f3:87:2f:4d:47:11:f3:ea:e8:f8:3a:8d:cc:fe:89:d2:
         fc:47:12:63:a8:f3:d8:4b:1b:a5:15:ad:9b:a0:39:ea:01:d6:
         1d:24:d0:d0:22:07:f4:9c:59:84:dd:9e:15:5d:e7:5b:4e:00:
         cd:8b:65:19:14:c7:65:fd:ec:9b:8b:20:75:59:51:8c:a6:ed:
         08:3a:61:58:85:ea:53:d1:bb:ad:4a:1a:a8:ed:f7:43:be:d2:
         7f:e7:ce:67:da:d6:db:37:69:40:4d:9d:cb:6a:27:22:0f:93:
         ac:58:89:bd:ed:90:e3:a6:8f:af:bf:c0:18:b2:0f:9e:15:9b:
         5d:d5:61:5a:3a:db:22:45:73:fa:a9:74:c1:68:4e:c7:1c:f0:
         cc:64:d6:9e:11:c2:8f:7b:9e:5d:21:1b:66:4e:0b:76:c8:66:
         a4:f9:ee:2d:e9:d5:b3:af:52:df:c2:20:fb:54:32:7b:7f:be:
         e6:19:97:84:03:0e:6b:88:cf:69:1e:c3:04:61:f3:d6:58:72:
         57:6c:97:1b:0c:ac:cb:91:6c:9a:e7:5a:31:39:b7:16:84:b7:
         37:82:b4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:38 2026 by rpki-client