Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
File:                     y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json)
Hash identifier:          FIO4RB3ABanubjQigIrgOxCooDecX9Gt9mH3qA4hCTo=
Subject key identifier:   5A:44:D0:50:F8:C2:32:60:1D:14:04:10:B8:8B:85:5A:C0:BF:06:B9
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Certificate issuer:       /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial:       01AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
Manifest number:          0191
Signing time:             Mon 15 Jun 2026 04:34:46 +0000
Manifest this update:     Mon 15 Jun 2026 04:34:45 +0000
Manifest next update:     Mon 22 Jun 2026 04:34:45 +0000
Files and hashes:         1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: YWrqaysW7rmpTF1xyTcJ25L2P1e4PKOQvdjrZhaavno=)
                          2: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: SyXuffXDHXPbASG7Y+LG0Brt2u6hsVNRNcrnMwVVAGw=)
                          3: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: MAtmMwfjtzQ9R8LyZXq78h+1kb3Yy15h8cOKjzlP4LM=)
                          4: 24D519F226FA11F0B737393FC4F9AE02.roa (hash: x10D9pADYHToKbPS6t/synxTqCGYuiAeyckivfclbFs=)
                          5: AF27640226FA11F0B0383240C4F9AE02.roa (hash: 4LD8HC62z2DhT4Dg2lOYzbuBHzfVnUe3OyB/4hGuDkM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
                          rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
        Validity
            Not Before: Jun 15 04:34:45 2026 GMT
            Not After : Jun 22 04:34:45 2026 GMT
        Subject: CN=6a2f80e6-ca46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:90:86:8f:7e:b3:ad:7a:19:83:3a:bd:65:
                    9b:f3:a6:31:5d:c1:ed:8d:e3:a4:d2:08:41:b2:68:
                    d5:6d:95:01:b0:14:8e:e3:4b:7c:f0:1f:0a:01:3a:
                    5c:7a:aa:e2:65:4e:6f:bc:5d:8a:73:90:d3:de:a6:
                    f5:eb:4f:05:ca:35:0d:cc:8b:56:a3:e6:2d:7b:ad:
                    25:5f:da:5c:04:f7:fd:0b:0c:1c:7f:bb:0b:b7:c1:
                    0b:c0:9a:03:88:a2:87:8c:ff:1e:87:bc:94:1f:7d:
                    f2:3d:d7:bd:7e:53:a3:a5:f9:bf:d3:27:ce:a3:2f:
                    fb:f4:94:3c:5a:67:1f:c4:4e:16:2f:e2:a1:b8:4f:
                    fc:59:20:bf:4d:d4:df:d8:11:bf:0f:77:3f:21:cf:
                    c6:00:06:12:f9:ff:e8:6a:d2:d5:53:9a:81:cd:4a:
                    58:cc:ae:36:3c:5a:e1:49:52:42:2f:76:a3:7e:55:
                    e0:3a:5e:bc:be:d7:5f:92:5f:62:7f:9a:c8:d1:76:
                    4c:2e:ee:71:1d:55:84:b5:4a:eb:19:95:19:29:6a:
                    ad:01:0d:6f:36:45:f0:b2:51:7a:31:05:98:fe:c2:
                    75:f1:00:0d:f2:ea:4b:fb:bd:db:f1:e8:46:ea:38:
                    c0:e8:9e:e3:e2:88:26:0b:4d:cc:83:aa:8a:04:7c:
                    9a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:44:D0:50:F8:C2:32:60:1D:14:04:10:B8:8B:85:5A:C0:BF:06:B9
            X509v3 Authority Key Identifier:
                keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:cc:62:bc:19:44:80:20:f7:2d:fd:b3:6d:28:bb:b2:f3:79:
         8f:b6:82:6b:d9:e2:b3:c4:c8:72:77:35:43:cf:2d:a0:d7:e0:
         bc:8e:cb:6a:cc:e7:f5:bb:1c:53:df:ab:57:55:09:ba:75:20:
         ab:47:1e:a3:3c:83:90:81:54:0c:f3:3d:1e:d0:07:09:4b:35:
         35:fa:5f:de:68:03:e2:2c:44:bb:9c:d4:d8:aa:f7:11:b4:be:
         98:68:1f:12:39:ca:30:94:72:de:e8:ec:17:f3:b9:5f:5d:4e:
         53:b7:3b:48:0d:d1:bc:93:cc:34:da:c7:66:6e:db:bc:f4:64:
         6e:f6:b2:73:05:12:9c:df:fe:76:0d:e1:05:d1:7a:b9:1d:a0:
         e6:9e:d3:a7:d7:cd:9f:40:4a:ad:67:9d:03:92:43:fa:b8:37:
         c0:85:1b:07:77:33:60:48:c0:05:a2:5b:16:97:b4:ba:66:60:
         1f:4e:b5:2a:0e:86:0d:f6:39:06:47:17:de:da:af:52:5e:7b:
         cd:c9:53:f9:63:a3:68:3e:85:97:28:97:83:0f:a6:3b:fd:e1:
         4b:c3:22:2d:c4:06:2c:e9:d9:5c:34:4e:61:80:34:a6:e3:84:
         37:73:3f:ea:5f:69:7b:a6:5a:4f:2f:11:b4:e8:2b:2b:06:c0:
         26:f4:34:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 13:39:15 2026 by rpki-client