Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft
File:                     yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft (raw, json)
Hash identifier:          mMnlWBRYyKT2IGq2Ckww98roC03asbcLQ7Nwr5swWUE=
Subject key identifier:   72:72:D7:EC:9D:C4:53:31:62:86:56:24:24:E8:9E:20:14:68:F5:B5
Authority key identifier: CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B
Certificate issuer:       /CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B
Certificate serial:       09B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft
Manifest number:          09AE
Signing time:             Wed 20 May 2026 19:57:39 +0000
Manifest this update:     Wed 20 May 2026 19:57:38 +0000
Manifest next update:     Wed 27 May 2026 19:57:38 +0000
Files and hashes:         1: yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl (hash: eKXRTgbNx6kG3fn+q2Q2+/5nXce56D/gvc8NFqi7qII=)
                          2: 90798692AA0A11EA89D5161EC4F9AE02.roa (hash: RObxtW51NsjZz83e+7RyvdJYnFl+EIf82gNL/++qoe8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl
                          rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2486 (0x9b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B4B7, serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B
        Validity
            Not Before: May 20 19:57:38 2026 GMT
            Not After : May 27 19:57:38 2026 GMT
        Subject: CN=6a0e1233-9245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fd:90:51:1d:71:28:ea:3e:a7:cc:9c:8b:8a:
                    ad:20:89:be:f8:06:81:fa:c4:0d:ce:2f:96:0f:09:
                    d9:20:7f:eb:df:9b:c1:bc:21:c9:d3:b3:64:56:f8:
                    f3:d1:40:9e:78:da:04:7f:e4:fc:4b:40:61:a8:82:
                    be:6b:c8:cb:71:b2:2f:47:99:a4:b1:16:f6:2f:20:
                    95:01:5c:d1:61:9a:13:6b:19:90:58:94:ac:16:37:
                    47:a1:d7:35:c2:fe:7e:84:fc:03:5b:f1:01:ee:cf:
                    5f:86:72:1b:60:68:7b:5f:07:7e:32:4e:22:de:06:
                    4d:29:18:56:6d:1d:df:17:d5:5d:bd:8a:e4:0e:08:
                    c8:92:8c:28:36:38:04:a4:68:de:cf:c7:e0:6c:95:
                    8a:25:8e:55:b3:83:fb:35:0d:11:dd:ff:77:a7:1a:
                    50:78:83:d3:ca:30:be:be:7c:f3:0b:26:b8:95:25:
                    56:8c:6d:a2:79:cc:eb:2f:de:3f:d9:a1:74:3c:ae:
                    b1:9b:3a:d0:d8:26:84:77:74:ff:78:9d:4d:a9:fb:
                    1b:26:01:92:ce:1e:9b:95:b1:e2:f5:18:3e:fc:38:
                    2c:c2:a0:c5:05:e5:00:ce:5a:d4:36:19:20:e5:65:
                    1a:58:b3:44:94:9d:03:00:af:53:93:8e:d6:73:25:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:72:D7:EC:9D:C4:53:31:62:86:56:24:24:E8:9E:20:14:68:F5:B5
            X509v3 Authority Key Identifier:
                keyid:CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:df:67:de:50:a9:14:b9:1c:14:1f:42:95:a8:d3:2e:64:4f:
         95:01:4a:34:c3:8a:f1:69:3e:a0:0e:4d:6d:7d:21:b1:e7:9c:
         a6:eb:e9:04:0e:58:6f:3d:ee:55:36:ce:ae:6d:37:52:fe:7c:
         8e:9a:41:fc:29:e8:12:c2:50:4b:74:3d:05:ec:ed:24:1d:88:
         9d:27:b4:53:5e:4e:5d:d2:90:e6:51:da:7c:13:79:ac:25:16:
         bc:3b:92:e2:ae:5e:95:3f:e8:d7:75:8e:06:f4:30:04:b3:2b:
         ca:df:bd:3d:0d:c8:eb:85:18:04:90:50:75:1f:e6:37:e0:aa:
         23:4e:d4:4a:38:94:ad:9a:cb:9d:bb:dc:b1:5c:8b:2a:ea:9c:
         71:bb:47:1a:bc:d4:b6:7a:68:bc:6e:22:1f:e0:72:94:66:b2:
         6c:f8:73:f8:5f:67:d4:7a:44:ed:f3:aa:5a:1e:e5:9d:40:03:
         8e:84:e0:7f:18:97:ba:8a:a6:29:bc:fb:33:9b:09:82:14:ed:
         ee:6c:67:6e:16:8e:a2:0b:cc:34:d7:27:f1:d7:31:4a:be:e3:
         84:8f:fd:f7:58:ae:e4:c7:32:df:d2:24:5f:f4:33:cd:03:0a:
         7f:58:8e:c3:a5:17:8c:c7:26:d4:11:be:5c:d0:48:b9:7a:be:
         92:59:03:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:31:11 2026 by rpki-client