Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
File:                     yZhQyMiGp__kXfG6HWUCy1pl63A.mft (raw, json)
Hash identifier:          hUwVb3a/0B8zgzqR8bkK9h/lJ74DeVi0b8Fn2F9weN4=
Subject key identifier:   74:C1:43:58:7E:D9:B2:59:FF:42:95:11:88:5B:B1:96:AE:2F:55:15
Authority key identifier: C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70
Certificate issuer:       /CN=A917049A/serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
Manifest number:          38
Signing time:             Tue 19 May 2026 08:29:09 +0000
Manifest this update:     Tue 19 May 2026 08:29:09 +0000
Manifest next update:     Tue 26 May 2026 08:29:09 +0000
Files and hashes:         1: yZhQyMiGp__kXfG6HWUCy1pl63A.crl (hash: UGZafFpHosXQFbGjAWl7MQNMc+IYsO/2doF8vI4p96g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl
                          rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917049A, serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70
        Validity
            Not Before: May 19 08:29:09 2026 GMT
            Not After : May 26 08:29:09 2026 GMT
        Subject: CN=6a0c1f55-88aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:2b:62:e8:c4:c4:e3:d5:64:2a:ac:4f:ce:
                    ff:2f:4f:96:a8:f0:fa:83:51:ec:a3:f7:e7:60:51:
                    49:3c:b2:43:6a:a4:01:c2:fd:0d:e6:f0:6e:66:6a:
                    86:bd:e4:e3:e7:aa:1d:5f:b4:2c:ab:a4:43:4a:7e:
                    c9:09:19:c6:1e:0f:fe:e9:7c:4b:6b:4b:a8:14:39:
                    c1:c5:64:89:ea:8d:0e:bb:90:81:9e:e6:3d:2d:93:
                    23:64:3a:e6:60:5a:a5:5e:e4:7b:fb:3b:e0:55:86:
                    ac:ee:f7:e4:f7:72:c6:d9:f0:2e:40:bd:2c:a9:57:
                    de:eb:46:a1:73:10:9d:02:14:23:a7:8b:73:ad:f3:
                    f0:65:7a:14:bf:09:12:eb:b0:af:25:6e:fd:1a:ac:
                    55:37:3c:09:78:a1:23:f7:1c:a7:6f:b0:32:d5:4c:
                    47:d0:02:0b:49:30:50:14:c7:ca:7c:f0:ff:51:dc:
                    a9:c3:ee:3a:74:9f:6f:cf:7f:fb:13:8f:d9:6b:fd:
                    c8:e8:d8:4c:f3:e3:30:a5:18:b8:4a:8b:8e:5b:6c:
                    4e:62:83:f9:6b:0e:5b:73:76:3f:17:66:d6:42:90:
                    a0:b5:9a:d9:43:e5:8b:75:fc:ec:62:f4:0f:05:fb:
                    8f:37:90:a9:7b:61:29:f1:fa:32:56:a8:da:ea:3e:
                    2a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C1:43:58:7E:D9:B2:59:FF:42:95:11:88:5B:B1:96:AE:2F:55:15
            X509v3 Authority Key Identifier:
                keyid:C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e8:2f:09:02:65:69:16:5f:ca:40:f3:fc:12:12:0d:5b:58:
         1a:55:89:54:6a:e9:10:c9:79:b2:c7:e3:c0:63:c8:61:7f:1b:
         b8:71:7f:4d:16:ad:07:e6:a8:fd:52:52:72:e3:8a:19:d2:4a:
         25:68:05:fe:33:bf:77:27:f9:15:e9:5c:7f:94:bc:39:79:44:
         03:aa:0d:97:03:bd:0e:c6:9b:87:be:4c:24:58:85:dc:97:54:
         18:5b:6f:63:2c:c4:5f:65:5e:fe:a1:05:8a:5c:20:55:e6:52:
         af:73:4b:02:5d:0e:3c:58:4c:d1:71:c8:7d:91:40:89:c4:6e:
         7c:bb:2f:45:c9:50:0e:62:3b:24:c7:0b:1e:6a:ac:23:eb:df:
         50:df:18:26:ba:28:f9:10:4c:12:01:71:97:08:c5:7d:51:41:
         da:06:fe:ce:12:1e:90:51:4f:f6:16:99:f2:0d:63:f7:fb:83:
         5c:57:3a:c4:e5:72:6c:e8:73:45:1a:f2:e2:e2:fd:e8:a0:71:
         b7:54:d0:87:f1:7e:3e:81:a3:9d:3a:bf:65:50:ab:fa:00:29:
         80:75:ad:93:99:9e:d3:e0:e4:23:a9:18:3b:5f:ef:80:46:86:
         e0:31:95:d3:c0:8c:82:4a:93:3e:f9:00:c8:2d:2b:41:81:82:
         eb:25:89:1e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MDQ5QTExMC8GA1UEBRMoQzk5ODUwQzhDODg2QTdGRkU0NURGMUJBMUQ2NTAyQ0I1
QTY1RUI3MDAeFw0yNjA1MTkwODI5MDlaFw0yNjA1MjYwODI5MDlaMBgxFjAUBgNV
BAMTDTZhMGMxZjU1LTg4YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0qCti6MTE49VkKqxPzv8vT5ao8PqDUeyj9+dgUUk8skNqpAHC/Q3m8G5maoa9
5OPnqh1ftCyrpENKfskJGcYeD/7pfEtrS6gUOcHFZInqjQ67kIGe5j0tkyNkOuZg
WqVe5Hv7O+BVhqzu9+T3csbZ8C5AvSypV97rRqFzEJ0CFCOni3Ot8/BlehS/CRLr
sK8lbv0arFU3PAl4oSP3HKdvsDLVTEfQAgtJMFAUx8p88P9R3KnD7jp0n2/Pf/sT
j9lr/cjo2Ezz4zClGLhKi45bbE5ig/lrDltzdj8XZtZCkKC1mtlD5Yt1/Oxi9A8F
+483kKl7YSnx+jJWqNrqPirvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdMFDWH7Z
sln/QpURiFuxlq4vVRUwHwYDVR0jBBgwFoAUyZhQyMiGp//kXfG6HWUCy1pl63Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNDlBLzIzNjFBMDJBMDJD
QTExRjFBRDJEMjc0OTA0M0Q4QzY3L3laaFF5TWlHcF9fa1hmRzZIV1VDeTFwbDYz
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveVpoUXlNaUdwX19rWGZHNkhXVUN5MXBsNjNBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw
NDlBLzIzNjFBMDJBMDJDQTExRjFBRDJEMjc0OTA0M0Q4QzY3L3laaFF5TWlHcF9f
a1hmRzZIV1VDeTFwbDYzQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAj6C8JAmVpFl/KQPP8EhINW1gaVYlUaukQyXmyx+PAY8hhfxu4cX9NFq0H5qj9
UlJy44oZ0kolaAX+M793J/kV6Vx/lLw5eUQDqg2XA70OxpuHvkwkWIXcl1QYW29j
LMRfZV7+oQWKXCBV5lKvc0sCXQ48WEzRcch9kUCJxG58uy9FyVAOYjskxwseaqwj
699Q3xgmuij5EEwSAXGXCMV9UUHaBv7OEh6QUU/2FpnyDWP3+4NcVzrE5XJs6HNF
GvLi4v3ooHG3VNCH8X4+gaOdOr9lUKv6ACmAda2TmZ7T4OQjqRg7X++ARobgMZXT
wIyCSpM++QDILStBgYLrJYke
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:24 2026 by rpki-client