Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft
File:                     YsDafzAgXhQZA4UrhjIw-eHi-c0.mft (raw, json)
Hash identifier:          wCsC7YVLY/eFVVHNAKkCaWLlstpyEI3IdEZQXIRnUFw=
Subject key identifier:   13:F1:80:CA:E3:EA:5E:99:41:8E:DE:BA:93:C9:61:11:70:F3:C5:D2
Authority key identifier: 62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD
Certificate issuer:       /CN=A9175C2B/serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD
Certificate serial:       01FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft
Manifest number:          01F8
Signing time:             Thu 21 May 2026 03:14:48 +0000
Manifest this update:     Thu 21 May 2026 03:14:48 +0000
Manifest next update:     Thu 28 May 2026 03:14:48 +0000
Files and hashes:         1: YsDafzAgXhQZA4UrhjIw-eHi-c0.crl (hash: 9JGJjTfI+f1+DZXUqq8tONeI39bIhwZ3leVlLT1fImc=)
                          2: 0EB2F53A59A711EE9419DA2DC4F9AE02.roa (hash: WgVKqWhMAthpMMDwnVkotmpOAnQCYJzRV431+usYjQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl
                          rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175C2B, serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD
        Validity
            Not Before: May 21 03:14:48 2026 GMT
            Not After : May 28 03:14:48 2026 GMT
        Subject: CN=6a0e78a8-5dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f5:3f:45:1a:84:70:4d:b7:7b:41:f3:d6:e3:
                    ea:5e:28:f3:8d:93:1b:3d:8f:43:fa:e9:0c:f7:ad:
                    a2:b9:9e:1e:16:76:f8:be:12:43:88:d5:69:47:91:
                    ac:01:ba:56:d0:fb:06:96:5c:ab:7b:c3:77:80:d0:
                    74:ff:e2:39:e3:51:2f:dd:43:06:6f:3f:48:1d:a5:
                    43:59:50:ad:97:fe:9a:c7:b8:5f:4c:77:22:f2:bb:
                    0d:c3:24:a2:13:6c:a3:c6:1c:dd:dc:55:b1:19:3a:
                    b9:12:46:fd:5e:dd:b7:56:d2:80:9a:16:1d:73:6b:
                    f3:0f:ea:ed:33:b0:94:f0:c6:2d:2a:67:1f:cf:0b:
                    36:8f:f0:74:cb:fb:1c:de:8c:10:50:70:b9:d9:41:
                    8f:c6:86:2a:81:64:a2:85:57:a5:d7:6e:33:fd:7f:
                    98:89:a1:65:34:14:81:84:27:a2:0d:a7:9d:3e:03:
                    a7:1e:2f:27:9f:02:4b:b1:ab:6d:98:1e:71:48:59:
                    c5:f5:a2:c9:2d:1f:97:fc:1d:52:c7:1b:3b:62:2a:
                    7b:e1:f8:05:c1:9f:b2:dd:9a:64:eb:bd:7e:3a:86:
                    05:a7:67:fc:34:28:4d:b3:1f:b4:fd:b0:c2:9e:65:
                    96:85:27:65:92:85:24:60:95:5c:c6:3d:57:0e:ad:
                    a7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F1:80:CA:E3:EA:5E:99:41:8E:DE:BA:93:C9:61:11:70:F3:C5:D2
            X509v3 Authority Key Identifier:
                keyid:62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:30:7e:5e:ff:5b:dd:80:11:b9:ed:f4:65:c0:74:4c:10:38:
         29:65:6a:e3:c2:bb:07:c0:ad:12:12:e1:7d:33:04:64:1b:f0:
         30:2a:e6:c0:1d:2c:04:b7:ad:e9:0f:d8:93:88:c5:5e:f9:66:
         ba:b1:49:8f:47:1b:5a:24:b4:d0:70:b0:0f:7a:ad:b2:b7:a5:
         89:46:ce:88:c6:0e:33:da:17:40:31:c0:76:76:26:8a:c3:db:
         0d:21:d9:9d:c7:d3:f7:5b:c9:55:b3:2f:34:eb:ae:5d:5f:01:
         42:dc:ce:16:ce:c2:c8:7a:e7:53:7c:09:40:a6:4a:39:c0:ee:
         cd:f7:3e:d7:ed:31:d7:a1:e1:e3:ae:1b:bd:45:51:2e:ae:57:
         d9:af:16:ee:bd:9e:2e:5e:d2:40:9d:72:9d:9f:ee:21:89:7f:
         08:cc:b4:9f:06:9a:2b:e7:47:af:1c:ca:cd:0d:44:7c:96:b0:
         5a:d7:d0:17:96:2c:9d:7e:a5:3c:ad:ce:72:12:8b:39:f2:e0:
         11:10:a1:36:9b:e5:90:a7:9a:5c:37:59:29:27:66:03:fa:eb:
         47:32:50:63:5f:1d:24:2d:07:94:a2:61:cd:98:40:9b:cc:dd:
         39:ca:d4:7b:61:a6:c0:7e:34:7d:fc:58:46:75:1f:c4:c4:8a:
         af:ab:18:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:14:28 2026 by rpki-client