Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
File:                     YHYovkVe83m-Zq-dbKm6js3tPwQ.mft (raw, json)
Hash identifier:          k4odZx4aF+Mt64DutoAQdHydRUEEQub4EkPQCxuIFgQ=
Subject key identifier:   18:87:1B:25:06:CC:8A:29:CA:D2:EB:76:FA:2E:E4:A4:02:A6:6F:AF
Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04
Certificate issuer:       /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
Certificate serial:       01E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
Manifest number:          0CA0
Signing time:             Mon 22 Jun 2026 20:03:10 +0000
Manifest this update:     Mon 22 Jun 2026 20:03:10 +0000
Manifest next update:     Mon 29 Jun 2026 20:03:10 +0000
Files and hashes:         1: YHYovkVe83m-Zq-dbKm6js3tPwQ.crl (hash: PrkqILDWsI6CN9GxPWi9Y+VSRSZivZa2pwRMdpgl8cs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 20:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
        Validity
            Not Before: Jun 22 20:03:10 2026 GMT
            Not After : Jun 29 20:03:10 2026 GMT
        Subject: CN=6a3994fe-52d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:93:1b:db:fe:1d:59:97:de:12:55:57:56:d5:
                    fd:f1:6a:2a:60:42:cd:66:5d:16:07:76:0b:40:8b:
                    e3:86:05:fe:03:fd:9a:46:f6:b0:31:1a:3e:78:c2:
                    f0:cb:41:8c:44:fa:41:d7:b8:ec:b7:0c:3f:69:5a:
                    c8:a3:7b:3e:68:c1:b8:f9:67:f0:21:39:5e:ce:6a:
                    3c:5c:81:ba:07:15:e3:2c:e8:01:28:d9:a4:e6:c1:
                    d0:2e:f5:62:90:fa:a2:a3:0c:26:95:46:c5:f8:20:
                    60:9e:f8:93:e8:57:23:5e:a7:8e:fe:e5:64:e7:a7:
                    47:47:38:28:1d:56:5f:27:58:2c:8e:c5:57:d4:c9:
                    db:0f:a8:2e:89:fd:ac:1f:8c:7a:a6:b6:cc:d5:6d:
                    5a:ba:6a:1e:65:52:2c:55:cc:ce:df:45:9b:b4:b6:
                    1c:77:12:24:e0:e7:45:18:66:ac:f7:99:59:c1:74:
                    9a:de:e4:c9:05:b6:2e:26:36:df:24:68:a6:3f:b2:
                    f9:31:e3:95:f3:64:6d:6f:8e:aa:c1:d5:8c:c8:c8:
                    ed:fc:66:ab:0b:8a:e1:3e:67:a4:c4:84:2f:78:ad:
                    62:1e:86:c6:27:58:70:01:29:63:df:ac:7d:74:b2:
                    7c:ef:a3:fe:96:32:f1:ad:3b:68:17:1e:42:e1:31:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:87:1B:25:06:CC:8A:29:CA:D2:EB:76:FA:2E:E4:A4:02:A6:6F:AF
            X509v3 Authority Key Identifier:
                keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:09:32:08:da:8e:77:7d:5e:20:e6:08:1e:6f:c7:fe:db:73:
         34:4a:e7:9f:0f:52:25:7e:23:37:13:ba:bd:7b:90:91:a0:96:
         b5:ab:3b:56:a9:e5:b0:ee:44:aa:32:47:89:6a:5f:07:19:e6:
         0f:de:97:58:60:e6:6a:b4:ec:69:54:9e:43:c6:09:21:0f:17:
         9d:e4:61:ff:fc:da:b2:19:55:60:d1:46:a5:5b:4d:82:c6:f9:
         83:42:94:c3:ac:fe:50:e3:a2:72:97:14:01:d6:a5:1e:9f:0a:
         38:dc:d3:fc:98:16:d9:f8:eb:83:67:c7:36:2f:02:fb:ae:85:
         59:e0:a0:d2:9b:d7:21:40:15:8b:b1:db:db:f7:d3:46:cb:2c:
         b9:f6:44:a6:c9:04:07:d4:f1:52:7c:b2:c1:7c:4a:f8:09:b0:
         57:87:f1:85:ec:71:9a:b4:05:15:aa:7c:6e:f4:54:fd:e9:59:
         c9:c3:a8:85:9b:b8:5a:24:56:73:43:17:20:3f:78:37:32:76:
         fb:8b:6c:eb:ce:99:89:97:20:14:2a:4f:22:98:b2:14:6f:68:
         c6:de:0d:db:64:4f:90:86:b9:74:29:cd:1e:bf:e1:b4:81:38:
         d6:1c:4b:72:82:6e:f2:2b:18:d2:c4:22:ba:f9:57:a9:8f:b2:
         aa:ad:bb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:02 2026 by rpki-client