Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File:                     YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier:          m4xCF8xlFIb+3StzjAEZ3jJc5rH0w/mPkOJCjXcItfY=
Subject key identifier:   B4:DF:29:D0:29:AF:AD:15:59:BD:14:C6:D0:D5:FA:B4:DA:7B:F0:CB
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer:       /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial:       029D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number:          0296
Signing time:             Thu 11 Jun 2026 03:50:25 +0000
Manifest this update:     Thu 11 Jun 2026 03:50:24 +0000
Manifest next update:     Thu 18 Jun 2026 03:50:24 +0000
Files and hashes:         1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: 8924i8Ht1NrpUGGsGDVybuC/YXWpTKvxyEckchLz1Ms=)
                          2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: /uGLQIrlBTxMwkdtG3jyxMXG6mL7PGCkVKPH/j33iG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
                          rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 669 (0x29d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
        Validity
            Not Before: Jun 11 03:50:24 2026 GMT
            Not After : Jun 18 03:50:24 2026 GMT
        Subject: CN=6a2a3081-a2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:2e:cb:d0:c3:cc:24:09:04:d4:20:5d:9e:
                    ca:02:9f:97:91:f5:25:4b:90:d4:ce:4f:6b:13:66:
                    92:c3:41:6d:70:21:12:aa:2b:16:5a:ae:31:38:45:
                    76:58:ba:ae:be:ac:b6:00:d8:64:7e:e2:ff:c2:3d:
                    1c:1b:c8:a2:34:ce:96:cb:0a:d4:e9:68:f4:6d:25:
                    02:dc:3d:ee:f9:54:05:fb:db:40:1a:03:86:5f:c5:
                    84:96:47:19:71:59:0f:cf:64:68:25:d6:3b:5a:ed:
                    10:ad:51:38:3c:60:d6:43:1d:07:d2:82:7f:8f:52:
                    72:e6:d5:2f:46:2c:b0:df:65:96:b8:f9:b5:fe:e8:
                    fe:5c:fc:51:9d:f8:1f:7c:de:dc:9c:1e:b9:3e:4d:
                    eb:fe:b8:3e:54:54:2e:b2:56:00:f9:a6:04:ce:c1:
                    07:6c:0c:7d:04:8f:42:1b:28:1a:ae:1f:91:ef:95:
                    b4:6b:28:e3:51:31:8e:74:f3:37:25:1b:40:3b:8f:
                    c9:6d:d5:af:98:6f:c1:a1:d9:07:ee:3c:bf:40:c9:
                    4d:28:ec:92:06:d4:27:0b:2c:69:f8:a8:ef:eb:1a:
                    f1:f7:e7:a6:11:5e:07:56:d7:34:62:c0:e4:87:08:
                    2d:99:0f:05:27:7d:60:86:58:e7:09:71:40:de:2e:
                    00:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DF:29:D0:29:AF:AD:15:59:BD:14:C6:D0:D5:FA:B4:DA:7B:F0:CB
            X509v3 Authority Key Identifier:
                keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:77:3a:0b:22:89:71:7f:3b:23:f4:67:55:33:f7:8d:92:e0:
         0e:1a:9e:9e:6b:f9:51:87:29:ba:65:ec:1a:c6:13:0f:53:3a:
         43:75:b6:f7:15:25:c8:f3:e1:fc:01:1a:b2:43:ed:68:f1:3b:
         90:e9:d4:8a:46:28:9d:f7:bd:a2:c4:4c:82:1d:53:a6:0b:65:
         54:b2:9e:49:62:bc:57:70:8b:db:4d:9a:39:e8:32:6c:f2:6a:
         6c:22:36:2f:1a:5c:39:50:86:7b:59:c4:ab:83:ea:3a:85:7e:
         1b:04:a4:cc:8e:7c:32:c6:11:cd:49:c6:b4:95:63:4a:16:ab:
         9a:2b:f8:fd:7a:73:02:9f:cd:ee:ed:1d:0e:55:57:39:c1:b0:
         b7:a8:23:ba:ae:fe:cb:d5:8e:6f:71:76:1e:ed:41:8e:8c:b6:
         90:a0:a7:cc:2f:64:5c:d6:49:72:44:e7:ee:89:76:71:71:25:
         04:e6:d2:4c:cc:50:06:2b:f3:fc:89:e4:91:cd:ed:f2:fe:83:
         01:cd:7a:e8:5f:09:c8:92:9a:cf:0b:46:a9:5e:6d:e6:ac:16:
         37:d9:25:17:3f:d7:b8:1f:ec:45:58:ca:6a:ff:0b:1e:0f:61:
         7d:2f:0a:a0:88:61:42:dc:03:35:b4:00:9f:33:6e:3a:ca:65:
         94:f3:bf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:23 2026 by rpki-client