Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
File:                     YN1l7H9y62x9qLk3BuLTug8GW_w.mft (raw, json)
Hash identifier:          0SdlsFKHz4d7U8R/6AWTX9xddWoyHZ7YNCUAF5W0acI=
Subject key identifier:   84:EB:9D:C5:DA:26:BD:BB:CF:C7:EE:33:5E:5E:EF:4F:3D:3E:B4:B1
Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
Certificate issuer:       /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Certificate serial:       1B1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
Manifest number:          1B0A
Signing time:             Mon 04 May 2026 16:16:50 +0000
Manifest this update:     Mon 04 May 2026 16:16:49 +0000
Manifest next update:     Mon 11 May 2026 16:16:49 +0000
Files and hashes:         1: YN1l7H9y62x9qLk3BuLTug8GW_w.crl (hash: d1eGzEQtoAKhbHyE0TCbyqDvWUTlhohTM+X1HGkxjPo=)
                          2: 91CB97905BD211EBA9178181C4F9AE02.roa (hash: qWp/XIY6bx5m6zPuPTYxt/QlRjZYjzeSmVqLyGiCJPQ=)
                          3: D75BE71A410511E7970A2A5FC4F9AE02.roa (hash: bVX95h5YGIEFl/nNsvVn6rJFnDmppDxCWRFjlU5VtvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl
                          rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6941 (0x1b1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4264, serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
        Validity
            Not Before: May  4 16:16:49 2026 GMT
            Not After : May 11 16:16:49 2026 GMT
        Subject: CN=69f8c672-113c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:70:cb:4f:7a:5a:36:ec:69:7b:ce:52:95:a2:
                    be:78:d7:e4:aa:27:4c:63:2c:3b:41:b9:69:ed:85:
                    1e:94:12:cb:fc:9b:c5:06:ca:5f:83:ce:40:ae:5d:
                    b5:67:8d:41:df:ad:0c:29:96:4f:f6:e8:5e:f4:5f:
                    3f:c6:59:47:9f:b3:3d:55:70:24:96:aa:13:dc:40:
                    64:cc:29:cb:41:59:bb:04:49:0c:4c:c8:cb:85:4a:
                    32:01:84:cf:1c:2b:da:b7:f1:0b:26:16:09:d3:21:
                    9d:c2:82:c3:72:48:c4:c7:83:98:d8:26:42:dd:98:
                    5b:91:c5:8a:2e:25:eb:4a:89:ff:51:54:cc:86:76:
                    0e:2d:b3:46:9f:04:97:70:80:03:95:99:b9:8c:e7:
                    96:20:b5:ee:88:b0:13:4f:7b:e4:5e:b8:5a:b3:1f:
                    c3:a5:c5:d8:1d:ae:0f:3d:e7:99:48:8d:de:35:64:
                    da:fb:00:87:07:53:55:9c:a2:4e:ed:b3:21:70:e8:
                    54:69:11:87:38:ac:02:4e:d1:35:4b:aa:dc:58:58:
                    b2:59:34:3d:26:aa:9e:54:47:3f:ca:63:85:5a:ce:
                    3d:3d:66:9f:b1:96:59:01:16:bd:6a:00:23:4d:ec:
                    03:6b:18:55:98:71:97:d0:18:36:44:b7:99:0d:b9:
                    a3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EB:9D:C5:DA:26:BD:BB:CF:C7:EE:33:5E:5E:EF:4F:3D:3E:B4:B1
            X509v3 Authority Key Identifier:
                keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3d:57:cf:3c:8d:ff:85:cd:2b:7d:41:1b:23:e6:5f:56:c2:
         34:1b:ea:50:09:64:83:29:19:c8:89:bb:0a:aa:19:d2:d9:f2:
         1b:20:62:a8:8e:f3:bf:ec:d0:63:b2:08:9c:7a:f0:7e:c9:e8:
         18:88:09:a5:99:79:59:f9:88:b8:45:5e:f4:7d:9b:d2:2a:f0:
         9f:b9:03:79:39:39:5c:89:e2:8e:07:d8:81:f2:0a:32:fe:be:
         e3:aa:30:16:2f:e1:5e:f5:fb:10:bf:07:09:c6:87:e3:a7:29:
         24:3b:00:9d:96:9c:d8:a0:e5:97:af:1e:76:1d:36:6f:d5:7a:
         06:3f:c6:8a:bc:a4:c0:db:b9:56:c6:0c:27:d2:44:14:b6:95:
         c7:2f:7e:ee:c3:39:0f:ae:8e:7b:a7:2c:7c:83:1d:7b:a7:8a:
         4f:2f:2e:ef:e5:1d:dd:4d:73:b9:69:b0:15:bd:20:6f:0d:a5:
         fa:f4:a6:a1:28:4b:6d:85:4c:37:96:20:7f:e8:cd:3e:d4:2e:
         1b:cb:2d:91:8b:04:d5:16:4d:d4:25:a0:c1:03:6d:ac:f4:74:
         69:f7:9d:0b:69:0b:c0:e4:22:f5:4c:73:16:b3:5e:e3:f6:8c:
         05:ce:5e:72:9f:7b:41:53:e2:cd:72:21:97:67:de:7e:0d:a9:
         67:68:b9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 05:48:06 2026 by rpki-client