Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
File:                     yod6eu8duwRWSH9h_uaZNjdUHl0.mft (raw, json)
Hash identifier:          /mBxE0dpYfJ8IcPm9T/RkzItEmtl1k+WPNm9mZIof+g=
Subject key identifier:   7F:72:4F:11:4E:63:9F:85:FA:E0:17:56:8A:4B:11:2C:74:D1:78:A1
Authority key identifier: CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
Certificate issuer:       /CN=A91AA053/serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
Manifest number:          0164
Signing time:             Sun 31 May 2026 21:52:56 +0000
Manifest this update:     Sun 31 May 2026 21:52:56 +0000
Manifest next update:     Sun 07 Jun 2026 21:52:56 +0000
Files and hashes:         1: yod6eu8duwRWSH9h_uaZNjdUHl0.crl (hash: AzJ6UmuvwIdavmqJJVJNI/ZjV8bwomIR78tCRmbJEzk=)
                          2: E098BB864FA311F0B96FBA3DC4F9AE02.roa (hash: OPdh+VvdJ8rvY5Hnhte8AjyqGibUOoE1fm+ikF6YCWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
                          rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 21:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA053, serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
        Validity
            Not Before: May 31 21:52:56 2026 GMT
            Not After : Jun  7 21:52:56 2026 GMT
        Subject: CN=6a1cadb8-abca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:bf:62:fd:41:00:11:01:91:47:15:b2:4e:
                    6e:29:f9:22:c9:5d:b3:14:25:37:a3:f4:85:d3:26:
                    fe:94:61:85:4e:82:b3:f5:a2:cc:e7:17:cf:aa:1d:
                    50:cc:e6:a9:86:bf:f1:04:32:f0:63:3d:bb:c1:a1:
                    3c:f5:05:30:e1:b2:4c:43:a4:19:b9:28:36:d5:a2:
                    2e:ef:35:af:b2:2f:58:af:b1:4e:ad:c7:23:2d:b4:
                    2f:ad:87:6e:9d:f8:21:50:96:c4:8c:aa:7d:38:38:
                    f7:52:22:fb:ec:fe:af:6c:b9:fb:28:55:f8:21:27:
                    36:20:6f:86:c6:27:fa:82:c6:77:31:54:8c:b0:05:
                    1c:fc:75:73:f3:20:67:a9:d9:c1:db:63:89:15:89:
                    a4:3a:6a:b9:74:60:fe:52:b1:e6:f0:db:36:5e:16:
                    eb:e6:f1:99:8b:63:63:c7:cb:27:33:9b:09:40:ae:
                    d5:de:29:2d:ed:8d:37:6f:69:0b:11:b6:3d:58:98:
                    a5:9f:33:56:b1:de:1b:3b:4a:5d:b8:0b:c5:8c:2f:
                    f9:92:58:db:7d:43:54:cf:5f:33:24:a2:c6:d3:4d:
                    1a:78:c1:df:b1:f4:49:9b:cc:47:43:72:e6:1e:ab:
                    aa:2a:e3:42:2c:7b:82:14:29:81:28:a3:d4:cc:6d:
                    fc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:72:4F:11:4E:63:9F:85:FA:E0:17:56:8A:4B:11:2C:74:D1:78:A1
            X509v3 Authority Key Identifier:
                keyid:CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:45:03:cc:f9:c2:ec:a6:bf:6c:0c:ef:00:57:b2:a9:7f:c6:
         a1:15:6f:28:14:4f:51:90:82:be:cf:eb:58:37:be:4c:6c:e6:
         91:3e:5f:f3:0a:e1:d6:20:9d:69:2c:db:e3:3e:a8:cf:31:db:
         33:93:dd:37:96:fa:d5:36:54:cd:9b:94:f6:65:fe:9b:4c:17:
         36:ec:3a:a1:b9:ea:30:78:26:07:0d:8a:70:06:9e:dd:0f:6f:
         69:28:1b:f6:f8:54:f2:7a:10:fe:60:89:17:aa:00:86:15:c4:
         c7:b3:1e:a7:52:83:36:f6:66:fc:bb:6e:99:1e:52:8d:ad:7a:
         3a:2c:f5:a7:dc:8a:b2:28:6f:e7:11:50:17:69:af:74:ba:fc:
         4a:8d:df:f0:c3:74:67:e8:fa:4b:58:b9:78:6a:c8:2c:2f:56:
         a6:07:68:6b:93:11:fa:1e:b7:80:d3:bd:38:f8:d1:66:52:6e:
         75:71:6a:30:d1:99:bb:3c:63:35:4d:8f:bd:36:5a:8d:bd:5e:
         89:5b:7d:e4:ff:2e:32:7e:e6:0a:6a:18:eb:f7:8e:15:8a:4f:
         d6:ca:56:33:64:76:f6:ce:76:0a:8d:96:af:02:a4:7d:7b:33:
         41:32:99:d6:d7:e9:48:8c:1f:ee:0e:18:de:db:51:e7:2d:37:
         cb:3a:28:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:57 2026 by rpki-client