Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
File:                     YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json)
Hash identifier:          mQtqgETEHDRzljU5qbAvdymGJFhPNQFIMCcqW4SR8Vs=
Subject key identifier:   B4:C6:97:13:5D:55:04:D8:FB:A6:36:DE:B9:9A:A3:48:FF:36:16:F6
Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04
Certificate issuer:       /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204
Certificate serial:       01EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
Manifest number:          01E3
Signing time:             Thu 21 May 2026 03:31:42 +0000
Manifest this update:     Thu 21 May 2026 03:31:42 +0000
Manifest next update:     Thu 28 May 2026 03:31:42 +0000
Files and hashes:         1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: OCbNkoYb39QJjbyD/WxxaYi5jAc4xPIUoPtU/PnJAqA=)
                          2: 2BA240AC994111F096074C40C4F9AE02.roa (hash: BaVQtlGks/nXODj3nVj6X8TPxl0CNzfAzBCFqERU/qA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBED0, serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204
        Validity
            Not Before: May 21 03:31:42 2026 GMT
            Not After : May 28 03:31:42 2026 GMT
        Subject: CN=6a0e7c9e-9d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:06:58:9f:54:3e:12:8d:98:e0:b0:00:1b:75:
                    1d:90:92:a8:0f:4b:4a:a3:5c:2e:4a:53:48:81:69:
                    a5:7e:05:13:2b:57:55:5a:a0:9a:24:01:e4:6b:1f:
                    6c:d9:3c:ca:96:90:d7:f7:e8:cd:f8:7c:be:84:57:
                    99:5a:83:70:f5:bb:76:b3:bd:8f:e9:de:99:f9:3e:
                    8f:e5:ff:14:d1:8f:a1:fd:72:13:9e:76:26:57:f7:
                    4c:d5:d1:10:2c:af:95:6a:a1:68:96:97:36:f3:55:
                    ae:82:eb:0a:3f:68:0f:59:3b:6a:42:c9:0b:32:2d:
                    7e:e0:33:28:e9:e1:2f:44:c2:9a:19:46:e5:0e:69:
                    59:cf:23:73:c7:04:f4:ff:41:89:db:c5:18:13:10:
                    e5:3b:ce:aa:1f:05:2e:89:a0:73:64:09:ac:75:b5:
                    84:9e:f6:13:4d:29:11:9f:1b:ef:df:a3:2b:cb:52:
                    b0:cc:a1:69:3a:2d:3b:43:1e:d0:06:5c:d3:98:16:
                    da:da:cd:2d:46:bf:14:54:09:43:9a:3b:12:76:34:
                    38:90:69:9e:0f:96:3a:e1:b6:91:2b:5b:74:e0:88:
                    6d:f2:6d:17:91:fd:f1:e1:ce:58:4e:9c:85:a5:45:
                    ba:e4:4c:7c:63:ed:a1:26:38:ab:57:08:83:46:70:
                    8c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C6:97:13:5D:55:04:D8:FB:A6:36:DE:B9:9A:A3:48:FF:36:16:F6
            X509v3 Authority Key Identifier:
                keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:f3:ab:bb:71:f5:36:cb:b5:07:1f:b2:49:38:90:77:e9:cb:
         1f:e4:f1:98:bd:b8:ab:2d:54:ed:49:1f:50:5b:73:ca:8a:fb:
         26:b3:31:7b:8c:ce:36:3e:e1:65:43:fb:7f:7c:bc:1a:c9:61:
         46:19:3f:4e:64:07:b3:e3:12:15:de:c9:aa:ad:7b:65:b9:99:
         89:09:6c:bc:2a:9b:2c:aa:f6:55:99:e8:2f:4c:3c:d3:1c:d2:
         51:3e:04:9b:ee:a5:34:1b:87:f7:66:22:87:85:e1:67:9b:fc:
         24:b5:a5:8f:22:3d:33:c6:52:e6:0e:9c:9e:7c:59:b8:43:0c:
         31:1b:ad:02:8f:eb:18:42:91:21:5b:3f:6e:b9:fa:18:e3:d7:
         d5:21:9b:d7:14:b9:86:f7:ed:5f:98:f4:a2:1c:12:8c:7b:49:
         fa:8a:4b:99:38:17:ab:d8:78:2c:63:ff:15:21:c1:4c:d8:2e:
         06:3f:1c:ac:6a:3e:ca:b1:74:2b:8b:72:b5:22:b7:d7:a0:9c:
         8b:2b:ec:24:19:24:2b:2d:f5:ff:d2:99:1f:68:90:af:66:59:
         66:c0:10:4d:79:c0:df:b2:6b:50:93:19:fd:91:eb:1a:b8:37:
         37:5a:15:1f:08:62:5e:86:9d:5e:8e:15:86:95:63:a0:1c:79:
         fd:6c:19:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:15:03 2026 by rpki-client