Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
File:                     -Y6-IGkPLysjShVIfdCVIfPUdTw.mft (raw, json)
Hash identifier:          jb3IPI0Hw3/zMFYLNH2POHXoXwBt3MEw1zbvXWtY2FI=
Subject key identifier:   53:77:D4:1B:C1:D2:44:38:14:6B:17:B8:B7:5E:DC:28:71:B1:93:84
Authority key identifier: F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C
Certificate issuer:       /CN=A91BCC44/serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C
Certificate serial:       0BAA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
Manifest number:          0BA1
Signing time:             Wed 20 May 2026 19:05:42 +0000
Manifest this update:     Wed 20 May 2026 19:05:42 +0000
Manifest next update:     Wed 27 May 2026 19:05:42 +0000
Files and hashes:         1: -Y6-IGkPLysjShVIfdCVIfPUdTw.crl (hash: kBbVqhtyef7gu2pcjlpX1En7iv2XrdLL9RDmvNg67vU=)
                          2: B69F45F6480C11EAA7171874C4F9AE02.roa (hash: iXniGoo5n5RRm7yftdA1yfQi+WQIkekYkk+l5cL/OWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl
                          rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2986 (0xbaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCC44, serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C
        Validity
            Not Before: May 20 19:05:42 2026 GMT
            Not After : May 27 19:05:42 2026 GMT
        Subject: CN=6a0e0606-0c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:13:22:02:72:b3:b9:d8:3e:38:cb:69:59:
                    ad:ed:aa:f1:3a:50:23:3d:6f:b6:07:c4:35:ad:0d:
                    8b:2a:f8:1d:11:f0:94:7c:d4:86:75:8e:e7:ea:c8:
                    8f:5b:c8:97:ef:37:46:21:20:2a:2e:52:01:83:ed:
                    02:84:a3:c2:d5:0c:d6:13:2e:64:58:b4:4d:58:c4:
                    7f:c5:1d:14:24:99:48:ef:60:96:f5:6b:7d:d2:b3:
                    4e:4a:ca:98:5b:81:a2:4a:51:0b:fb:4e:d6:36:a4:
                    85:85:fa:8d:06:7a:9f:f0:5b:be:f8:08:60:ff:d3:
                    79:58:96:0b:7a:53:f8:ef:0b:6c:fe:4c:11:f9:33:
                    f7:0a:b6:08:21:25:99:7d:66:e5:16:44:fc:ef:e8:
                    a9:16:6e:91:b3:ea:bb:2d:ff:a3:10:2b:7e:18:c1:
                    00:bb:fe:b1:48:d0:95:8d:44:d0:bd:11:5b:be:72:
                    d8:ed:91:06:27:23:27:a8:c5:dd:28:27:0b:db:d3:
                    23:4a:e0:b1:e8:11:2c:79:55:67:01:9d:3c:24:35:
                    96:94:19:76:69:5b:4e:e2:35:6d:7c:bb:83:8b:3f:
                    d1:d0:c4:8f:cb:e4:a7:f8:ef:7e:6a:7e:0e:4a:b3:
                    12:13:ff:7e:35:b9:fe:20:0a:1c:01:57:12:d7:cb:
                    c2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:77:D4:1B:C1:D2:44:38:14:6B:17:B8:B7:5E:DC:28:71:B1:93:84
            X509v3 Authority Key Identifier:
                keyid:F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:da:91:56:67:ee:53:22:7f:ee:cc:01:99:89:bc:de:0b:6f:
         5a:26:3e:46:1f:6c:52:f4:f9:f4:f6:ec:e8:65:1c:3b:27:d8:
         3a:32:50:1e:ab:b3:fc:53:87:26:f6:58:0a:d1:20:08:f8:b3:
         cf:82:ab:f7:b3:4b:4b:c7:15:f2:f2:bd:eb:f4:4a:a5:4f:ad:
         59:29:ef:a0:00:e9:76:fd:95:b2:bc:bb:23:d5:6c:7b:fb:2c:
         8c:71:3e:2c:35:5d:57:7c:78:8b:e9:76:c1:65:3d:fd:6f:70:
         ca:e2:76:6b:b4:94:d2:4c:cc:d5:87:9e:5c:c0:bd:87:bb:43:
         f7:2c:38:0f:0d:e5:6e:97:80:01:4c:55:cf:38:dd:d8:79:2b:
         fe:dc:38:07:14:a6:11:a7:2d:6b:f9:f2:c6:74:3d:e9:cc:a9:
         42:22:15:ac:6d:0f:bb:61:59:34:2b:f7:3e:a7:2f:b9:7f:81:
         17:89:85:f1:9d:4f:4a:03:a2:bc:2d:d7:20:e2:d0:52:a2:26:
         5f:de:5a:24:39:bc:68:de:94:0a:61:eb:66:14:6d:3f:06:47:
         ad:fc:90:5f:04:cd:9e:6d:35:13:2a:e7:56:58:75:5e:ae:70:
         bf:8c:c8:1b:ee:3c:97:b6:83:47:2d:26:41:d2:25:be:34:b9:
         63:68:75:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:30:47 2026 by rpki-client