Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
File:                     FYuWZk-xya7us9KHB_h3_iN7Atw.mft (raw, json)
Hash identifier:          DI3I83dGMLzxvt+X0h45gMOOtwaGRT3QPLrcUvrZtUk=
Subject key identifier:   EE:FA:F6:8E:A6:CF:DE:8D:04:1A:F5:CC:15:9D:F7:45:62:32:D1:8C
Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
Certificate issuer:       /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Certificate serial:       02E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
Manifest number:          02CA
Signing time:             Thu 11 Jun 2026 03:33:35 +0000
Manifest this update:     Thu 11 Jun 2026 03:33:34 +0000
Manifest next update:     Thu 18 Jun 2026 03:33:34 +0000
Files and hashes:         1: FYuWZk-xya7us9KHB_h3_iN7Atw.crl (hash: 8sL2QMJ9TN3dypL+HQm4OAmZRD1WzZ/VxNZVAnSfa54=)
                          2: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (hash: 9JCyRgRs6j+igw+gtUtxDvzUhWBvN1Zyyhk+gm4t+MI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
                          rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:33:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738 (0x2e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C08EE, serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
        Validity
            Not Before: Jun 11 03:33:34 2026 GMT
            Not After : Jun 18 03:33:34 2026 GMT
        Subject: CN=6a2a2c8e-0e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ff:72:79:5d:c4:e1:b7:38:f8:a9:ec:c3:5a:
                    78:ac:22:e1:af:2e:43:e7:9b:f9:58:ea:13:07:9a:
                    78:cc:dd:44:57:cc:ca:09:64:7c:4e:f0:b8:62:c7:
                    99:94:10:20:1a:9a:b8:17:d2:a4:13:cb:40:30:5f:
                    ed:ea:95:8a:60:e4:7e:ee:b8:91:8e:e9:ca:db:8a:
                    b5:cc:df:75:83:dc:a9:51:07:c3:9c:32:52:2c:cb:
                    0d:c6:65:f7:b0:0d:03:92:61:09:ce:7c:cc:3b:7a:
                    ae:41:b8:62:33:98:39:c9:2c:aa:38:7c:86:3a:d2:
                    80:0e:66:ef:ec:91:19:77:f9:eb:12:9c:fd:bc:ed:
                    a1:7e:dc:28:76:d6:0a:1c:3c:75:07:76:e1:2e:e7:
                    b9:8a:d5:db:4a:ae:a3:7d:20:3a:eb:41:73:31:30:
                    6d:cd:a1:56:9f:24:7b:bc:54:5c:d0:18:26:0a:99:
                    77:d3:8d:45:93:82:ed:8c:c7:b0:3a:18:34:22:52:
                    0c:98:e7:a5:d7:33:23:1f:42:5f:d8:86:ee:dd:29:
                    57:e8:0d:64:17:2e:70:94:e5:cc:36:d6:0f:08:cd:
                    1e:87:08:79:d5:d7:ad:9b:0f:42:6e:84:aa:fd:21:
                    20:9f:e2:b2:74:97:0c:57:3d:b3:2d:23:be:64:54:
                    df:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FA:F6:8E:A6:CF:DE:8D:04:1A:F5:CC:15:9D:F7:45:62:32:D1:8C
            X509v3 Authority Key Identifier:
                keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b2:8c:73:f4:d3:71:2e:aa:1a:5c:6e:42:54:f5:98:27:e2:
         10:6c:32:51:37:d2:7e:6a:5e:02:69:18:d7:ce:95:3d:cc:18:
         8e:c6:15:01:ad:ed:f5:43:5f:a8:d0:ad:e5:78:a4:aa:e5:28:
         9f:54:36:e1:5a:d2:dd:79:33:70:dc:2e:61:aa:c8:95:34:38:
         73:74:37:6b:01:8c:b6:74:58:ce:50:82:bc:78:63:c0:15:3a:
         4b:a5:e7:53:5d:3c:b9:02:dc:56:40:4a:36:8a:84:e8:85:c9:
         52:56:14:97:e6:64:cf:fa:08:67:02:09:c3:5d:ca:3b:eb:e9:
         86:93:1f:2d:13:c4:a9:98:cf:bb:04:f4:45:e5:1b:f4:5e:4b:
         90:26:d0:ee:6e:51:34:4c:30:0d:48:83:78:dd:b1:16:c7:e8:
         ac:3c:69:c8:62:0d:9e:af:43:91:e0:7f:32:8e:d3:2a:7f:ed:
         d6:fe:96:8b:a3:78:27:ca:f5:87:87:48:6c:92:3a:f3:97:7c:
         22:5f:7c:92:0c:bd:7e:fc:9f:b6:6a:76:5d:43:53:92:ec:2d:
         f1:a5:f8:d9:45:f3:42:57:d6:ce:50:5a:91:91:fa:a4:c9:1c:
         30:c3:c7:64:01:28:fc:30:75:19:4d:3a:e1:e0:4a:38:86:99:
         31:f9:1c:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzA4RUUxMTAvBgNVBAUTKDE1OEI5NjY2NEZCMUM5QUVFRUIzRDI4NzA3Rjg3N0ZF
MjM3QjAyREMwHhcNMjYwNjExMDMzMzM0WhcNMjYwNjE4MDMzMzM0WjAYMRYwFAYD
VQQDEw02YTJhMmM4ZS0wZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj/9yeV3E4bc4+Knsw1p4rCLhry5D55v5WOoTB5p4zN1EV8zKCWR8TvC4YseZ
lBAgGpq4F9KkE8tAMF/t6pWKYOR+7riRjunK24q1zN91g9ypUQfDnDJSLMsNxmX3
sA0DkmEJznzMO3quQbhiM5g5ySyqOHyGOtKADmbv7JEZd/nrEpz9vO2hftwodtYK
HDx1B3bhLue5itXbSq6jfSA660FzMTBtzaFWnyR7vFRc0BgmCpl3041Fk4LtjMew
Ohg0IlIMmOel1zMjH0Jf2Ibu3SlX6A1kFy5wlOXMNtYPCM0ehwh51detmw9CboSq
/SEgn+KydJcMVz2zLSO+ZFTfzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO769o6m
z96NBBr1zBWd90ViMtGMMB8GA1UdIwQYMBaAFBWLlmZPscmu7rPShwf4d/4jewLc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDhFRS81M0M2NzhENjQz
MDAxMUVEODQwQjMzNTdDNEY5QUUwMi9GWXVXWmsteHlhN3VzOUtIQl9oM19pTjdB
dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZZdVdaay14eWE3dXM5S0hCX2gzX2lON0F0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MDhFRS81M0M2NzhENjQzMDAxMUVEODQwQjMzNTdDNEY5QUUwMi9GWXVXWmsteHlh
N3VzOUtIQl9oM19pTjdBdHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc7KMc/TTcS6qGlxuQlT1mCfiEGwyUTfSfmpeAmkY186VPcwYjsYVAa3t9UNf
qNCt5XikquUon1Q24VrS3XkzcNwuYarIlTQ4c3Q3awGMtnRYzlCCvHhjwBU6S6Xn
U108uQLcVkBKNoqE6IXJUlYUl+Zkz/oIZwIJw13KO+vphpMfLRPEqZjPuwT0ReUb
9F5LkCbQ7m5RNEwwDUiDeN2xFsforDxpyGINnq9DkeB/Mo7TKn/t1v6Wi6N4J8r1
h4dIbJI685d8Il98kgy9fvyftmp2XUNTkuwt8aX42UXzQlfWzlBakZH6pMkcMMPH
ZAEo/DB1GU064eBKOIaZMfkcWg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 15:58:28 2026 by rpki-client