Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
File:                     yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json)
Hash identifier:          EwxPrOlG4WRoAbggjIblFLQxvS7U9ste0nIGuHX2yyI=
Subject key identifier:   17:F4:B6:92:83:3B:4C:ED:08:8D:10:BB:31:56:9F:42:DE:F2:F6:DB
Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05
Certificate issuer:       /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
Certificate serial:       0780
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
Manifest number:          1791
Signing time:             Wed 20 May 2026 17:26:42 +0000
Manifest this update:     Wed 20 May 2026 17:26:41 +0000
Manifest next update:     Wed 27 May 2026 17:26:41 +0000
Files and hashes:         1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: R34h5WZSB/g0zSjcOg3kfVB3ixBcVRe3zpqKpOfO62E=)
                          2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: 9Zoz24dEkJzt6FtyKQFuBZJoAm4QCrA8VXW1adYN8sc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1920 (0x780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C5F, serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
        Validity
            Not Before: May 20 17:26:41 2026 GMT
            Not After : May 27 17:26:41 2026 GMT
        Subject: CN=6a0deed2-3eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:78:54:82:92:0f:7c:96:04:29:0b:dc:94:6e:
                    eb:db:26:42:d2:fd:7c:47:ee:ea:22:8b:95:44:90:
                    c6:47:86:25:56:70:2b:26:66:c4:a2:e5:82:e8:1f:
                    1f:76:e6:0d:2e:ff:47:31:64:cf:ad:c1:92:92:52:
                    e4:76:85:d5:b6:79:ed:ef:98:ec:ec:da:65:e0:c5:
                    fa:1a:45:74:a5:7a:5b:8e:eb:ab:19:50:e1:4d:18:
                    0b:42:96:6b:69:3e:79:a5:04:71:43:ff:d5:f7:f3:
                    cd:c1:26:be:c8:d7:e0:63:1a:6a:47:62:7c:bf:b7:
                    45:0c:b9:90:49:f1:3e:77:a7:87:19:c9:ed:4f:4f:
                    ce:b1:4e:1e:77:58:af:81:3b:b1:e3:c5:31:53:3e:
                    c2:e5:f3:b5:f5:09:9b:d1:46:2c:a1:9b:f4:d4:f5:
                    d1:85:c9:91:69:22:8a:44:80:1b:20:76:f1:95:4a:
                    1c:84:38:88:51:54:7e:0c:ee:de:53:e0:9b:14:ca:
                    eb:a3:95:9f:47:7c:93:e3:c7:2f:17:12:66:2f:6d:
                    b0:96:da:c2:c1:cd:31:cf:00:ee:16:91:0d:eb:86:
                    7a:2b:b4:4b:6a:db:ab:35:e2:3a:82:00:21:db:4c:
                    2e:41:b6:83:1d:c1:c7:f3:b7:ff:48:39:4d:2e:8d:
                    19:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F4:B6:92:83:3B:4C:ED:08:8D:10:BB:31:56:9F:42:DE:F2:F6:DB
            X509v3 Authority Key Identifier:
                keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b4:9c:5b:ab:2a:d2:07:60:bf:09:33:fe:47:59:8b:7c:29:
         4b:86:89:27:9c:09:48:4b:78:81:b8:d0:e0:58:c8:07:20:99:
         fe:50:7a:f8:31:da:09:15:1f:2d:98:4a:4e:dc:58:2f:0e:d8:
         c0:71:30:1d:b7:81:3e:8f:7e:1f:f4:f5:8e:36:07:f8:21:46:
         d3:d7:e2:72:bb:2d:b2:4b:64:a4:6a:f2:4b:73:e0:2a:41:b5:
         d1:6a:dd:34:19:0e:9c:40:be:39:9f:92:1a:e1:40:45:25:ea:
         02:06:47:b6:d9:13:e8:79:93:32:26:30:02:0d:0c:8d:db:0b:
         54:68:61:71:5d:e2:91:1f:89:59:5d:3a:2a:cb:59:89:16:e0:
         f6:84:7a:15:62:13:22:3a:2c:10:6d:f4:52:cf:5e:5c:b6:9f:
         70:e7:aa:bd:ab:c6:f8:5f:e3:8b:41:3b:6c:c9:76:b4:ef:6f:
         9d:ea:1d:55:84:f9:18:17:53:37:b9:fe:e2:ed:6e:f4:3b:b6:
         bd:93:99:69:78:dc:02:f2:08:ad:88:50:70:f8:e7:ce:f9:6d:
         18:fa:f3:64:05:47:a3:64:48:4a:0a:4b:f2:4d:49:5a:e1:61:
         11:32:cb:61:8e:a4:56:2d:d4:eb:d5:cd:fe:76:d0:f9:e4:aa:
         9a:b9:53:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:09 2026 by rpki-client