Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
File:                     _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json)
Hash identifier:          sMQdoAAGPy/Ytce1UW8ZptX3DJQy+e8HkV3VNmDAYlc=
Subject key identifier:   D0:0B:9C:A3:FC:F6:04:4E:4D:23:54:A5:65:CC:D4:07:37:01:37:68
Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
Certificate issuer:       /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
Manifest number:          0134
Signing time:             Mon 01 Jun 2026 06:26:23 +0000
Manifest this update:     Mon 01 Jun 2026 06:26:23 +0000
Manifest next update:     Mon 08 Jun 2026 06:26:23 +0000
Files and hashes:         1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: 7AM8br51Jr6P5/YIgxFkjmDGD7aIH72ud/vsMRzQkx0=)
                          2: 3117605AFF2E11F099836B6D89EE528E.roa (hash: GShmLLZyIO7t2gH3mgsqYTIagHhCJ4qJGdBs3grosz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
                          rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
        Validity
            Not Before: Jun  1 06:26:23 2026 GMT
            Not After : Jun  8 06:26:23 2026 GMT
        Subject: CN=6a1d260f-c794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:10:04:cf:a4:cb:67:47:59:dd:9f:4f:c6:41:
                    fc:1a:02:a1:49:f2:7c:a2:ea:3a:b7:6a:39:c3:e3:
                    69:f2:ba:6c:90:c5:60:8d:87:b9:05:81:a6:09:0c:
                    f2:66:08:18:8b:8f:a2:b0:fb:dc:a6:67:8c:20:f3:
                    9f:32:4a:8f:d9:ee:3f:ae:ba:15:e9:02:64:f0:0f:
                    af:43:af:f3:27:39:1a:3d:21:54:98:3e:c3:ee:68:
                    ae:c3:6c:39:8d:51:9b:db:05:c9:45:2b:c5:f6:7e:
                    5f:0f:35:5d:d8:97:b2:b3:c2:8b:02:fe:fe:17:4d:
                    73:30:38:62:a7:c8:06:d3:ea:5e:e8:77:2b:7c:bb:
                    f7:5f:fc:f6:db:5d:f5:81:11:6b:36:42:37:ac:3a:
                    d9:6d:0b:b0:db:77:0e:87:5a:e1:24:cb:29:0c:bd:
                    14:49:e5:d6:0d:8e:c3:28:05:44:c6:48:2a:63:d3:
                    79:4f:7a:05:ee:b1:ec:38:59:32:cc:ce:e1:2f:82:
                    74:4c:71:b1:66:f4:cc:44:38:97:f6:7d:43:9e:fb:
                    0d:8b:18:18:3f:25:15:f6:51:07:22:62:96:6a:1b:
                    35:c9:39:17:51:72:e6:7c:85:5c:27:7a:b2:1d:36:
                    3f:9b:14:c5:69:5c:65:d5:99:57:b8:4f:e4:78:52:
                    70:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0B:9C:A3:FC:F6:04:4E:4D:23:54:A5:65:CC:D4:07:37:01:37:68
            X509v3 Authority Key Identifier:
                keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:90:1d:06:a1:9b:2c:54:95:d6:52:6d:d4:5c:0e:c6:a8:25:
         a5:64:17:8c:af:4d:ec:f5:4c:85:cf:a4:7c:46:78:ff:57:dd:
         d3:77:90:1d:f6:bf:b3:8d:61:ae:53:5c:a7:fc:d1:35:20:3a:
         39:58:c2:7e:36:bc:f1:c1:e5:cd:d0:27:69:88:b6:f9:6c:32:
         e5:8c:f4:29:86:d3:15:fd:9a:21:4e:71:ee:cd:d3:43:a3:bb:
         ec:71:76:6d:af:87:c4:5c:b4:6b:24:bd:6a:10:ff:e3:aa:ce:
         05:84:a8:ee:c7:b6:90:54:88:e1:2c:96:00:6c:d6:3d:f4:23:
         cb:fe:0c:ec:f3:81:8e:1f:f3:94:9a:7d:2d:2d:a7:92:bc:26:
         23:69:dc:60:ff:a1:ce:bc:b7:df:b8:bc:e1:e6:6e:8b:05:0d:
         42:95:4d:db:37:2b:39:bf:08:16:ca:de:e4:96:7b:02:32:ce:
         44:79:40:5a:ba:af:76:e9:88:84:49:f8:ab:ba:76:a9:67:d3:
         de:67:5a:e5:ef:16:2a:d6:d4:1d:d9:e8:11:d0:3d:a1:f8:42:
         80:f1:64:72:a5:2b:0f:59:aa:f0:a9:6b:61:2c:a3:94:b5:5e:
         e0:d9:cb:cf:93:7c:b1:7d:42:de:21:df:29:e0:07:8e:a0:09:
         9e:3d:0c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:27 2026 by rpki-client