Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
File:                     Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json)
Hash identifier:          hycAR3eSdHy7aL8DDHasxKubnff6/KNpaRf1xw5kvsc=
Subject key identifier:   89:B3:4D:59:7E:48:32:D6:54:91:CE:A1:C9:13:40:3F:4A:04:C2:E3
Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
Certificate issuer:       /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Certificate serial:       0EBC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
Manifest number:          0EB0
Signing time:             Thu 14 May 2026 17:42:38 +0000
Manifest this update:     Thu 14 May 2026 17:42:37 +0000
Manifest next update:     Thu 21 May 2026 17:42:37 +0000
Files and hashes:         1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: gGxduPMrd741SV8J25L5dAarnc0wZWPBJkvzwXmocFU=)
                          2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: UPi+EXP3M++eU/SlCZMA1QlfPjsM5dTJBEKasdPEKHs=)
                          3: BA55D63C415311F1A8AAFB3BCA833773.roa (hash: 5c6lk8zZg9JDdCtbr0MwnxF7u7fQcm0RumOai6GNeD4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
                          rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 21 May 2026 17:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3772 (0xebc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
        Validity
            Not Before: May 14 17:42:37 2026 GMT
            Not After : May 21 17:42:37 2026 GMT
        Subject: CN=6a06098e-2a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:30:26:f1:fa:f4:dd:de:d7:b0:74:fc:4e:
                    43:fc:db:91:28:26:a3:8c:b3:7c:c2:1f:2d:38:1f:
                    59:44:68:3e:21:41:0e:f5:2d:04:c5:06:06:f9:7d:
                    bf:01:49:2a:36:9d:ae:97:5f:31:a4:43:3e:9c:bb:
                    fb:21:28:85:b9:76:97:18:0f:f1:c0:fe:b1:2e:9c:
                    46:c4:82:15:93:79:52:b1:d8:17:d2:8d:de:c3:8a:
                    70:d1:f2:95:a4:0e:c5:02:3e:1c:88:ad:2b:8b:8d:
                    e7:17:85:11:f0:c9:21:c2:ec:fb:47:d3:a1:e5:e0:
                    0c:64:0b:15:25:2b:b6:cc:a7:da:19:26:38:4a:76:
                    bb:04:93:4c:02:a9:7d:43:cb:06:13:dd:eb:52:11:
                    b0:c8:76:9e:f0:ca:b6:eb:5a:66:5c:6d:d1:16:77:
                    e3:55:fa:06:87:b7:7a:27:de:39:46:11:07:aa:b0:
                    52:f8:8d:22:6f:c3:c2:d0:a4:b2:45:66:75:1d:0d:
                    71:37:d3:e1:b0:04:3c:8b:e3:aa:fd:30:38:31:5f:
                    d1:a2:0a:c3:a2:62:cc:78:50:76:23:fb:8b:db:60:
                    7c:03:35:98:9f:46:f2:f6:80:ac:c6:81:63:c6:07:
                    33:7a:78:5f:a8:58:f1:9e:d2:9b:76:c5:04:73:71:
                    0d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B3:4D:59:7E:48:32:D6:54:91:CE:A1:C9:13:40:3F:4A:04:C2:E3
            X509v3 Authority Key Identifier:
                keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:92:a7:d2:0b:be:c2:75:33:a4:7d:99:a3:82:0c:8b:15:cb:
         dc:19:21:17:35:68:cf:be:e2:eb:5f:32:1e:12:10:28:48:f1:
         7f:22:8e:42:8c:d4:a8:f2:da:1a:1c:3e:ff:9b:ce:4b:bd:0a:
         d1:50:91:40:7d:ae:3d:08:25:ea:71:4c:26:14:63:19:87:70:
         5a:f3:a4:7d:f5:f0:4b:20:e4:5d:10:98:f9:c1:64:96:9f:07:
         00:30:f7:2e:5b:88:0b:97:b4:e2:ee:78:9d:c4:26:0d:e9:b7:
         6d:ef:6d:f2:18:d0:34:75:f9:dd:fc:44:c8:c1:58:8f:a5:8e:
         fe:ba:20:0d:60:f6:72:0c:72:b5:04:90:c7:c4:ff:d1:41:40:
         40:94:af:df:47:58:ee:06:27:49:38:ac:85:b6:34:f1:07:9b:
         cf:b3:89:fc:18:d3:ce:62:b5:d7:c1:62:99:36:8a:e8:6c:50:
         90:32:2e:50:dc:fe:3e:99:2f:59:7c:ae:3a:85:c1:fa:12:e4:
         db:39:fd:5d:31:b3:e9:e3:cc:fa:da:45:d5:e5:04:38:93:d1:
         e9:c1:a4:f5:3e:d9:27:a2:7d:eb:f1:90:ff:89:3d:f4:8e:ac:
         fb:1a:3a:3f:fd:55:f3:ad:59:d2:32:3c:f7:a9:c8:b5:10:c5:
         5e:84:16:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 05:08:54 2026 by rpki-client