Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
File:                     YU0eyLaT57tfMs-lJ7UCgyad_is.mft (raw, json)
Hash identifier:          si7IbtwGL/eqDMH93IrwwrdAvWgnuAu4DK3RI4l//lU=
Subject key identifier:   48:20:BD:AB:AD:10:D4:27:E3:7E:10:E6:26:F5:3B:EC:40:A9:8F:70
Authority key identifier: 61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B
Certificate issuer:       /CN=A91FBD7B/serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
Manifest number:          FC
Signing time:             Thu 21 May 2026 06:20:52 +0000
Manifest this update:     Thu 21 May 2026 06:20:51 +0000
Manifest next update:     Thu 28 May 2026 06:20:51 +0000
Files and hashes:         1: YU0eyLaT57tfMs-lJ7UCgyad_is.crl (hash: PNDnDzUkaffKNQaS1Zq4kSdroLco0nUHlX94CwigOYg=)
                          2: EE380826D87211EFBAE0FC19C4F9AE02.roa (hash: IGOt3oAqIKJyRTZpOUfxcvyTfSBEqL1x1Bx1bLVEPaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl
                          rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 06:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBD7B, serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B
        Validity
            Not Before: May 21 06:20:51 2026 GMT
            Not After : May 28 06:20:51 2026 GMT
        Subject: CN=6a0ea444-e3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:07:83:40:ff:4b:3c:58:0f:30:5f:c1:09:d3:
                    16:94:f6:e7:72:04:99:9e:4c:79:d9:17:c7:78:32:
                    c8:43:b0:0b:cd:32:60:0e:81:a4:96:64:d8:1c:13:
                    ca:ec:aa:cd:12:01:68:80:7d:45:e0:99:87:52:04:
                    b6:1a:9c:46:9d:d6:27:71:a0:e6:2f:45:0f:2e:38:
                    a9:af:c0:02:a2:41:31:02:f8:a5:12:49:2f:5b:fa:
                    75:5a:a8:d8:a7:83:ac:fe:97:bb:56:02:8e:5d:cc:
                    11:c4:bf:5b:58:e8:06:0a:71:59:3e:33:79:0f:19:
                    c9:f8:fa:ec:93:f4:a1:8e:20:2a:3f:be:f4:59:c2:
                    13:c6:a1:f7:5d:ef:da:fb:24:ec:ea:a4:e2:72:7c:
                    99:fa:d2:50:31:c6:1c:0b:93:1d:85:3f:a6:7c:ea:
                    96:a4:98:7f:df:ff:df:d8:f1:96:fd:23:f8:4a:0a:
                    d3:5f:67:b9:80:a6:4b:74:7f:15:8d:75:3d:8a:a4:
                    d6:70:f4:f3:54:7d:8c:e3:1c:11:d2:b4:5b:28:31:
                    39:c3:0d:8c:3b:16:e2:45:a1:13:bc:bc:6f:75:eb:
                    17:b3:ba:01:fe:0e:70:fb:0a:12:41:06:2b:f8:fd:
                    3e:50:36:4c:cc:f9:ae:b2:f7:a2:67:c7:e5:6b:5b:
                    4d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:20:BD:AB:AD:10:D4:27:E3:7E:10:E6:26:F5:3B:EC:40:A9:8F:70
            X509v3 Authority Key Identifier:
                keyid:61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:85:c9:96:ab:e3:0c:dd:8c:e4:7e:25:b2:fa:e0:cb:1d:91:
         3b:40:7b:2d:da:ed:7b:4c:b3:1f:55:ac:4d:b5:6f:4a:0b:dc:
         34:13:1d:77:a6:3d:5f:e0:ac:f6:66:39:04:06:d7:eb:84:5d:
         b6:b5:f8:9c:1d:84:d6:b1:6d:b1:ca:63:c7:a9:e5:20:5a:c1:
         81:e0:c0:93:db:ca:de:c8:1f:4a:13:da:76:8d:47:b2:03:a1:
         d5:0a:83:d5:48:94:a2:a4:d5:34:67:5f:17:cd:2d:12:a2:a8:
         dc:5e:4f:36:11:a4:9c:32:08:7c:a4:67:57:f1:25:af:87:af:
         f1:8c:26:1f:d9:53:3d:02:f1:21:c3:be:df:a2:21:17:ee:9c:
         17:3c:39:8f:16:10:6b:b8:7f:e6:39:0a:47:6b:22:9d:64:79:
         97:1f:b5:a0:37:cc:46:b8:f0:20:00:c9:a1:c3:92:f6:2f:c6:
         4a:b8:bf:11:85:4f:ef:c1:e2:14:36:b3:e9:ec:56:64:12:f0:
         bf:cb:e3:e7:96:cf:bd:aa:a7:13:5d:db:52:32:9f:81:e4:e8:
         18:44:7d:34:18:ab:aa:d0:b2:4b:06:b8:17:b6:9b:3d:83:07:
         02:dc:c8:85:1a:84:45:e6:e5:9c:cd:b4:13:77:db:af:d6:1d:
         98:ae:4b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:05:16 2026 by rpki-client