Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
File:                     yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft (raw, json)
Hash identifier:          yGMm6CHAl/UqegVNq9uYMykDBLPC6Rx8IpRstHQs0+s=
Subject key identifier:   FF:02:51:8C:13:09:B5:59:9D:31:62:A2:9E:98:61:1B:52:27:E3:FB
Authority key identifier: C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82
Certificate issuer:       /CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
Certificate serial:       1041
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
Manifest number:          102A
Signing time:             Fri 12 Jun 2026 17:24:32 +0000
Manifest this update:     Fri 12 Jun 2026 17:24:32 +0000
Manifest next update:     Fri 19 Jun 2026 17:24:32 +0000
Files and hashes:         1: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl (hash: g5NywgU6zPlsyOJevIsVm6O6uy30tOb9zxST4rieGsQ=)
                          2: 05449490E17B11EC93AB7473C4F9AE02.roa (hash: 8Pao0AT8dxW6T4CwAgWpHWpXxG/CEjpNqpmyQLKWTcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl
                          rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4161 (0x1041)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B2EE, serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
        Validity
            Not Before: Jun 12 17:24:32 2026 GMT
            Not After : Jun 19 17:24:32 2026 GMT
        Subject: CN=6a2c40d0-f307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:b1:d1:90:2a:0e:59:02:3a:8a:15:14:66:
                    54:e6:e1:56:6e:39:ef:d4:24:74:b6:85:c5:d9:45:
                    37:e8:ba:05:51:d8:84:f3:f0:10:70:fc:34:b4:0c:
                    dd:e6:a3:fd:b0:74:78:e7:c7:ca:97:c9:d4:bb:81:
                    ef:d9:0c:47:a9:1e:b1:bd:e6:a7:a7:eb:b4:89:f4:
                    aa:7d:d7:61:f2:b6:33:c8:5e:17:df:38:3c:46:70:
                    be:10:2c:29:83:fe:da:32:57:ea:7c:63:03:86:8d:
                    0e:49:8c:fe:91:bd:98:2e:18:b3:24:3c:ab:74:6b:
                    3c:d4:aa:ce:36:40:7e:d7:aa:c0:9b:51:8e:c8:6f:
                    84:b5:bd:c7:76:9d:d5:aa:c8:93:42:d1:f1:ee:ba:
                    45:89:69:c6:1b:aa:19:f2:b7:4b:12:e6:5e:e2:4d:
                    d6:a7:71:72:cb:5a:24:b6:40:41:b9:fe:aa:c6:ed:
                    10:fe:c2:ef:8a:6d:8d:8c:dc:11:8d:fe:59:b1:8d:
                    62:e5:2b:37:7c:30:98:ee:54:21:cf:4c:03:3d:5e:
                    0b:fe:d8:d2:ec:79:a1:4d:67:04:b6:be:d7:c5:95:
                    2b:32:a3:ce:b6:28:15:c3:04:96:58:95:dd:bd:83:
                    0a:44:0c:26:34:93:75:c7:29:cb:34:54:55:5a:ad:
                    4d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:02:51:8C:13:09:B5:59:9D:31:62:A2:9E:98:61:1B:52:27:E3:FB
            X509v3 Authority Key Identifier:
                keyid:C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:cd:4c:91:3b:96:06:8e:8b:fb:ce:88:b8:0f:87:2a:18:ee:
         17:5e:af:5e:1c:70:0a:33:51:bf:16:8b:82:e9:36:ce:b8:de:
         db:dd:2d:b5:cc:ec:fa:85:25:79:33:0c:75:9c:10:21:9a:5c:
         fe:b9:0e:e9:73:95:a7:fd:1e:a5:5f:94:c1:9f:19:50:17:8e:
         61:b0:d4:64:02:f0:f1:13:39:de:9b:b2:a0:b6:ef:f0:5e:97:
         53:39:98:81:bc:09:e5:30:41:f0:d0:0b:b3:13:ad:3c:97:3a:
         cf:84:dc:47:e4:48:88:6d:7a:8b:66:bd:67:26:96:75:b9:da:
         37:54:36:45:a4:de:6b:b2:c4:71:1c:ed:7c:77:b4:da:b3:b2:
         d1:0e:7c:83:6f:96:d5:20:c4:ac:7c:3c:ad:d0:ee:c2:1a:df:
         1a:89:f6:89:74:a4:51:4e:5b:f2:92:f3:97:74:5d:3a:62:c9:
         40:9c:93:b2:20:ce:31:26:ec:56:d5:bd:2a:53:70:82:08:6b:
         7f:99:7d:16:c4:ff:f2:63:88:e4:2d:ee:6f:34:60:4f:b1:9c:
         12:58:35:39:f4:fe:d6:56:c1:90:ca:45:45:83:26:bb:dd:1f:
         f8:73:b1:57:b6:6f:ed:70:f2:63:7b:31:bb:cf:9c:81:88:72:
         3e:84:4e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:45:53 2026 by rpki-client