Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft
File:                     YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft (raw, json)
Hash identifier:          ygdKjLfcu6oi1p/5q0UsN7Iux7SB4nXapGNOXsM8P4I=
Subject key identifier:   60:7D:2B:10:42:DA:57:ED:13:AC:C0:72:61:FF:39:FB:76:08:25:4D
Authority key identifier: 60:9D:9C:D5:E8:D5:F0:97:F7:00:EC:13:22:DE:DD:44:30:81:97:EB
Certificate issuer:       /CN=A915307C/serialNumber=609D9CD5E8D5F097F700EC1322DEDD44308197EB
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft
Manifest number:          04
Signing time:             Sat 13 Jun 2026 09:17:32 +0000
Manifest this update:     Sat 13 Jun 2026 09:17:32 +0000
Manifest next update:     Sat 20 Jun 2026 09:17:32 +0000
Files and hashes:         1: YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.crl (hash: 9rsDDUOwjg6IpIvFY+HfDFV5krdYlkpkWf1qmgLUdLs=)
                          2: 4A5161F463DA11F18803A8B98447A888.roa (hash: s+ETcjgKMznsV0hPLHChNZ83FbOj0Ckmfwu/mAyqAVA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.crl
                          rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915307C, serialNumber=609D9CD5E8D5F097F700EC1322DEDD44308197EB
        Validity
            Not Before: Jun 13 09:17:32 2026 GMT
            Not After : Jun 20 09:17:32 2026 GMT
        Subject: CN=6a2d202c-2af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:d3:f2:97:2f:d8:b0:5c:8f:5c:29:7f:4d:
                    fd:52:a7:c0:d1:e6:21:24:42:d8:49:6d:20:5b:d7:
                    e6:41:cc:bf:d3:67:0c:7a:2f:0a:89:7b:ca:5c:52:
                    b8:00:a6:5e:9f:33:da:60:f4:77:0d:6d:8d:45:7a:
                    9e:9b:f4:d9:68:29:dc:8f:c4:4f:81:3b:6b:e2:51:
                    bb:a8:ab:e1:88:25:bf:1f:a7:f4:e5:a3:ca:f0:d1:
                    b0:48:92:ca:e7:71:b2:ea:f2:81:b6:e3:99:8c:d9:
                    17:88:36:b5:01:42:f7:23:d1:ef:61:c0:e8:00:eb:
                    d3:11:48:a2:99:bd:a1:bd:46:bc:65:ad:1d:66:ff:
                    a7:28:0e:07:b6:64:f3:bb:b5:fb:7f:f8:c3:fd:12:
                    a1:fc:e6:27:96:75:38:a7:76:94:f7:36:bb:48:bc:
                    43:4c:f6:1f:ed:25:ba:6e:a8:ec:c7:aa:7d:dd:7a:
                    db:ac:55:31:ff:df:80:57:84:0f:1c:9b:7e:c9:f6:
                    4c:a5:b2:79:25:ea:10:ff:b4:70:e8:da:00:67:2c:
                    58:f5:49:66:d7:05:80:05:57:ce:04:91:7a:9e:dc:
                    af:84:21:f6:05:53:09:6b:27:a6:02:41:a5:09:9d:
                    76:93:70:e5:9b:83:84:74:61:28:6c:91:7e:76:11:
                    c3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7D:2B:10:42:DA:57:ED:13:AC:C0:72:61:FF:39:FB:76:08:25:4D
            X509v3 Authority Key Identifier:
                keyid:60:9D:9C:D5:E8:D5:F0:97:F7:00:EC:13:22:DE:DD:44:30:81:97:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:3d:d4:2a:7d:ce:e0:f3:cc:4d:8f:77:9b:14:c1:ce:39:8e:
         d8:80:3d:7e:72:1a:f4:88:ac:c2:22:53:e8:6e:94:b4:33:a6:
         5e:1f:4d:46:32:fe:e4:9f:86:77:13:11:a6:e2:bc:97:08:c6:
         0a:17:45:16:34:d7:17:62:3d:13:85:33:06:0f:b5:e4:71:51:
         95:05:02:0c:1f:73:ec:79:87:7a:70:d7:74:33:f3:75:4a:4e:
         45:74:4e:89:7b:b4:1a:75:37:11:74:d1:a7:43:3e:67:c3:44:
         7f:b8:7c:d1:01:2d:15:97:74:52:3f:23:fd:e1:f4:ef:c9:31:
         ef:b4:e3:61:8a:cf:a4:f9:8a:c6:53:cf:5d:6e:00:96:6b:e3:
         21:ec:bc:89:e9:d0:f8:e0:5f:b1:97:54:67:98:ed:9b:9e:8c:
         79:0d:bf:3e:37:8f:10:4d:23:5d:43:6d:98:fb:b9:71:1e:ca:
         33:d4:48:52:93:b6:64:7f:83:d6:8c:c9:6a:38:17:30:a5:ba:
         39:82:37:e8:76:49:b8:52:b4:52:db:79:ee:d7:1d:fa:61:b6:
         03:54:00:20:e3:e6:a2:c4:b9:80:49:62:cd:c5:9c:ac:9c:61:
         cc:13:e0:0a:5f:d5:5b:59:b5:cc:01:e7:b2:0e:68:a0:b7:7b:
         22:5b:d3:13
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MzA3QzExMC8GA1UEBRMoNjA5RDlDRDVFOEQ1RjA5N0Y3MDBFQzEzMjJERURENDQz
MDgxOTdFQjAeFw0yNjA2MTMwOTE3MzJaFw0yNjA2MjAwOTE3MzJaMBgxFjAUBgNV
BAMTDTZhMmQyMDJjLTJhZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC90tPyly/YsFyPXCl/Tf1Sp8DR5iEkQthJbSBb1+ZBzL/TZwx6LwqJe8pcUrgA
pl6fM9pg9HcNbY1Fep6b9NloKdyPxE+BO2viUbuoq+GIJb8fp/Tlo8rw0bBIksrn
cbLq8oG245mM2ReINrUBQvcj0e9hwOgA69MRSKKZvaG9RrxlrR1m/6coDge2ZPO7
tft/+MP9EqH85ieWdTindpT3NrtIvENM9h/tJbpuqOzHqn3detusVTH/34BXhA8c
m37J9kylsnkl6hD/tHDo2gBnLFj1SWbXBYAFV84EkXqe3K+EIfYFUwlrJ6YCQaUJ
nXaTcOWbg4R0YShskX52EcPvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYH0rEELa
V+0TrMByYf85+3YIJU0wHwYDVR0jBBgwFoAUYJ2c1ejV8Jf3AOwTIt7dRDCBl+sw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzMDdDL0JBOEM4QTlFNjNE
OTExRjE4OTgxNkMxMDg0NDdBODg4L1lKMmMxZWpWOEpmM0FPd1RJdDdkUkRDQmwt
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWUoyYzFlalY4SmYzQU93VEl0N2RSRENCbC1zLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz
MDdDL0JBOEM4QTlFNjNEOTExRjE4OTgxNkMxMDg0NDdBODg4L1lKMmMxZWpWOEpm
M0FPd1RJdDdkUkRDQmwtcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQChPdQqfc7g88xNj3ebFMHOOY7YgD1+chr0iKzCIlPobpS0M6ZeH01GMv7kn4Z3
ExGm4ryXCMYKF0UWNNcXYj0ThTMGD7XkcVGVBQIMH3PseYd6cNd0M/N1Sk5FdE6J
e7QadTcRdNGnQz5nw0R/uHzRAS0Vl3RSPyP94fTvyTHvtONhis+k+YrGU89dbgCW
a+Mh7LyJ6dD44F+xl1RnmO2bnox5Db8+N48QTSNdQ22Y+7lxHsoz1EhSk7Zkf4PW
jMlqOBcwpbo5gjfodkm4UrRS23nu1x36YbYDVAAg4+aixLmASWLNxZysnGHME+AK
X9VbWbXMAeeyDmigt3siW9MT
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:22:49 2026 by rpki-client