Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
File:                     yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft (raw, json)
Hash identifier:          7vSQzYMRn6IusOiO4tfCLnC/ipxgfp2lULLqOxXHJpE=
Subject key identifier:   5A:2F:90:CC:54:4E:F9:F0:AA:3F:33:52:77:2E:D0:0A:A2:AD:49:AA
Authority key identifier: CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF
Certificate issuer:       /CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
Manifest number:          018B
Signing time:             Sat 13 Jun 2026 04:26:50 +0000
Manifest this update:     Sat 13 Jun 2026 04:26:49 +0000
Manifest next update:     Sat 20 Jun 2026 04:26:49 +0000
Files and hashes:         1: yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl (hash: N1+BwOrXAJNEStYLA6GH++yZ1P1CdTZ9xMVUIljSm0k=)
                          2: F8636CC60F9D11EFA1E14343C4F9AE02.roa (hash: /3nOzfVBV3G4XKfktsyW3g/oGq96lm0UNw7VtIzketI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl
                          rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153675, serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
        Validity
            Not Before: Jun 13 04:26:49 2026 GMT
            Not After : Jun 20 04:26:49 2026 GMT
        Subject: CN=6a2cdc0a-91a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:fe:96:65:49:ca:bf:ba:f2:a5:53:85:b2:
                    c1:7d:c3:5f:6e:82:74:18:d8:a8:5e:61:be:47:30:
                    df:d6:bf:b8:c0:ea:aa:a7:56:8a:0e:ed:ff:74:ef:
                    b6:ac:50:59:70:33:f2:d2:80:bb:d1:cf:aa:83:2a:
                    41:fd:be:a2:a2:7e:f3:e2:4f:f2:8b:20:18:e9:d2:
                    cb:82:cd:0b:e0:05:b9:71:5d:56:63:2c:2c:66:0d:
                    4d:3d:d6:7f:af:a0:ff:19:35:75:df:b6:35:cf:92:
                    9f:f8:bc:24:a4:75:ab:6e:ab:a3:1f:88:c3:84:8c:
                    bd:d4:8e:14:f3:34:92:35:4a:5c:c5:1c:6c:10:37:
                    de:3e:8d:d5:7f:76:11:89:2f:dc:26:b4:72:e1:2e:
                    d0:60:47:87:ac:f8:9e:0f:94:e4:6b:54:18:b0:03:
                    b3:db:ff:6c:3b:5e:7f:de:17:7e:bb:e3:e6:dc:c0:
                    41:14:c6:af:85:ec:3b:0f:37:cb:81:a8:5a:29:cb:
                    7b:3f:14:ed:b2:e9:0c:65:93:d1:45:0f:19:c3:a1:
                    30:f1:ab:d3:0a:7c:90:41:37:9b:d4:e0:59:b1:5d:
                    e6:f4:e0:89:0f:94:15:8e:e8:b6:11:e5:76:f5:fc:
                    4c:7b:81:9e:84:e1:c6:52:fc:c0:07:00:af:66:6d:
                    46:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2F:90:CC:54:4E:F9:F0:AA:3F:33:52:77:2E:D0:0A:A2:AD:49:AA
            X509v3 Authority Key Identifier:
                keyid:CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:97:55:6b:6c:6b:9d:1a:16:5a:ba:a3:86:a5:55:5c:96:93:
         3d:54:18:e9:a5:6e:e3:60:df:86:0d:80:23:b6:07:28:e7:6b:
         88:b3:c4:a6:8f:54:b8:b9:ff:2f:23:9b:00:66:47:48:9c:de:
         f4:84:79:b6:69:e5:ad:83:35:6f:29:d1:41:fc:1d:9a:7e:bc:
         bb:bb:7c:f9:ba:8d:64:62:47:79:f4:be:85:0b:0e:91:c3:7e:
         01:71:5d:03:c7:31:cd:b8:28:8b:50:05:3b:be:b1:b5:20:69:
         0b:bb:c5:70:6a:cc:c6:98:50:a9:e7:6d:1e:56:57:05:ac:15:
         b9:d8:fb:40:dc:d6:b4:d6:a8:2f:8b:bf:ab:de:76:12:8e:bc:
         2c:07:90:d6:53:fd:a3:3d:24:8c:0d:54:3f:68:54:3f:18:09:
         b2:9a:21:5e:13:5f:b6:39:60:95:cb:a7:44:e1:b5:55:a5:01:
         c4:06:8a:15:93:4d:38:9d:c0:e1:13:9b:8e:a2:c3:46:5b:bd:
         01:f3:70:42:09:f9:67:b6:a7:9a:75:cd:e0:27:20:b6:46:8c:
         97:c7:94:3f:e9:46:c6:dd:1e:fa:2a:57:92:04:0d:a3:b2:87:
         a0:76:c9:c8:c4:3c:c8:76:ec:36:89:1e:74:60:9e:db:b6:02:
         83:cc:d7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:13:22 2026 by rpki-client