Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File:                     YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier:          JtNbn/p4p2QGfle2ajEa+LvAH/XDVkNh4zUiLz2WmMM=
Subject key identifier:   AC:90:2D:34:BD:B1:AE:77:BA:16:C4:C2:D6:FB:1C:18:0E:78:EC:64
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer:       /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial:       029E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number:          0297
Signing time:             Sat 13 Jun 2026 01:41:46 +0000
Manifest this update:     Sat 13 Jun 2026 01:41:45 +0000
Manifest next update:     Sat 20 Jun 2026 01:41:45 +0000
Files and hashes:         1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: VBj4/Sk06DexBpG/vsb/KgvlqmzPLb2v+xjax6RDvE8=)
                          2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: /uGLQIrlBTxMwkdtG3jyxMXG6mL7PGCkVKPH/j33iG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
                          rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
        Validity
            Not Before: Jun 13 01:41:45 2026 GMT
            Not After : Jun 20 01:41:45 2026 GMT
        Subject: CN=6a2cb559-bb72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:0c:55:5b:57:98:a1:10:e8:55:19:99:43:
                    70:2e:5d:87:df:4d:23:29:07:97:b5:09:b1:37:31:
                    78:e5:a2:f8:fe:01:ff:74:32:33:84:89:d9:46:a6:
                    1b:04:56:3c:c3:dd:f0:ff:1f:95:b0:99:25:c7:65:
                    fb:df:8e:3b:e6:48:81:1b:e5:a7:0d:e8:3f:ed:b4:
                    24:34:52:bf:48:e3:42:b5:8b:72:a6:51:03:cf:d8:
                    50:00:86:10:f8:b2:77:1a:2d:aa:3d:6e:97:89:b2:
                    bf:1a:ae:8e:aa:6a:7d:55:2b:4c:0f:ce:c3:0c:2a:
                    5b:4f:9a:3a:70:a9:1a:87:d5:df:8a:17:fc:d5:fe:
                    9c:cd:59:d2:19:ca:2e:b3:18:00:17:22:db:e9:a6:
                    c6:60:2d:4b:ac:6b:ee:c1:58:81:47:4e:bb:36:94:
                    d7:4b:11:ca:3f:6f:d7:f8:c1:98:c1:ae:c2:fb:5f:
                    05:6f:00:bd:64:1b:61:03:b1:4d:95:03:d7:f1:98:
                    cd:38:28:26:2f:f1:2a:07:43:bc:eb:ed:82:cc:00:
                    72:72:71:62:66:b2:b1:e0:d5:6e:2d:fe:92:2d:f4:
                    9a:71:99:53:b3:0f:e1:be:3c:0b:08:61:43:98:a9:
                    48:1e:bd:cd:88:a6:00:59:c2:cf:d5:50:83:87:32:
                    c2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:90:2D:34:BD:B1:AE:77:BA:16:C4:C2:D6:FB:1C:18:0E:78:EC:64
            X509v3 Authority Key Identifier:
                keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:80:43:d2:c8:85:6d:4c:b1:fa:f2:83:fa:b9:2c:a8:a7:bb:
         4f:91:19:90:82:31:a8:4a:2e:8c:36:60:4b:7d:18:e8:e4:33:
         77:f0:d5:bf:90:89:f7:23:bd:87:38:9e:11:45:2e:6c:fa:e6:
         15:dc:96:0e:ed:cc:57:a6:89:9c:3d:88:53:85:ca:e1:5d:ff:
         58:c4:8b:e3:23:d8:f7:a0:30:cf:1c:03:a7:bd:12:02:65:25:
         73:93:0f:24:f2:65:83:a3:5f:6d:07:56:1a:ce:4a:a0:f3:12:
         ac:3c:a9:02:43:10:73:ce:87:fd:e2:1a:69:2c:aa:0d:33:3a:
         d6:d2:37:f8:7a:d8:3b:49:16:27:a6:84:db:b8:09:d9:75:b3:
         09:52:85:1d:5e:ce:6b:11:5e:2f:86:43:e8:72:16:ca:01:fd:
         2c:d2:20:d5:fa:de:06:72:be:fd:ae:57:21:22:af:0f:0e:75:
         34:1c:df:ce:f2:cd:50:c4:c0:04:ee:ee:44:fa:a3:97:48:5f:
         99:15:25:b5:33:aa:54:6d:17:f0:ee:7a:78:a2:3a:2e:30:87:
         ca:0f:24:76:13:e8:24:47:c6:54:63:0e:7b:a6:ac:13:31:75:
         48:e1:73:4b:a3:6f:a2:ae:78:f4:c5:f9:44:ac:d0:6c:2f:02:
         d2:8a:3d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:55 2026 by rpki-client