Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
File:                     YLrcBCw3e4bA3J7riVEnJc4-IzY.mft (raw, json)
Hash identifier:          1liScb3X+dmgL515w3E3QHXzkialPJsv4xe3nQ6Im+w=
Subject key identifier:   83:98:8C:F4:69:70:2F:72:4C:FE:2A:0B:9F:54:0D:99:EF:BB:09:35
Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
Certificate issuer:       /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
Certificate serial:       02AC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
Manifest number:          029F
Signing time:             Sat 13 Jun 2026 01:45:47 +0000
Manifest this update:     Sat 13 Jun 2026 01:45:46 +0000
Manifest next update:     Sat 20 Jun 2026 01:45:46 +0000
Files and hashes:         1: YLrcBCw3e4bA3J7riVEnJc4-IzY.crl (hash: qdUmJgoc7ZhvT32CM0l3/Da6xAA+8qcED7rYT/4tWXM=)
                          2: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (hash: B71votStEYYp/K2emTulLeZ6cRSZ/0mH+ncAa56QIjU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl
                          rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
        Validity
            Not Before: Jun 13 01:45:46 2026 GMT
            Not After : Jun 20 01:45:46 2026 GMT
        Subject: CN=6a2cb64b-4990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:75:bd:dd:6c:cc:36:0a:82:ed:b3:67:d7:21:
                    02:e2:06:6c:ec:ba:41:4c:0e:04:93:31:b8:b8:29:
                    26:39:ce:7e:19:ef:84:a0:d3:61:94:6b:24:36:d7:
                    d6:90:ed:95:6c:e0:36:f3:39:90:c8:a4:d0:ca:e5:
                    89:b5:21:26:ff:7f:bc:45:b6:80:aa:9a:19:cd:b1:
                    2d:ca:d1:f1:7c:1f:f3:55:f0:34:ec:a3:36:22:0c:
                    aa:8c:80:6e:8e:cf:2c:2e:0a:6e:79:8c:05:eb:38:
                    37:58:be:7a:61:11:23:ad:00:7c:19:fa:86:56:4b:
                    1c:96:45:3a:a0:16:d2:e4:67:26:1f:bf:e5:b4:88:
                    7c:4b:77:21:c6:4e:a4:13:65:06:fc:61:fe:c4:90:
                    5b:41:b4:fe:b8:ec:c9:83:72:1c:65:9a:cc:a4:40:
                    02:09:52:d6:38:fe:be:84:2d:7c:68:21:b1:d1:f8:
                    95:6f:e5:a4:49:9a:50:79:87:cc:29:f1:e3:22:bb:
                    d6:f9:97:f9:56:26:a2:28:61:00:0d:c0:f2:bf:eb:
                    26:49:8e:d6:46:18:75:d9:db:a0:7c:0e:e2:85:34:
                    c9:67:87:f6:9e:92:78:3c:d3:1b:f4:02:47:16:83:
                    4e:0a:fb:94:a4:bc:17:f2:59:1b:5c:85:92:6f:1e:
                    42:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:98:8C:F4:69:70:2F:72:4C:FE:2A:0B:9F:54:0D:99:EF:BB:09:35
            X509v3 Authority Key Identifier:
                keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:38:ce:a0:f5:f8:87:38:46:7a:1b:1f:a5:b7:ef:11:f6:87:
         10:96:96:ab:dd:86:53:30:28:5d:d7:57:59:75:54:07:cf:78:
         91:3b:61:97:1d:75:58:b2:f7:10:41:7b:d2:f9:c1:18:00:a1:
         5a:8e:cf:02:77:ab:33:5f:7c:fa:d5:9d:80:09:30:d3:20:b9:
         54:96:c4:e9:07:8a:1c:eb:bc:cb:e1:6b:ec:84:61:b1:4f:79:
         3a:9c:4c:bb:a3:73:48:2d:02:90:db:8b:a9:a2:d8:c7:24:6d:
         26:6d:60:e7:19:19:85:a8:77:e9:6e:62:aa:f4:bb:fa:c1:6d:
         4b:7c:00:52:87:43:7a:90:3b:69:f9:91:33:b6:83:35:18:ca:
         f7:9d:e9:8f:6c:e3:5d:cf:f4:a2:b1:19:b5:50:0c:77:c9:aa:
         25:3f:4f:b7:c7:09:a4:2a:71:a6:d4:9b:f0:b3:17:4e:77:bb:
         a2:c9:9e:1a:60:97:6e:2a:9a:97:04:b4:72:c9:c2:d1:f1:3d:
         69:c7:3a:11:40:66:b4:ce:36:4f:70:16:28:e5:84:65:c3:68:
         ac:5e:dd:75:45:fb:47:84:c6:8b:27:e3:38:c8:37:38:51:e6:
         7b:ae:53:66:49:92:af:c2:30:40:c0:08:0f:86:22:20:f6:c6:
         4d:2d:cb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:19:18 2026 by rpki-client