Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft
File:                     yhlef9JZjYWjbJnsSBs1dMBuOxc.mft (raw, json)
Hash identifier:          c8J34ZP/JjP6ROT9aPFINqFBaiED9/H7w/uKPssIOEE=
Subject key identifier:   55:F5:1E:08:37:96:64:BA:7C:E2:93:EC:A6:47:B1:F6:70:80:4C:2E
Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17
Certificate issuer:       /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17
Certificate serial:       08C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft
Manifest number:          08BF
Signing time:             Fri 12 Jun 2026 20:28:42 +0000
Manifest this update:     Fri 12 Jun 2026 20:28:41 +0000
Manifest next update:     Fri 19 Jun 2026 20:28:41 +0000
Files and hashes:         1: yhlef9JZjYWjbJnsSBs1dMBuOxc.crl (hash: d9zAygYzIGJxOZISsUEUEn67jRZlttNA09HYNPxUO2M=)
                          2: B65C355AE1E411EAAD5D8545C4F9AE02.roa (hash: a0ikFcPtz4uKTdxcDLlrrrB8ZBAu38Rn0L19Tx4gd1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl
                          rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2247 (0x8c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DA63, serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17
        Validity
            Not Before: Jun 12 20:28:41 2026 GMT
            Not After : Jun 19 20:28:41 2026 GMT
        Subject: CN=6a2c6bfa-cb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:09:a9:b2:8e:a4:cf:6a:09:d9:91:f9:8c:7c:
                    8e:ec:ed:7f:01:be:81:6b:13:42:f1:93:c6:d6:f5:
                    49:7e:22:e2:c6:90:0c:ed:e6:17:bb:d2:0d:84:e4:
                    b2:39:8f:f4:61:ce:50:e0:c9:df:42:33:4b:2d:be:
                    a1:5c:79:73:d8:77:61:59:7f:4b:47:5a:8c:c9:98:
                    39:dd:b2:de:fd:c3:ff:4d:85:d5:dd:96:b0:00:38:
                    7e:87:04:b8:61:83:44:36:42:e9:af:ca:fd:69:66:
                    83:75:72:65:89:7a:ef:b0:16:78:ac:46:09:72:d3:
                    15:da:50:62:ac:ec:8c:61:b0:a8:8f:80:8b:4f:fc:
                    50:4a:2a:94:01:43:e4:cf:01:d8:ac:4f:be:12:87:
                    f4:19:0b:a2:40:0b:72:d6:09:ec:ca:10:55:6f:f0:
                    da:77:17:05:a9:53:af:b9:94:69:fa:01:5d:64:6c:
                    f9:0e:07:91:0c:61:84:34:c3:0c:69:6e:6d:99:af:
                    b8:61:8e:72:2b:ce:46:a4:b4:b6:82:7b:e0:b0:e1:
                    80:c5:10:20:62:18:a1:96:83:1c:53:d3:29:8c:4d:
                    00:e8:b1:c9:79:a4:04:8c:f5:d5:c7:b2:44:e4:d3:
                    a8:b5:8d:b8:4a:2b:f1:a3:2a:99:94:8d:1b:ac:95:
                    f9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F5:1E:08:37:96:64:BA:7C:E2:93:EC:A6:47:B1:F6:70:80:4C:2E
            X509v3 Authority Key Identifier:
                keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a3:7f:04:1e:9d:a3:69:b5:be:54:a1:c4:63:42:db:b0:3f:
         52:a6:e3:2d:83:95:aa:28:31:57:84:82:94:c7:46:27:e9:ca:
         35:f0:99:2c:a6:85:5d:72:c0:9c:b7:3b:79:51:4a:c4:40:3a:
         3e:60:de:f7:a2:f4:b8:18:d8:77:a5:34:19:81:3b:5d:2d:49:
         4d:3b:fa:a1:74:53:72:73:13:7b:10:ca:aa:36:4e:d8:ee:b9:
         ff:bb:1c:00:a5:ea:1e:90:1a:a7:fa:0b:49:ff:49:27:e8:93:
         03:33:20:71:a0:90:f7:01:29:b6:13:05:eb:75:a8:74:eb:46:
         88:18:e5:1f:e5:ac:e9:20:74:3e:4d:ed:cb:52:6a:5e:b9:3b:
         db:26:f0:8c:6f:c4:fb:e3:39:d6:17:0a:e2:4f:52:3e:67:28:
         34:04:5e:21:a6:4e:d4:08:e6:4f:17:47:2f:d9:1c:71:a3:c8:
         68:ff:61:6c:44:2e:f3:d4:2b:db:3d:16:61:28:bb:12:86:91:
         1c:b6:f9:c7:24:f8:f9:74:ec:9a:90:53:30:2b:87:b8:cf:af:
         27:22:3e:6d:9b:3a:72:c2:e9:d4:65:c8:ab:17:71:b2:9d:1b:
         4f:44:32:6c:ec:2f:3f:79:89:16:cb:7f:25:a9:16:39:e9:45:
         e8:94:1d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:33 2026 by rpki-client