Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
File:                     YN1l7H9y62x9qLk3BuLTug8GW_w.mft (raw, json)
Hash identifier:          go10yAmwP2MT1JqaHiySa8e/2QpLmRIPLq6CaPxpY5U=
Subject key identifier:   B7:85:68:6D:F4:F9:CF:9E:7C:F7:46:83:CD:87:F6:86:9E:02:0B:95
Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
Certificate issuer:       /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Certificate serial:       1B31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
Manifest number:          1B1E
Signing time:             Fri 12 Jun 2026 16:15:15 +0000
Manifest this update:     Fri 12 Jun 2026 16:15:15 +0000
Manifest next update:     Fri 19 Jun 2026 16:15:15 +0000
Files and hashes:         1: YN1l7H9y62x9qLk3BuLTug8GW_w.crl (hash: LhXYfJa/ynfp0amigG/lRHUK7NRpxUpYKRHWQfr10c4=)
                          2: D75BE71A410511E7970A2A5FC4F9AE02.roa (hash: bVX95h5YGIEFl/nNsvVn6rJFnDmppDxCWRFjlU5VtvU=)
                          3: 91CB97905BD211EBA9178181C4F9AE02.roa (hash: qWp/XIY6bx5m6zPuPTYxt/QlRjZYjzeSmVqLyGiCJPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl
                          rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6961 (0x1b31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4264, serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
        Validity
            Not Before: Jun 12 16:15:15 2026 GMT
            Not After : Jun 19 16:15:15 2026 GMT
        Subject: CN=6a2c3093-2261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:81:c0:53:5b:79:ee:1a:af:e8:1e:b5:a4:75:
                    19:76:30:fc:0e:9d:c1:92:dc:d0:d4:3c:47:99:4d:
                    9c:9a:01:1d:29:ad:2c:44:d4:9b:87:a6:a7:1a:37:
                    be:c1:c5:11:8f:9f:70:62:8f:14:42:33:92:44:68:
                    cb:09:e2:85:25:f9:5d:b8:f4:c8:72:15:20:5b:1c:
                    80:60:45:eb:f9:5f:87:57:42:70:fd:9e:51:ff:0f:
                    11:65:47:c2:77:fc:61:5d:c8:41:b4:52:e7:8c:fd:
                    cb:58:72:a7:6b:aa:13:dd:5b:65:7e:e3:2f:63:4a:
                    aa:7e:47:cc:90:2e:2c:f9:d9:24:e3:78:36:e9:55:
                    5c:d7:67:08:4d:e7:9c:7e:7d:21:24:2e:8f:68:56:
                    c7:37:a5:48:de:b4:95:a6:17:c5:4d:08:b6:cb:9a:
                    a5:1b:e0:cc:3e:4d:ed:ef:03:b7:91:d4:b3:b9:b2:
                    25:35:3e:28:d5:d6:7d:3f:d2:8b:89:31:00:eb:c3:
                    25:aa:cf:48:46:90:74:46:b2:27:12:86:7c:98:5a:
                    41:50:8c:d8:e0:4b:1a:d5:16:05:ec:22:88:42:27:
                    0b:84:ac:ce:27:fe:61:53:5d:03:1e:73:22:d7:a4:
                    d8:06:d5:24:9c:67:63:b6:7e:05:c3:e5:56:b7:e9:
                    f7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:85:68:6D:F4:F9:CF:9E:7C:F7:46:83:CD:87:F6:86:9E:02:0B:95
            X509v3 Authority Key Identifier:
                keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:1f:58:e3:e7:5e:6c:99:2b:60:03:e7:01:21:a2:84:36:a2:
         b6:2c:46:48:d5:f6:f2:57:1f:a6:3b:1b:3c:09:07:99:d8:30:
         e6:b1:fe:5e:b5:f2:b8:36:dd:ea:52:37:10:b1:5c:98:81:d0:
         f1:1a:c3:ff:1c:bd:c9:17:bb:b3:c0:72:dc:6c:63:87:72:d5:
         14:5d:e9:d6:e5:89:ee:ad:79:71:51:ec:ae:10:57:e7:e6:b5:
         46:2d:b7:5a:43:5c:50:46:03:b4:86:eb:39:36:b9:2a:46:d7:
         41:5b:40:a2:5e:cf:2d:e6:8b:98:8f:2e:2b:d5:7a:7d:41:13:
         3b:fd:e1:3e:07:e6:54:3a:13:b6:e1:58:ee:58:96:bb:61:12:
         88:3a:58:71:6d:64:78:14:60:a9:ab:9f:1a:25:09:55:72:df:
         e1:48:e1:2b:39:be:d0:af:49:73:b6:ae:d9:3a:30:a1:e1:9a:
         db:d3:88:ee:44:2c:7b:6a:2c:2e:cc:a6:7a:8e:33:4d:e6:fd:
         5d:11:13:67:54:cf:2a:21:01:14:bd:78:a8:26:50:98:4d:2f:
         d8:d4:54:b3:db:ab:39:0c:ee:8e:7e:2b:d0:c0:d7:80:5f:a1:
         09:9e:a6:97:70:a7:9c:c3:bc:37:02:01:bd:4e:17:ce:40:ac:
         bf:08:3b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:10:53 2026 by rpki-client