Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
File:                     ysNNxbjd0zsX7HVcldRdD3YlD6g.mft (raw, json)
Hash identifier:          fmL5eEdZlaTtMTtoS+++ArjPPbwwsTbYI/CJNxrKrZ0=
Subject key identifier:   9A:AE:9C:BA:41:BF:37:B5:98:79:B2:F9:58:BE:99:34:AA:37:2D:2A
Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
Certificate issuer:       /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Certificate serial:       0295
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
Manifest number:          028F
Signing time:             Sat 13 Jun 2026 01:46:15 +0000
Manifest this update:     Sat 13 Jun 2026 01:46:15 +0000
Manifest next update:     Sat 20 Jun 2026 01:46:15 +0000
Files and hashes:         1: ysNNxbjd0zsX7HVcldRdD3YlD6g.crl (hash: xEGpwTVqmOpoxRbFMNLUrBJDEJw893VZ8t6RP65Mhr8=)
                          2: E21DEF607B5E11ED98247D60C4F9AE02.roa (hash: R3KADOtwsyG/v2+mGTP92tv9io+mPYskKwwNor02wSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
        Validity
            Not Before: Jun 13 01:46:15 2026 GMT
            Not After : Jun 20 01:46:15 2026 GMT
        Subject: CN=6a2cb667-684a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:60:5f:81:34:ac:e9:5e:35:39:41:a4:ec:1e:
                    5a:c9:96:03:99:5a:bb:87:67:7f:26:1a:09:23:83:
                    5d:db:10:db:e7:3f:ff:01:4f:e3:eb:cb:7f:f1:72:
                    db:09:c1:c5:21:47:78:64:cd:8c:94:37:75:23:14:
                    e6:3d:23:68:7f:9b:85:d1:ba:d1:ff:f3:67:cb:89:
                    c3:0a:ec:75:8e:fc:d6:a8:06:0d:ab:38:25:c2:2d:
                    d3:56:52:6f:e5:ef:8d:c5:01:96:b0:46:c6:33:e1:
                    51:1d:e3:9e:07:5a:de:01:ac:7e:ff:92:d4:c0:b1:
                    23:54:c1:9d:5c:ab:b4:55:a4:92:74:b7:8e:79:34:
                    eb:ad:93:54:f7:51:c2:a5:90:b1:e3:89:d2:c7:ce:
                    65:df:d5:b4:a5:5e:50:e0:cc:90:53:2d:6e:e4:3f:
                    c7:9c:49:41:d9:27:1f:f0:37:aa:7c:27:4c:63:d6:
                    9d:03:de:87:01:32:36:a0:db:69:00:58:03:fa:74:
                    c0:c6:6c:c5:c7:b3:4f:6a:b8:f5:4a:61:df:d4:12:
                    cf:1b:4b:bd:e5:f5:77:17:0c:8b:68:5d:bd:16:0e:
                    cb:36:d0:56:9c:d6:c8:dd:5a:52:39:03:22:47:66:
                    20:2f:6d:09:45:69:d6:52:73:51:07:57:8d:3b:b6:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AE:9C:BA:41:BF:37:B5:98:79:B2:F9:58:BE:99:34:AA:37:2D:2A
            X509v3 Authority Key Identifier:
                keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d7:64:2f:73:63:e9:e7:75:56:78:a2:26:da:81:73:9a:d6:
         82:c6:8f:fe:2e:56:61:61:f7:31:81:43:5e:ac:5c:91:50:62:
         cb:ea:b4:42:bb:af:d0:e3:e4:68:37:e6:25:46:df:8d:c6:0e:
         cb:6d:c5:05:be:81:d4:33:35:ad:c2:e1:b7:9c:fb:8e:f8:46:
         c0:cd:7e:68:6a:5e:72:50:c7:13:d0:8c:b3:01:2e:9f:45:97:
         23:9a:cb:65:24:38:71:e8:d7:ef:57:1b:d0:3c:6a:e9:16:bf:
         f4:c8:99:9e:5b:9e:ac:c8:e6:ed:ff:e0:12:94:6a:02:9e:50:
         57:e1:4c:b1:97:4f:9d:0e:34:f1:b6:07:ee:f9:e0:a9:2b:c1:
         57:4f:08:29:28:8d:66:19:24:a3:fc:db:cb:dd:5c:1c:f5:aa:
         a6:56:17:99:0b:36:25:1a:31:8e:6f:74:5a:80:33:4f:f0:41:
         27:22:9c:e9:6c:f2:56:b5:d6:b1:57:13:cc:49:b2:67:b5:f6:
         bc:fa:62:37:bc:09:54:53:17:37:85:cc:7a:91:74:57:c3:66:
         51:43:59:4c:1b:bf:43:19:24:fa:d3:14:64:d8:d0:76:26:ec:
         29:39:40:a7:88:c0:c5:57:e9:1a:4d:21:3c:18:e8:cc:1e:23:
         96:99:e4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:31:53 2026 by rpki-client