Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
File:                     Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json)
Hash identifier:          MXHhsmELHRpsGF8YQrQsLwYH3UdAURuh2KHGak04ZHw=
Subject key identifier:   DD:2C:25:76:C5:FF:AC:D0:7B:53:4D:3F:77:A6:FA:48:D2:34:D6:BC
Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
Certificate issuer:       /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
Manifest number:          0207
Signing time:             Sat 13 Jun 2026 03:09:20 +0000
Manifest this update:     Sat 13 Jun 2026 03:09:20 +0000
Manifest next update:     Sat 20 Jun 2026 03:09:20 +0000
Files and hashes:         1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: hVJpgAe0EQ5Gthh1X96m2NIpic/wxAvKD7Bm+0n7U7g=)
                          2: FFD36784600111F19064A2768247A888.roa (hash: V3bllZSRhm3+TX1SYEI07qXQ37w5NHGT/3GcjZvebcg=)
                          3: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: b0f2l7SFJ4lf6D8dKmqlQhXFnbZKoG40QcikDdNJbvM=)
                          4: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: tza7lo1L0/WRLtMV4iTseTv38sI/dLZO8/zwvwzsN6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl
                          rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
        Validity
            Not Before: Jun 13 03:09:20 2026 GMT
            Not After : Jun 20 03:09:20 2026 GMT
        Subject: CN=6a2cc9e0-6951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:55:22:1c:86:65:39:7d:87:23:26:30:fd:
                    02:67:6d:63:08:2b:8b:47:2b:dc:0a:9c:e9:00:ba:
                    5d:8e:07:9a:f9:14:ff:08:43:b1:b9:c7:79:fd:58:
                    73:c2:da:bf:55:d2:43:3d:3c:de:73:35:09:4d:9b:
                    9f:67:72:44:fd:6a:84:06:4f:fe:4b:f6:c8:de:cb:
                    66:74:fa:04:32:8a:20:69:bb:20:e9:da:dd:20:05:
                    6c:25:34:ee:e2:7e:d7:17:d6:1f:9c:8f:c5:02:c8:
                    d7:24:8e:15:f5:e6:88:ba:dd:cb:7a:46:92:f0:7a:
                    85:74:39:b0:05:98:bc:c2:c6:87:96:1a:4f:11:34:
                    67:0f:20:81:cb:22:10:d8:88:06:3a:3d:6f:fd:6b:
                    00:ad:42:3f:94:19:9a:0a:8f:3f:9a:ca:f0:c6:85:
                    17:02:2c:79:18:ed:c0:2e:bd:da:5f:da:6c:bd:40:
                    28:59:52:bc:13:bf:e6:a6:c7:78:20:70:86:c8:eb:
                    76:a5:fa:b7:d3:2e:2e:19:bf:93:c7:13:67:24:fb:
                    34:03:fe:ac:55:af:df:18:90:71:d4:61:00:b8:d3:
                    84:13:7e:1b:74:8e:88:37:85:d2:11:c7:c7:44:09:
                    1e:c3:5b:2d:57:59:8f:12:ec:27:c9:11:2b:24:8b:
                    6b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2C:25:76:C5:FF:AC:D0:7B:53:4D:3F:77:A6:FA:48:D2:34:D6:BC
            X509v3 Authority Key Identifier:
                keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:3f:34:37:a0:07:66:b7:db:34:eb:67:21:20:34:45:82:f6:
         70:1a:82:f6:c0:0d:73:5b:44:70:ab:6b:bc:dc:41:9e:e9:8b:
         0e:cd:68:21:08:fd:07:fc:68:b0:de:45:b1:cd:27:9a:da:f1:
         d7:9b:2a:53:78:b6:86:6f:d6:fa:23:df:87:54:5c:d6:ea:44:
         a9:ee:45:07:79:cb:7a:ba:79:49:9a:23:00:09:53:8d:46:b7:
         7e:88:80:65:77:93:b9:11:39:a5:67:9d:52:85:ce:d1:a2:fc:
         39:15:09:1e:75:68:5c:92:27:e3:58:36:de:3b:79:7c:a1:a8:
         d9:19:4e:e3:24:50:59:96:c4:35:22:bb:1b:a4:9b:8d:b0:49:
         03:69:c8:a2:0a:f5:3b:70:32:6a:e8:bd:8e:4e:f1:f0:66:36:
         00:45:58:b8:78:c9:d3:a2:36:eb:d1:ba:de:14:19:26:71:72:
         96:48:d7:56:c7:1d:35:1e:3a:f5:38:94:59:a0:2a:ec:a8:ff:
         8f:1c:3d:7e:3a:20:2d:48:54:2c:3b:a9:db:7f:4b:6a:37:a9:
         50:5c:87:b4:01:0c:ae:44:73:48:9b:dc:1b:88:9a:95:ed:0e:
         78:76:f8:b3:00:8b:35:c1:77:9c:69:35:ec:f7:9c:04:d3:7d:
         87:0d:52:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:18:53 2026 by rpki-client