Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft
File:                     Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft (raw, json)
Hash identifier:          9gBg7GQN+DiaGkgVQowT715TkKX31+iTjfYEhDzEvq0=
Subject key identifier:   2D:49:78:4C:A7:D6:8F:45:C8:79:5A:C5:B1:4D:84:F6:76:6A:A3:8A
Authority key identifier: 63:F7:8D:50:20:55:B6:CB:F0:7C:EC:A1:43:7B:56:02:A8:F2:4C:75
Certificate issuer:       /CN=A91D69B9/serialNumber=63F78D502055B6CBF07CECA1437B5602A8F24C75
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft
Manifest number:          2D
Signing time:             Sat 13 Jun 2026 08:46:46 +0000
Manifest this update:     Sat 13 Jun 2026 08:46:45 +0000
Manifest next update:     Sat 20 Jun 2026 08:46:45 +0000
Files and hashes:         1: Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.crl (hash: vhqjzjCUq7277xt+DBcnOxiUObqh35Z+6Qk0R5FzepE=)
                          2: 743D4A1A245F11F1B445E15AC5833773.roa (hash: I1pnbFkaRNRmC3NYqt0+dVRJnrgUwzqm0Vjq3Hx70aI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.crl
                          rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D69B9, serialNumber=63F78D502055B6CBF07CECA1437B5602A8F24C75
        Validity
            Not Before: Jun 13 08:46:45 2026 GMT
            Not After : Jun 20 08:46:45 2026 GMT
        Subject: CN=6a2d18f5-473c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ba:a4:61:ff:fd:7f:1f:43:fb:b1:ca:e0:f3:
                    aa:05:e2:29:ea:32:e2:15:97:b0:8c:57:65:8b:df:
                    ec:26:92:b0:15:b0:2e:ec:16:8c:0c:9a:1c:ee:e7:
                    d5:f5:1b:2e:e1:e1:3d:f3:19:ef:b8:7a:77:cf:6e:
                    92:13:d1:e9:46:74:ca:b1:5b:1d:ce:33:f2:29:d6:
                    5b:55:eb:b5:ea:d8:27:93:53:a7:92:1a:17:52:cc:
                    a6:81:28:c1:a7:bf:2f:6b:c8:07:3e:24:fd:ed:59:
                    80:64:ab:91:dc:09:c4:9d:eb:ff:fc:65:88:11:8d:
                    05:ca:41:38:b6:36:6e:39:15:0f:6d:59:eb:8e:8f:
                    ae:d3:d8:9d:ce:bd:ef:cd:12:68:9c:3e:71:1f:69:
                    3f:f0:67:2c:06:82:37:a7:9f:73:d3:71:4e:cd:49:
                    3c:57:2e:80:05:fa:cc:f1:2a:40:6c:0d:7d:cb:c4:
                    eb:c1:dc:ae:2d:e7:bb:c4:82:85:7e:04:8d:78:1d:
                    c6:8e:92:ba:d1:48:60:28:01:97:3b:87:f9:05:31:
                    e8:7d:7a:c5:f1:ca:28:b8:2b:76:ac:f9:66:c2:b1:
                    51:ca:b2:38:c1:61:95:b2:c7:84:58:ea:39:b2:7b:
                    02:24:da:b0:b9:53:cc:9c:8e:ab:0c:24:3b:b2:93:
                    12:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:49:78:4C:A7:D6:8F:45:C8:79:5A:C5:B1:4D:84:F6:76:6A:A3:8A
            X509v3 Authority Key Identifier:
                keyid:63:F7:8D:50:20:55:B6:CB:F0:7C:EC:A1:43:7B:56:02:A8:F2:4C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:26:1a:15:01:72:b9:9c:f6:dd:88:fa:31:d1:cd:8e:41:03:
         4b:db:9f:99:eb:2e:72:39:68:90:70:fa:38:eb:04:c2:49:c8:
         02:50:65:8c:9c:ec:e7:0e:b2:2a:34:4d:49:1d:ac:e0:a8:e5:
         1f:d3:52:87:40:a5:a4:48:a3:7d:11:39:9e:14:fb:80:c9:12:
         09:46:01:f3:64:ec:6b:2b:33:bd:b8:72:72:a1:45:49:b7:30:
         a7:f8:6a:e2:fd:2e:62:6a:a6:14:8e:d2:82:f1:d7:db:86:c6:
         a2:d5:6b:a3:61:4e:c3:c8:a0:11:52:32:d0:8b:f7:d9:e6:30:
         af:5c:c4:f8:70:f6:67:01:5d:57:5d:dc:cb:88:41:5c:97:8a:
         10:f7:84:7c:1d:9f:71:dc:aa:43:5d:85:14:43:53:16:dd:37:
         8c:20:76:55:80:b3:7f:db:50:b4:d6:20:ab:d6:7e:f3:1f:95:
         c2:8b:be:57:1e:5b:4b:d2:5d:b5:3b:96:58:89:d1:5a:a4:a9:
         d6:f1:fe:58:36:92:ab:77:b9:b0:4d:f5:8e:d7:1e:80:6f:fe:
         cb:b1:8a:ac:02:85:65:43:35:8f:23:24:72:99:d9:67:fc:7b:
         20:5a:08:6e:ce:26:41:1a:26:68:67:b7:d4:10:7a:8d:1c:39:
         91:d5:2c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:43:58 2026 by rpki-client