Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft
File:                     yoXhM8HiOWFMnFd4ARi9swlSjnY.mft (raw, json)
Hash identifier:          IqK5tQBITcj7ueg42WKUHNeXNKbmSaL1IQhYTKqjhDY=
Subject key identifier:   49:FA:04:D8:3F:1B:EB:C0:3A:21:20:7D:D4:A5:9D:AA:91:32:1E:FC
Authority key identifier: CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76
Certificate issuer:       /CN=A91DC42E/serialNumber=CA85E133C1E239614C9C57780118BDB309528E76
Certificate serial:       085A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft
Manifest number:          0851
Signing time:             Fri 12 Jun 2026 20:54:29 +0000
Manifest this update:     Fri 12 Jun 2026 20:54:29 +0000
Manifest next update:     Fri 19 Jun 2026 20:54:29 +0000
Files and hashes:         1: yoXhM8HiOWFMnFd4ARi9swlSjnY.crl (hash: Eabi5skWNzMlD1+5CI13bcq8icwoTRWbDpn3/huIfG8=)
                          2: 4AAD8CFE0D1E11EB83C9B637C4F9AE02.roa (hash: 1FYTa+b4b7Loa31EgzeXR7TOb6YS6HpedmRkzfbLWn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl
                          rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:54:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2138 (0x85a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC42E, serialNumber=CA85E133C1E239614C9C57780118BDB309528E76
        Validity
            Not Before: Jun 12 20:54:29 2026 GMT
            Not After : Jun 19 20:54:29 2026 GMT
        Subject: CN=6a2c7205-ec11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:32:ba:a8:96:3d:fd:63:d3:64:8d:4e:ed:60:
                    c1:4f:3f:8a:aa:2d:22:2c:8e:49:06:e4:52:01:25:
                    73:a9:18:40:35:82:68:51:04:74:1a:1f:df:93:e6:
                    f2:04:9e:32:b2:b9:54:42:1a:f3:fd:80:de:3f:dc:
                    e3:b1:30:31:3d:c3:ae:8a:94:2b:91:14:fb:6f:8f:
                    9f:85:c7:af:b7:f8:b8:7f:4d:d1:0b:b9:a2:05:3a:
                    3b:56:d9:82:a7:b5:83:ac:3e:df:69:7e:09:a3:7a:
                    e7:10:1e:a5:ed:0a:e6:23:7b:f5:c2:92:c2:bb:f0:
                    09:a7:e5:dd:b4:d3:a1:1d:66:a8:6a:66:fd:3c:07:
                    61:5b:bf:8d:bb:ad:1f:26:fc:e6:d0:f5:ef:01:4f:
                    99:6b:57:e2:8a:ff:e5:f6:4f:0d:f2:e5:4c:34:e8:
                    e3:d9:ec:e2:d2:bd:2e:78:b5:d0:81:d0:f2:f2:d0:
                    8e:2f:6f:c8:09:64:23:8d:4a:34:56:ec:0b:7b:3f:
                    67:5a:ec:f7:a4:d2:c0:33:a3:c3:bf:1d:ea:57:5d:
                    83:67:26:1b:fb:73:dc:f3:51:c5:1f:b4:b4:19:74:
                    13:db:d5:3b:75:d6:27:56:5f:4f:97:35:a2:32:4b:
                    cf:cc:e4:8a:e3:d9:9b:d4:f3:7a:f2:d1:6c:a4:a9:
                    1d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FA:04:D8:3F:1B:EB:C0:3A:21:20:7D:D4:A5:9D:AA:91:32:1E:FC
            X509v3 Authority Key Identifier:
                keyid:CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:5d:ef:ea:11:11:9c:d3:46:23:30:cd:ef:7f:bf:b5:9c:42:
         76:d0:12:6d:5b:ae:d5:11:4e:b2:e8:08:73:d5:32:de:bc:7e:
         33:7c:1c:65:8a:78:46:f9:7c:72:6f:d8:62:67:2a:05:35:a3:
         ff:4f:b2:29:e0:06:3c:44:55:5d:9d:4d:78:be:ac:e2:98:33:
         e3:d9:6e:51:fa:ce:47:62:db:ad:28:06:9d:16:5b:46:e4:0c:
         ed:2f:f9:62:55:c7:54:58:f4:52:85:ec:c2:84:44:e9:d9:6c:
         11:6d:7d:b7:27:ed:b0:f8:28:c4:34:31:62:3c:8f:79:b0:d5:
         9f:fd:40:aa:d1:bc:7d:e6:87:34:d6:d9:8d:39:93:be:a1:95:
         65:5c:d4:79:79:d9:10:ad:0d:5d:4c:b7:79:2a:de:2c:7e:e6:
         30:b2:ff:10:dd:65:b7:4a:9a:3d:a5:15:cc:4c:9a:81:a1:d6:
         e5:c7:6d:8d:ac:b2:5d:e8:03:04:ac:93:57:6f:3d:9b:5e:1b:
         c2:3b:66:6c:e1:13:83:b9:e3:ac:c4:ea:e7:ec:42:7c:30:4c:
         87:eb:3d:be:24:09:a7:02:07:e6:c7:24:96:3d:cd:64:a7:cb:
         93:63:39:d6:dd:31:c2:08:c2:fe:18:91:36:47:a9:68:a4:a4:
         5b:8c:fe:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:26 2026 by rpki-client