Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
File:                     ysouRCIiw-2H53WblewRGMOLhbY.mft (raw, json)
Hash identifier:          LGbwgUASN8m/6eE3gmQmRBO6xmjzcB+hvSDCllToGhM=
Subject key identifier:   83:70:EE:9B:C4:49:01:E1:B9:D0:85:11:FA:09:0B:0A:A6:C7:54:4A
Authority key identifier: CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6
Certificate issuer:       /CN=A91E9A44/serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
Manifest number:          70
Signing time:             Sat 13 Jun 2026 07:55:00 +0000
Manifest this update:     Sat 13 Jun 2026 07:55:00 +0000
Manifest next update:     Sat 20 Jun 2026 07:55:00 +0000
Files and hashes:         1: ysouRCIiw-2H53WblewRGMOLhbY.crl (hash: Rpg1kDue3ue74IrFgePHy2QiVjFLhOPa3hSa1cOdSo0=)
                          2: 769D5C68C09711F08165E157C4F9AE02.roa (hash: 3tYLBRUzTfxYAnjVbgvjgG4344sWcV2hWfRHWFTWJRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl
                          rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9A44, serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
        Validity
            Not Before: Jun 13 07:55:00 2026 GMT
            Not After : Jun 20 07:55:00 2026 GMT
        Subject: CN=6a2d0cd4-961e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:82:4d:55:b6:c9:c7:3c:75:d0:bb:56:29:81:
                    50:a4:e2:45:11:97:4c:25:1a:9c:ee:07:c2:61:b2:
                    e2:57:04:b1:46:08:43:1a:a5:f1:80:9d:8a:88:c8:
                    a0:23:ec:18:61:a0:95:fd:18:fa:f8:ac:79:e4:01:
                    5f:87:75:43:6c:fd:13:34:5f:d2:1b:c3:88:8c:96:
                    6b:56:65:4c:9f:34:c9:c2:e7:25:cc:28:6b:39:40:
                    a9:b2:82:01:8a:c7:fa:cf:95:2b:86:64:81:66:53:
                    8f:82:2d:d2:ff:94:85:67:16:65:99:f3:d9:17:7e:
                    20:08:c2:7f:3e:c3:2c:9f:43:e3:e6:57:83:c2:33:
                    34:39:a8:c3:ac:2a:aa:26:e8:f9:85:6a:c8:09:a7:
                    f6:0d:1f:83:1b:7c:bf:9b:92:f4:7d:34:a2:86:5e:
                    b5:e7:70:e0:c0:3c:b5:14:83:2f:68:b7:94:92:6a:
                    f0:74:09:fb:68:cc:88:ce:67:40:56:23:ee:35:ee:
                    12:0a:cd:98:e8:99:9e:48:d1:fa:8e:34:1d:4d:fe:
                    be:fb:a7:ed:21:37:c7:40:f5:9a:5a:89:e9:45:ff:
                    f5:b5:d5:c1:ad:6a:61:76:56:2e:8d:d7:36:87:f7:
                    ab:f9:2b:65:94:0f:93:64:4e:e1:7c:ee:4f:ba:48:
                    87:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:70:EE:9B:C4:49:01:E1:B9:D0:85:11:FA:09:0B:0A:A6:C7:54:4A
            X509v3 Authority Key Identifier:
                keyid:CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:15:2e:6f:50:00:01:37:82:3d:74:1b:b2:cd:db:b7:d7:be:
         29:c5:eb:b9:56:3e:9b:3b:3f:41:10:b7:3b:a0:6d:f9:8e:7d:
         aa:07:1f:01:46:31:fe:f4:ca:e8:46:dd:af:f3:9f:9a:06:e9:
         3c:3c:29:62:4b:9c:67:0b:b3:c1:96:dd:1f:af:14:73:70:f5:
         52:0b:8a:7d:1e:c6:45:db:d0:d2:95:4f:5f:2d:18:ff:ae:1c:
         4c:db:20:20:42:ce:e1:c0:4e:71:c8:e2:1c:2b:a8:24:63:47:
         87:30:85:dd:60:4a:66:52:6a:ab:65:33:11:0c:f1:4f:3f:77:
         59:11:6c:c8:60:42:93:7a:2d:3a:01:3b:48:40:bf:2b:38:16:
         f9:f0:74:71:f5:7f:40:1e:08:17:30:bf:9d:59:44:b5:ca:33:
         ae:ad:8d:7b:94:18:63:73:46:af:20:82:39:16:84:9c:d8:f4:
         3b:79:ee:08:a5:92:e4:e4:b4:6f:a8:d1:39:54:41:c5:58:69:
         43:5f:43:ad:84:cf:29:f2:16:c7:38:c9:e2:4a:43:68:bd:a9:
         5a:7b:3a:0a:78:6f:c3:18:d1:dc:93:0a:5b:67:ea:da:6f:70:
         9d:ff:98:34:bb:b9:82:a4:2d:3f:34:d6:b5:64:57:cf:4a:fb:
         a6:0e:a0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:48:20 2026 by rpki-client