Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft
File:                     Y7ooHVb6T-blNbEl4W34AdEvgJk.mft (raw, json)
Hash identifier:          LSt+IesDLtZJ5BSESAYVFFSTKJgIXtjWsJ3NiRRzikE=
Subject key identifier:   E7:E0:BD:82:1D:0E:14:0E:87:E6:85:CC:CB:7D:B0:71:3E:B6:ED:E7
Authority key identifier: 63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99
Certificate issuer:       /CN=A91ECBD9/serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft
Manifest number:          0150
Signing time:             Sat 13 Jun 2026 05:08:47 +0000
Manifest this update:     Sat 13 Jun 2026 05:08:47 +0000
Manifest next update:     Sat 20 Jun 2026 05:08:47 +0000
Files and hashes:         1: Y7ooHVb6T-blNbEl4W34AdEvgJk.crl (hash: h8XvAXpyRVVpJDFdiKEHQCiW+VtCDqQ/GpsQnyvMiFY=)
                          2: 4E67247C681911EFA2640B43C4F9AE02.roa (hash: An9B7CLoNHGvXF2LPRgaQFUn7qwdjlLJ8zqshc1cw7U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl
                          rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:08:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECBD9, serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099
        Validity
            Not Before: Jun 13 05:08:47 2026 GMT
            Not After : Jun 20 05:08:47 2026 GMT
        Subject: CN=6a2ce5df-cd00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e3:0e:9e:4d:91:0f:36:8a:2b:91:75:f1:2c:
                    a6:60:36:82:12:90:b6:48:ba:7a:d8:22:c5:54:f8:
                    0a:b3:c6:52:cf:b2:65:6a:d1:79:19:13:ba:45:32:
                    e3:13:70:72:72:03:d5:25:19:68:65:f1:be:f2:d9:
                    12:fa:30:e6:ef:7c:2c:2a:21:e5:c8:cd:35:2c:f5:
                    d9:60:d9:a2:f6:b0:df:d6:b1:03:c0:5a:98:9e:9e:
                    f4:d0:47:1f:06:97:99:ff:63:7c:bb:df:39:00:f7:
                    a3:1d:a0:44:c2:30:c0:8c:3f:7e:d2:47:0b:03:cb:
                    2a:17:73:0f:db:89:18:b0:af:f1:28:a7:da:69:3f:
                    42:5e:f0:6d:3b:66:4e:b3:e6:ab:7b:cc:89:c4:0d:
                    7e:96:6f:27:6a:59:e0:bc:a5:3d:4f:6f:8b:0a:0f:
                    3a:2b:e1:6b:e4:bb:4e:d8:b3:6c:ec:a7:6d:eb:4f:
                    2e:1f:18:9a:73:6e:ac:b6:34:24:36:55:eb:18:89:
                    8f:f5:ae:f2:0d:46:05:fe:fb:33:0b:c1:7f:00:1b:
                    24:9a:3c:0a:a6:09:39:e4:9d:98:31:de:72:47:6a:
                    f2:03:db:99:77:55:cf:47:2d:43:13:28:e6:c2:50:
                    e0:53:41:cd:45:56:c0:09:08:d0:f6:8e:b9:a9:82:
                    9f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E0:BD:82:1D:0E:14:0E:87:E6:85:CC:CB:7D:B0:71:3E:B6:ED:E7
            X509v3 Authority Key Identifier:
                keyid:63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:dd:e3:e5:b0:61:13:66:69:22:90:3a:a3:55:fa:7f:d5:85:
         0d:70:1c:08:13:17:cb:7e:36:2e:35:28:0d:19:8d:c9:38:e4:
         a9:20:9c:00:83:03:1b:aa:fc:87:76:d9:7b:ba:f5:b5:e5:0f:
         7a:1b:b1:4f:34:03:b7:8c:a6:35:59:1c:f1:c6:2c:d1:d1:4c:
         ad:46:23:d7:a6:ce:25:bb:23:15:ff:b7:ff:c2:ad:b5:a7:3c:
         44:e4:10:9c:26:c4:a2:f4:4d:d3:fe:cd:1b:9e:9c:e0:4a:6d:
         a6:51:f4:af:a6:01:bf:8a:1c:9f:3a:ee:8c:8d:a6:9b:4b:83:
         86:e9:da:c8:f2:1f:78:b7:cb:4a:2c:12:a7:f2:f8:c1:0f:ce:
         ad:01:34:23:b3:d3:51:85:b1:04:f3:3b:3f:37:2c:56:d9:4a:
         ef:f2:bd:25:de:55:97:91:46:3c:ce:86:22:75:13:85:49:4c:
         1f:dd:ba:1c:ba:70:35:54:92:10:12:eb:1d:bf:af:c3:c8:11:
         e6:a3:9f:2b:99:04:8e:99:44:da:13:b2:51:9a:1b:66:0b:34:
         fd:c7:ed:8e:22:02:12:74:93:df:36:b4:da:95:0e:95:24:48:
         97:a1:d9:3e:ba:93:73:ea:6f:74:a4:e1:ca:b8:ef:2b:33:14:
         76:4e:68:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:25:21 2026 by rpki-client