Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/Yyev4dCLNy_0_foNxQDFqvc5mTM.mft
File:                     Yyev4dCLNy_0_foNxQDFqvc5mTM.mft (raw, json)
Hash identifier:          vmq5L3y+mZpWmi5IrEy0o/kiT5pri4dctnW4/YqJWbI=
Subject key identifier:   07:CA:67:82:A9:60:0F:D2:39:04:C6:45:3C:EC:E8:86:C9:66:A1:6D
Authority key identifier: 63:27:AF:E1:D0:8B:37:2F:F4:FD:FA:0D:C5:00:C5:AA:F7:39:99:33
Certificate issuer:       /CN=A91F89DB/serialNumber=6327AFE1D08B372FF4FDFA0DC500C5AAF7399933
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yyev4dCLNy_0_foNxQDFqvc5mTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/Yyev4dCLNy_0_foNxQDFqvc5mTM.mft
Manifest number:          05
Signing time:             Mon 15 Jun 2026 09:18:21 +0000
Manifest this update:     Mon 15 Jun 2026 09:18:20 +0000
Manifest next update:     Mon 22 Jun 2026 09:18:20 +0000
Files and hashes:         1: Yyev4dCLNy_0_foNxQDFqvc5mTM.crl (hash: VTL+x3cgs6lWQdPH5kgS3yICoxlYZJjTxGe8OqPTvV4=)
                          2: 0BD94EE2639811F1AA3C489A6F47A888.roa (hash: 356lmc2RqB5Sk367m6XImMAHTq0pPLU7qu0hjEZtvwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/Yyev4dCLNy_0_foNxQDFqvc5mTM.crl
                          rsync://rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/Yyev4dCLNy_0_foNxQDFqvc5mTM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yyev4dCLNy_0_foNxQDFqvc5mTM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89DB, serialNumber=6327AFE1D08B372FF4FDFA0DC500C5AAF7399933
        Validity
            Not Before: Jun 15 09:18:20 2026 GMT
            Not After : Jun 22 09:18:20 2026 GMT
        Subject: CN=6a2fc35c-1e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3b:d7:ae:b5:5b:eb:97:eb:34:e5:0e:90:2a:
                    f1:0a:49:54:eb:8f:2c:31:bc:09:11:fb:16:a3:86:
                    14:2d:86:9f:94:db:64:8b:1a:6c:bf:72:d9:8c:2d:
                    6b:61:dc:3b:65:48:79:8d:ad:fa:5c:10:0c:09:d5:
                    fe:82:83:e7:02:c1:ec:d1:f8:38:2d:0a:87:ad:b5:
                    b3:a0:7c:66:79:61:44:03:42:8a:aa:16:e2:7c:c0:
                    8e:c2:4a:46:aa:97:53:06:b8:88:bd:2e:29:8a:a1:
                    99:23:a7:8f:d7:d2:2d:62:08:3c:1a:32:8e:e5:70:
                    cb:23:19:98:c5:57:de:ff:54:6b:52:78:c1:7b:89:
                    ea:6e:8b:21:57:eb:a0:71:58:cd:24:49:a4:da:51:
                    da:5f:69:c7:40:65:73:e9:63:4e:c2:81:ea:a3:df:
                    3f:fd:c8:c9:97:29:59:9d:81:86:e8:32:99:38:ef:
                    d0:9d:da:3c:3d:19:c3:b2:82:1c:d2:9c:32:81:df:
                    6a:53:6b:8b:cb:6e:c6:50:da:29:69:9c:05:18:7f:
                    1c:1b:79:7b:6a:9a:b1:6a:62:ba:05:12:81:e9:63:
                    f2:fa:9f:65:cb:46:b8:06:7d:67:0b:d3:a0:0f:54:
                    61:a5:4f:0c:56:83:ef:08:07:d9:94:fc:7b:3c:07:
                    a5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CA:67:82:A9:60:0F:D2:39:04:C6:45:3C:EC:E8:86:C9:66:A1:6D
            X509v3 Authority Key Identifier:
                keyid:63:27:AF:E1:D0:8B:37:2F:F4:FD:FA:0D:C5:00:C5:AA:F7:39:99:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/Yyev4dCLNy_0_foNxQDFqvc5mTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yyev4dCLNy_0_foNxQDFqvc5mTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/Yyev4dCLNy_0_foNxQDFqvc5mTM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:77:e5:3c:3d:32:35:97:d5:f6:1a:1a:2d:86:a4:18:2c:0f:
         ae:3d:05:13:c8:61:68:86:0f:c5:c3:09:32:69:48:d9:93:26:
         c3:fc:b7:eb:61:bc:c5:26:35:d9:b0:95:ae:b9:2a:0e:41:95:
         23:d4:e3:1a:9f:25:8e:e3:1a:6e:e1:17:89:34:80:89:a0:aa:
         ce:59:f5:51:21:93:8d:93:67:f8:9c:69:7a:2c:04:a1:da:eb:
         86:af:61:bb:06:3d:a5:3b:db:83:86:22:17:19:eb:17:41:30:
         91:b2:c2:a2:56:a2:41:8a:10:90:cf:e4:f1:da:01:56:7c:d8:
         dd:c9:ab:1e:9a:fa:d0:64:65:bb:2b:16:2b:dd:a8:21:51:84:
         be:dc:bf:82:70:25:b1:6f:40:63:cf:46:64:a2:69:e5:47:b7:
         81:eb:e2:b2:d5:12:49:c6:59:23:d9:4c:9e:0d:30:e3:aa:eb:
         ac:47:ee:a0:76:cb:5c:84:d0:57:ed:6a:13:30:ca:4f:09:54:
         51:10:eb:b3:88:16:27:23:58:c0:92:16:ba:c4:9f:e2:e6:74:
         b3:d8:3b:99:23:24:f1:b5:37:fb:98:22:ba:2b:ec:04:10:9d:
         8f:62:b3:47:82:4d:60:94:61:26:44:a9:1b:02:4e:db:a6:4a:
         8e:de:96:03
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
ODlEQjExMC8GA1UEBRMoNjMyN0FGRTFEMDhCMzcyRkY0RkRGQTBEQzUwMEM1QUFG
NzM5OTkzMzAeFw0yNjA2MTUwOTE4MjBaFw0yNjA2MjIwOTE4MjBaMBgxFjAUBgNV
BAMTDTZhMmZjMzVjLTFlNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjO9eutVvrl+s05Q6QKvEKSVTrjywxvAkR+xajhhQthp+U22SLGmy/ctmMLWth
3DtlSHmNrfpcEAwJ1f6Cg+cCwezR+DgtCoettbOgfGZ5YUQDQoqqFuJ8wI7CSkaq
l1MGuIi9LimKoZkjp4/X0i1iCDwaMo7lcMsjGZjFV97/VGtSeMF7iepuiyFX66Bx
WM0kSaTaUdpfacdAZXPpY07Cgeqj3z/9yMmXKVmdgYboMpk479Cd2jw9GcOyghzS
nDKB32pTa4vLbsZQ2ilpnAUYfxwbeXtqmrFqYroFEoHpY/L6n2XLRrgGfWcL06AP
VGGlTwxWg+8IB9mU/Hs8B6V7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUB8pngqlg
D9I5BMZFPOzohslmoW0wHwYDVR0jBBgwFoAUYyev4dCLNy/0/foNxQDFqvc5mTMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4OURCL0JBMTE4MTA2NjM5
NzExRjE5OEZBODE1ODZFNDdBODg4L1l5ZXY0ZENMTnlfMF9mb054UURGcXZjNW1U
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWXlldjRkQ0xOeV8wX2ZvTnhRREZxdmM1bVRNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4
OURCL0JBMTE4MTA2NjM5NzExRjE5OEZBODE1ODZFNDdBODg4L1l5ZXY0ZENMTnlf
MF9mb054UURGcXZjNW1UTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBrd+U8PTI1l9X2GhothqQYLA+uPQUTyGFohg/FwwkyaUjZkybD/LfrYbzFJjXZ
sJWuuSoOQZUj1OManyWO4xpu4ReJNICJoKrOWfVRIZONk2f4nGl6LASh2uuGr2G7
Bj2lO9uDhiIXGesXQTCRssKiVqJBihCQz+Tx2gFWfNjdyasemvrQZGW7KxYr3agh
UYS+3L+CcCWxb0Bjz0ZkomnlR7eB6+Ky1RJJxlkj2UyeDTDjquusR+6gdstchNBX
7WoTMMpPCVRREOuziBYnI1jAkha6xJ/i5nSz2DuZIyTxtTf7mCK6K+wEEJ2PYrNH
gk1glGEmRKkbAk7bpkqO3pYD
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:47:41 2026 by rpki-client