Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
File:                     yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json)
Hash identifier:          ytZmR5iEDcHkroeiWmQzXQl8TO+UhH9LRp0mNGTtcaU=
Subject key identifier:   59:D4:EC:CA:8C:C6:A1:06:58:A3:3E:AF:60:36:C8:4B:A7:6A:5D:30
Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67
Certificate issuer:       /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
Certificate serial:       3541
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
Manifest number:          3541
Signing time:             Wed 20 May 2026 14:56:38 +0000
Manifest this update:     Wed 20 May 2026 14:56:38 +0000
Manifest next update:     Wed 27 May 2026 14:56:38 +0000
Files and hashes:         1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: nzMq+rXJdrG1Zgy20Gs5ppamhdwXf+Jro6KzPVvx57w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl
                          rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 14:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13633 (0x3541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120968, serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
        Validity
            Not Before: May 20 14:56:38 2026 GMT
            Not After : May 27 14:56:38 2026 GMT
        Subject: CN=6a0dcba6-b6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0c:61:e7:60:d4:4f:20:ca:16:57:41:26:aa:
                    cb:d8:c1:76:18:e0:94:14:8a:7a:a7:89:c3:7c:f6:
                    74:39:1f:68:1e:9e:40:a1:72:47:e3:7e:5a:80:02:
                    9a:26:25:cc:29:50:8b:5f:d3:b8:27:c3:0f:1e:cb:
                    4c:44:2b:43:75:16:52:8c:9d:4b:a9:56:c4:77:c6:
                    cb:43:4f:fb:ea:b7:cb:88:7a:e3:b4:e6:fb:2f:12:
                    f1:60:47:e7:d2:3a:2e:60:a0:3e:e5:cc:74:99:c5:
                    0d:68:8b:7d:e1:fb:fb:a5:2d:8c:f0:b2:85:86:ee:
                    57:32:c1:bf:a4:9d:09:82:1b:69:85:c9:de:e1:09:
                    2f:c6:62:14:d2:82:06:c4:93:bb:14:b9:3c:b6:e2:
                    47:4e:f2:bf:48:8f:ef:b4:3b:2b:75:a5:d2:b9:9f:
                    2b:01:11:cf:67:b3:28:c7:f1:04:90:5c:ad:e7:83:
                    df:9a:ff:57:7e:87:0f:54:38:a7:68:41:a2:df:be:
                    13:91:09:2a:e1:26:09:e5:ef:9a:9b:a1:6e:a3:b8:
                    73:ff:f6:fe:dd:5f:e2:69:55:50:25:c7:95:0f:20:
                    60:35:94:db:ae:cb:3c:f5:86:49:60:10:e5:d1:e3:
                    63:30:af:cc:1b:45:63:7a:30:b0:db:de:d6:c4:d4:
                    10:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D4:EC:CA:8C:C6:A1:06:58:A3:3E:AF:60:36:C8:4B:A7:6A:5D:30
            X509v3 Authority Key Identifier:
                keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ae:57:dc:bf:61:24:34:a9:9a:dd:46:a7:75:36:92:bb:32:
         04:d1:2c:1b:a1:2f:09:81:53:e4:5a:e2:86:e8:17:92:99:21:
         06:af:4a:79:ba:bc:3b:66:44:5d:3c:33:7f:94:66:6a:6d:07:
         48:50:89:cc:34:10:80:1a:ed:c4:65:a2:f3:3a:62:ab:62:a7:
         89:fb:fd:6f:4b:93:93:05:a5:f7:71:e4:0d:a7:dd:84:0c:41:
         f1:ce:24:b7:3d:29:47:b5:95:e0:dc:cf:29:dd:c2:b2:78:86:
         2e:92:14:e6:45:3d:db:d7:d4:4c:3d:c6:81:02:e6:23:52:44:
         97:a4:65:8f:98:99:c4:41:5c:06:c1:b1:66:c7:50:68:f3:94:
         4b:8b:74:d9:da:51:ce:61:5d:01:b0:8b:82:dd:8a:8b:c0:91:
         40:00:84:fd:c9:ea:8b:30:f5:0a:ed:c8:4a:ab:16:a8:2e:8f:
         1c:68:df:e5:6a:fa:b2:4e:c0:6d:04:91:e3:d2:73:5e:5d:b8:
         30:c0:bb:3b:cf:1e:62:b0:84:8f:9b:6b:66:0f:12:9d:1f:81:
         0a:76:3c:a0:47:06:24:18:f1:60:cd:e1:49:6e:cc:b9:8f:81:
         61:64:3a:bb:ae:a7:af:ab:5b:36:91:ba:9d:d6:a9:b9:53:43:
         00:98:f4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:12 2026 by rpki-client