Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
File:                     BYl-c1406PZYdVSprzc0CCziidk.mft (raw, json)
Hash identifier:          Inms35iHJihrSgmiaITVl5MLXiZo/9ClEifME6m7c1Y=
Subject key identifier:   F7:8E:E9:E4:1D:91:5E:2E:55:68:34:58:F8:08:32:B0:BB:B7:22:31
Authority key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
Certificate issuer:       /CN=A91389E7/serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Certificate serial:       B9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
Manifest number:          B6
Signing time:             Mon 01 Jun 2026 07:51:44 +0000
Manifest this update:     Mon 01 Jun 2026 07:51:44 +0000
Manifest next update:     Mon 08 Jun 2026 07:51:44 +0000
Files and hashes:         1: BYl-c1406PZYdVSprzc0CCziidk.crl (hash: 3IkFtNqMzoYD4q17NC1qVe7ozgf2ampYkvh+3GteXBU=)
                          2: 2C3D8AAA50B511F09288303CC4F9AE02.roa (hash: 6W/VukXB5c5TI5sHg/exLjmPP5EzgCxNCDZkTAkJ9NI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
                          rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
        Validity
            Not Before: Jun  1 07:51:44 2026 GMT
            Not After : Jun  8 07:51:44 2026 GMT
        Subject: CN=6a1d3a10-4e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2d:8a:d4:39:4d:2e:90:13:cc:e7:25:59:8e:
                    37:80:9d:42:fd:5f:15:90:f6:b0:fc:d1:40:2d:5a:
                    96:84:86:d7:8d:91:bf:e3:21:0b:39:90:0e:f9:97:
                    8c:a9:12:d7:da:d2:1c:f3:28:1b:75:2b:15:af:8a:
                    ea:ec:37:a8:33:29:69:d6:3f:f4:10:e4:25:42:39:
                    ed:a1:1d:39:86:56:cb:f6:17:41:73:94:bf:e5:24:
                    b1:4d:4b:26:13:c0:e9:76:49:7a:4f:60:59:0e:e4:
                    ca:0e:50:9f:64:84:d0:77:e1:78:ec:78:ab:3a:4c:
                    ae:c5:da:78:2c:97:54:1a:97:ba:47:33:d2:c7:e1:
                    15:7b:80:1e:e0:b0:5b:01:53:e7:77:38:36:ac:f2:
                    d1:af:c5:d6:77:d1:6b:3b:ad:21:78:1c:31:6c:41:
                    ce:d3:7f:0e:71:a2:f9:aa:44:b3:4e:07:d2:39:30:
                    86:26:99:d0:1b:bd:c9:8e:de:98:df:ed:d9:a9:b9:
                    9b:fd:bb:64:56:05:82:9f:30:59:10:d6:d1:8f:5c:
                    85:4a:44:07:04:69:fd:16:1c:3f:1b:4a:03:84:ba:
                    79:c8:0a:61:6a:c1:fe:91:48:67:a6:6d:01:d5:09:
                    26:20:0b:c2:f7:b7:6f:c9:12:ff:42:59:15:91:27:
                    d0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8E:E9:E4:1D:91:5E:2E:55:68:34:58:F8:08:32:B0:BB:B7:22:31
            X509v3 Authority Key Identifier:
                keyid:05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ba:b0:ca:57:ae:dc:d4:94:5f:f2:24:d3:94:2d:37:ab:0a:
         bf:b4:a2:e7:ed:cf:83:5e:3b:1f:0b:68:aa:48:cc:9d:06:41:
         8d:b3:a2:ad:04:66:a7:c1:84:f4:ab:26:e3:34:bd:09:3b:80:
         2f:e6:7c:5f:e6:16:44:cf:42:f4:d2:72:d3:07:f1:11:70:3a:
         97:22:ea:3f:06:b4:5c:49:b0:dd:7e:78:6e:b5:1d:41:50:7e:
         74:6f:77:8d:03:29:82:2d:28:48:8c:de:ba:4e:80:ce:09:78:
         c9:52:15:a4:d0:ab:20:77:96:84:94:0b:1d:19:1a:8b:dc:c7:
         34:37:ec:bc:44:95:7b:67:9b:a5:f9:8f:79:04:6d:63:dd:ae:
         85:9e:b7:64:4d:b3:7d:4d:0f:98:a1:ab:9e:d3:20:a6:bc:dc:
         59:c2:41:ad:9f:46:2e:43:d9:cd:18:32:d3:2f:48:49:52:f7:
         2a:d8:eb:7e:b1:03:81:c7:68:7f:a4:04:7c:4e:83:f7:b9:d9:
         d8:5a:df:21:d1:d8:61:3c:2c:5f:27:cf:2f:07:8b:4f:d7:7e:
         2d:ab:b5:41:07:17:5a:e4:42:a1:88:9b:36:56:75:1c:47:8b:
         20:22:f1:66:a2:3a:de:25:3b:b4:c6:f7:29:ae:7c:2a:c8:4c:
         da:ad:f4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:44 2026 by rpki-client