Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
File:                     Y8QELC5YMug5UaBUZeiB1qfd0CI.mft (raw, json)
Hash identifier:          q7OhJgrMsYkykXzoZew4IDKAG2YT8MOno9EHFR5eXTc=
Subject key identifier:   3B:4C:3F:18:39:27:FD:66:3F:0A:34:37:55:F3:61:2F:F6:E4:40:DB
Authority key identifier: 63:C4:04:2C:2E:58:32:E8:39:51:A0:54:65:E8:81:D6:A7:DD:D0:22
Certificate issuer:       /CN=A9146039/serialNumber=63C4042C2E5832E83951A05465E881D6A7DDD022
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
Manifest number:          36
Signing time:             Tue 23 Jun 2026 08:51:51 +0000
Manifest this update:     Tue 23 Jun 2026 08:51:51 +0000
Manifest next update:     Tue 30 Jun 2026 08:51:51 +0000
Files and hashes:         1: Y8QELC5YMug5UaBUZeiB1qfd0CI.crl (hash: vUUNhSGyxsKEkctnoo9F9YC9lldtoyGdd0Ez4rHGuKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.crl
                          rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 08:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146039, serialNumber=63C4042C2E5832E83951A05465E881D6A7DDD022
        Validity
            Not Before: Jun 23 08:51:51 2026 GMT
            Not After : Jun 30 08:51:51 2026 GMT
        Subject: CN=6a3a4927-adc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:ff:5a:ab:cc:13:b7:18:dc:60:63:09:f8:
                    bf:d5:6b:2d:16:73:d8:ac:b7:a8:62:23:14:c7:66:
                    2b:0f:cd:5b:70:f4:85:b7:30:19:31:2e:2c:50:dc:
                    45:ab:09:f6:10:7a:ea:19:b2:58:80:6b:64:73:fd:
                    37:5b:3e:6b:11:2f:0f:16:c0:4e:b9:cc:2e:39:c7:
                    c7:37:d4:ac:4e:44:e3:20:bf:d5:64:78:ae:9e:53:
                    df:84:15:59:63:05:1d:71:d7:3a:a8:fd:2d:15:8e:
                    ad:44:29:56:44:37:82:7e:36:39:32:f3:57:42:61:
                    e0:78:82:9b:b4:37:c1:85:fc:73:64:cd:39:ae:bc:
                    1b:50:19:71:a3:e2:74:a9:bf:ec:ff:57:a4:be:e2:
                    0d:bb:7c:47:61:66:70:87:0b:dc:8a:2a:1b:ec:90:
                    d0:28:1a:af:19:b8:b8:38:7f:af:41:b1:7c:8d:32:
                    34:ab:26:53:23:93:66:db:c6:2e:4f:a6:4c:c0:fd:
                    86:32:98:de:0b:36:eb:58:95:15:9e:ec:ad:8f:00:
                    97:9f:37:1e:9e:da:a6:d2:d0:f7:33:da:19:b9:3f:
                    55:52:27:59:7d:5d:79:37:28:89:55:7e:d3:78:1d:
                    4d:0c:ce:3b:36:24:69:02:13:c1:81:2e:8b:65:af:
                    3c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4C:3F:18:39:27:FD:66:3F:0A:34:37:55:F3:61:2F:F6:E4:40:DB
            X509v3 Authority Key Identifier:
                keyid:63:C4:04:2C:2E:58:32:E8:39:51:A0:54:65:E8:81:D6:A7:DD:D0:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:dc:84:e6:78:51:73:5a:cf:2d:2a:cb:ac:42:47:0d:18:3e:
         6f:9e:30:d4:f0:c4:33:c4:60:8a:dd:7d:ed:3b:72:35:3b:5b:
         7e:80:2a:9d:92:07:14:09:ec:d2:1d:16:a1:f4:b2:cd:b5:bc:
         d4:a4:b7:e6:16:5f:b0:49:74:7b:3e:37:12:c0:85:17:bc:93:
         97:6b:11:f9:80:cf:09:94:61:40:8d:21:4f:7d:bb:ca:1e:b6:
         02:02:a6:52:81:b8:2a:5e:46:7c:6d:b4:07:68:9f:f9:95:be:
         df:29:ca:23:eb:7f:6f:3d:ce:a7:1d:1f:7a:50:69:3a:be:f7:
         b5:aa:fc:28:8f:1c:f5:48:32:81:1f:df:ac:5f:62:68:e9:8d:
         69:84:96:b5:0c:26:1d:f0:21:c9:16:d0:97:dc:09:0d:f7:2f:
         4f:75:16:92:d1:65:ee:19:03:da:14:88:b0:05:10:63:98:56:
         bb:7d:9f:dd:a5:e8:5d:20:e9:76:c5:dc:98:38:49:cc:4b:a1:
         32:39:66:a2:90:07:ef:52:b1:7c:a7:3c:d9:1f:b4:d3:c5:b8:
         24:46:7c:b7:bb:cc:46:fe:56:e1:44:7e:21:4a:ee:d7:36:5a:
         be:f5:f4:31:2e:40:71:c4:0f:51:8e:22:4b:f3:df:e2:46:d1:
         88:c5:e3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:50 2026 by rpki-client