Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
File:                     RYBbVYDVFRl9GmFa1myLnUhU9eo.mft (raw, json)
Hash identifier:          LiL0aDaMs3v6ufuGwduzibViPgBzPC0TOPwF3HUSbas=
Subject key identifier:   DD:F8:CE:01:7B:8E:25:5B:EF:75:A7:4C:51:7D:5C:59:06:75:6E:81
Authority key identifier: 45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA
Certificate issuer:       /CN=A91589E7/serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
Certificate serial:       188A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
Manifest number:          187F
Signing time:             Sat 04 Apr 2026 16:24:19 +0000
Manifest this update:     Sat 04 Apr 2026 16:24:19 +0000
Manifest next update:     Sat 11 Apr 2026 16:24:19 +0000
Files and hashes:         1: RYBbVYDVFRl9GmFa1myLnUhU9eo.crl (hash: r4zVGtw1JvP97zLtlM40/1+VsMplQkuKJbABaNGHWKg=)
                          2: 94A1F97A369711EA866E381CC4F9AE02.roa (hash: 6HQUJT9HfaQ0kHLipfm5EZcRoS4c3RMqyseCSnA5uo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl
                          rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6282 (0x188a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91589E7, serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
        Validity
            Not Before: Apr  4 16:24:19 2026 GMT
            Not After : Apr 11 16:24:19 2026 GMT
        Subject: CN=69d13b33-e6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1c:b4:fe:e2:b6:10:bf:05:70:52:bc:4a:7c:
                    bc:73:bf:83:a8:00:5b:f1:57:d2:da:95:86:27:de:
                    bb:15:4e:93:5e:38:f1:40:f8:43:b8:6c:3b:d6:c6:
                    17:a2:1d:0e:2c:ec:d1:ec:ca:f4:d7:83:c8:9e:c3:
                    06:46:48:f4:54:b8:ec:8e:f3:e3:c9:4f:23:31:66:
                    60:e4:9d:eb:f5:03:60:a1:1e:f8:31:b5:25:01:6d:
                    30:ea:00:9a:a4:a5:90:50:ed:31:80:c3:4c:23:8a:
                    1a:a3:57:8d:f9:14:7d:2c:4d:31:e0:c9:93:8e:df:
                    3e:02:2c:e3:70:2f:49:04:3f:11:c8:c7:ee:f8:81:
                    33:a2:ad:d7:b6:27:61:42:47:be:5f:49:dd:38:52:
                    65:3b:a5:11:cd:a2:dc:44:cd:70:01:dc:47:2e:0f:
                    21:36:4b:31:f0:e8:45:72:ad:90:c8:71:1b:29:e9:
                    99:55:26:fa:a1:1e:d8:cc:c8:83:ad:c9:5a:b2:c6:
                    32:d5:e5:3d:15:dd:5c:5e:3f:cb:d7:e4:b0:12:ab:
                    a3:29:83:67:cd:7d:1c:b7:e5:7d:83:42:5e:e0:ef:
                    37:f1:89:bd:98:d5:32:19:ef:bd:b1:cf:24:aa:a8:
                    ae:a8:7f:26:6d:1c:1d:4b:be:35:6f:f9:51:36:c6:
                    c7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F8:CE:01:7B:8E:25:5B:EF:75:A7:4C:51:7D:5C:59:06:75:6E:81
            X509v3 Authority Key Identifier:
                keyid:45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:17:3b:7a:05:e8:63:e4:28:dd:e1:7d:92:61:e0:4d:c3:ca:
         36:f7:66:1c:ca:63:c2:40:5d:b0:6b:48:98:8c:6a:b8:f7:12:
         4d:14:d9:f7:00:d6:d5:90:91:8e:b4:f0:80:77:2e:ea:c9:da:
         c1:e4:b8:0c:df:75:66:4f:bc:2c:5c:e3:57:9a:0f:c4:0f:45:
         04:b9:18:37:31:fc:6a:cc:69:0a:fe:e3:1c:31:11:0f:06:5b:
         87:77:a5:53:c2:ca:68:56:b7:fc:ab:bf:16:55:5b:87:63:be:
         2a:a6:26:42:1a:68:b5:09:0f:e9:5a:d5:28:0b:81:59:41:f4:
         1d:65:9c:d7:b6:a6:e3:6a:c8:67:5e:27:ba:25:b7:43:97:07:
         59:89:e9:b3:05:8d:4b:46:55:eb:6a:ac:36:20:b9:50:09:e4:
         04:84:4b:5a:80:8d:77:29:97:ee:07:2e:f3:a5:78:90:18:21:
         6e:6b:f1:76:91:ef:09:78:74:ca:d9:75:5c:ff:2b:2e:ca:4d:
         3e:85:e7:e2:cb:63:e3:62:86:e3:e5:d4:eb:75:58:8a:91:cd:
         24:ff:e7:2d:52:5a:92:d2:28:19:f2:35:21:e7:27:d9:1b:0e:
         db:e3:f9:f4:59:c1:e6:b2:1e:d8:ef:3f:48:00:b1:71:8c:0e:
         6a:ed:cc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:38:18 2026 by rpki-client