Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
File:                     Y06sGbStSypNQSgRX59VZ5TMdSM.mft (raw, json)
Hash identifier:          qvhXb2DnBJbCiDqXBCZER8FdSVNGUdni+iXaDyGVATE=
Subject key identifier:   2D:08:E1:F8:A6:13:14:D5:B2:49:90:50:EC:A9:35:6B:E4:55:8F:C1
Authority key identifier: 63:4E:AC:19:B4:AD:4B:2A:4D:41:28:11:5F:9F:55:67:94:CC:75:23
Certificate issuer:       /CN=A91647ED/serialNumber=634EAC19B4AD4B2A4D4128115F9F556794CC7523
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
Manifest number:          6C
Signing time:             Tue 23 Jun 2026 08:09:34 +0000
Manifest this update:     Tue 23 Jun 2026 08:09:34 +0000
Manifest next update:     Tue 30 Jun 2026 08:09:34 +0000
Files and hashes:         1: Y06sGbStSypNQSgRX59VZ5TMdSM.crl (hash: mMW3h8Bppitnj9cJ/Fv7yXEQxcMnV3QQy4NacHOX7cg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.crl
                          rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 08:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91647ED, serialNumber=634EAC19B4AD4B2A4D4128115F9F556794CC7523
        Validity
            Not Before: Jun 23 08:09:34 2026 GMT
            Not After : Jun 30 08:09:34 2026 GMT
        Subject: CN=6a3a3f3e-0618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4f:d3:87:85:25:6b:ce:16:4f:9b:fe:a7:a7:
                    a2:20:91:99:62:34:00:45:c8:5b:db:23:80:b8:6b:
                    30:ac:e8:71:e9:74:63:c6:75:f1:55:6f:c4:4a:88:
                    c8:c4:4e:fc:dc:db:54:df:50:a8:a4:31:80:81:d2:
                    64:50:7b:d6:3d:f5:8c:d8:a7:5b:95:1e:c9:e6:de:
                    42:d4:48:a6:ec:9e:78:65:af:fb:5a:1c:74:06:69:
                    28:b2:6a:64:c0:d0:d5:e4:6a:29:c4:5a:0e:f4:67:
                    16:d2:a8:4d:76:aa:61:5b:f5:fd:65:e5:ce:37:ca:
                    92:c4:83:be:1d:f1:ef:4b:72:22:96:35:f8:5c:c4:
                    c4:80:e0:08:a9:dd:b1:96:15:8a:76:00:48:7c:09:
                    e7:dc:b8:63:f8:7f:00:0b:60:e7:a1:c8:c9:f6:6c:
                    28:83:ee:83:86:45:b6:78:28:88:b7:38:9b:25:30:
                    6b:a9:76:ac:3b:6d:e3:db:82:31:2b:f7:5f:15:b2:
                    24:d1:64:ef:91:47:85:1e:b9:5b:6a:07:7d:a2:33:
                    2e:a2:12:0c:f7:a6:f6:37:9c:95:f6:64:ba:6a:97:
                    20:e7:8e:1f:4e:de:13:f0:e6:cb:17:99:4c:a6:92:
                    76:ae:cf:9d:ba:b8:da:7f:47:82:6e:b5:51:15:64:
                    f9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:08:E1:F8:A6:13:14:D5:B2:49:90:50:EC:A9:35:6B:E4:55:8F:C1
            X509v3 Authority Key Identifier:
                keyid:63:4E:AC:19:B4:AD:4B:2A:4D:41:28:11:5F:9F:55:67:94:CC:75:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1e:28:ad:3c:60:a8:e7:0f:96:e0:9a:64:67:4b:97:f7:51:
         ff:8e:24:7e:2f:7b:2b:b4:0a:c8:67:c6:d3:b2:a8:cd:1a:81:
         65:a9:27:3c:38:6c:44:00:a8:1e:05:3e:e6:4b:9f:88:be:22:
         3c:1b:65:ec:00:f3:b7:b4:9e:06:a3:ae:8a:69:57:68:6c:a9:
         08:d2:68:2b:d0:ee:2a:48:f9:2b:b6:81:86:87:63:df:e9:09:
         c1:95:17:f8:26:bd:44:a3:48:fd:ed:25:3e:a3:2f:ab:b3:5e:
         0c:1c:be:47:9e:69:26:80:6b:bf:97:c8:e4:08:a1:84:bd:93:
         e9:2e:45:d2:4c:64:a2:44:7b:70:81:43:a4:0e:83:4e:df:01:
         45:22:e5:7f:18:5a:d4:22:fa:ac:22:c8:2b:d0:50:c6:ed:b5:
         96:37:e0:9c:d2:3b:06:27:b9:a8:b8:58:cd:92:01:6e:af:eb:
         01:d6:da:62:a3:da:10:a0:ee:36:ab:ae:a4:69:36:a0:01:3b:
         5c:58:6f:00:37:89:fe:5f:df:ec:22:d2:a6:e6:a8:00:6c:5b:
         e1:76:31:85:cf:82:48:51:2c:80:d4:8b:bf:19:f0:fc:60:8a:
         fd:3f:66:96:a6:d5:6c:52:a6:5d:b4:49:10:72:43:0b:61:59:
         31:31:02:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:01 2026 by rpki-client