Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
File:                     cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json)
Hash identifier:          DWWwlZZoaUa1dkTizvj+2ZE6VjXrLtLrAOm9emX59oA=
Subject key identifier:   C7:6B:D0:0F:4D:A8:1D:23:99:B4:3C:DD:F4:34:3F:BB:6D:6E:B1:DA
Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7
Certificate issuer:       /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7
Certificate serial:       0EAB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
Manifest number:          0EAA
Signing time:             Sat 04 Apr 2026 17:34:04 +0000
Manifest this update:     Sat 04 Apr 2026 17:34:04 +0000
Manifest next update:     Sat 11 Apr 2026 17:34:04 +0000
Files and hashes:         1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: EIMC4Vq+QaeffWfvyxyfMwhkWQDKUtjhqcGIux2Rko4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl
                          rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3755 (0xeab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917174E, serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7
        Validity
            Not Before: Apr  4 17:34:04 2026 GMT
            Not After : Apr 11 17:34:04 2026 GMT
        Subject: CN=69d14b8c-7e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8e:4c:88:07:73:36:38:81:f9:5d:f3:a5:50:
                    ac:a1:6d:23:a5:4b:c3:7a:40:96:04:f6:56:3a:bd:
                    60:ed:9d:8b:44:74:a2:79:e2:d3:6e:a5:0f:97:f9:
                    17:c5:ef:3b:d6:2a:fc:a1:2f:21:d9:7d:ca:c8:a7:
                    ef:59:65:56:f7:0a:21:e4:71:e9:fc:50:62:10:9c:
                    44:a0:f1:89:98:22:74:0f:77:d1:32:c3:cf:d9:6a:
                    de:d6:f6:a7:9f:be:40:4e:b8:91:73:b4:24:49:c7:
                    7b:01:68:2a:be:48:2f:64:bd:9d:8f:dc:0c:b2:0d:
                    1a:ed:c6:65:62:5d:55:ff:92:d7:5b:c7:d2:54:78:
                    7d:fb:5a:41:de:ac:a8:b0:1a:14:d1:e3:8d:f7:92:
                    de:1b:1d:45:25:cb:bd:7d:d6:05:46:ca:e3:47:e6:
                    0f:e9:29:3c:dc:ad:5b:a2:3c:17:aa:99:7a:0d:90:
                    93:89:b5:dc:c1:d3:e7:d6:f4:14:b5:ce:2d:bb:24:
                    c0:0d:15:21:2d:f4:49:ab:82:e3:01:52:07:99:f9:
                    77:5e:64:ce:ac:8c:44:e4:a5:a8:79:b3:b5:69:ae:
                    03:f8:ac:81:0d:de:f2:f6:ed:82:05:21:63:db:dc:
                    89:23:94:4e:d0:f4:53:b0:3a:68:20:8b:d0:3a:c3:
                    1f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6B:D0:0F:4D:A8:1D:23:99:B4:3C:DD:F4:34:3F:BB:6D:6E:B1:DA
            X509v3 Authority Key Identifier:
                keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:5d:51:07:26:a7:ea:0f:58:73:51:c7:6a:e4:4f:27:56:7b:
         0b:63:3c:7f:89:fa:93:09:e4:3f:66:f7:1c:27:55:68:b6:fc:
         70:92:17:d9:67:78:9a:60:57:51:5b:1a:78:25:36:d4:34:6d:
         9e:27:5f:2f:9e:cd:34:79:6e:81:cd:7b:9b:f2:0b:82:dd:3e:
         61:e1:8f:15:3e:cd:d9:f6:24:4f:a2:4e:41:ca:bb:08:4c:56:
         42:cd:bd:1e:f9:fe:e8:db:f0:c7:a8:ee:e5:80:db:9f:23:6a:
         f1:88:fd:20:e9:56:e6:d7:02:a3:9b:f5:df:24:22:0d:2c:b7:
         ca:79:5a:12:f8:7d:e4:7a:a4:fd:2b:05:eb:0f:56:90:af:66:
         ec:47:c2:17:74:16:d0:2f:75:eb:a7:af:6b:22:80:8d:da:44:
         34:d6:8b:9f:6f:45:82:04:1d:7c:c7:d4:ff:6b:57:32:75:7c:
         a5:c9:72:3b:28:ee:96:45:04:32:a3:9f:2c:6b:b3:f1:0e:95:
         89:a4:43:9e:fa:0d:99:94:0c:93:d5:f4:f5:cf:18:d8:f1:33:
         14:94:a2:1e:5c:01:ee:0a:3e:91:3a:e2:ad:19:ca:57:e4:a7:
         b5:2d:a6:ff:bc:a9:1b:34:22:20:62:d1:1f:be:21:cc:57:8c:
         2e:a7:00:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:39 2026 by rpki-client