Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft
File:                     1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft (raw, json)
Hash identifier:          jVcPKc8s4TZeB8qNPx0tO05/qDGmgtjz2pNyIQqMvrA=
Subject key identifier:   64:04:F0:57:87:35:C9:25:9C:15:34:74:D1:53:6D:45:61:B5:AB:86
Authority key identifier: D6:A6:02:93:4A:CB:E4:14:B3:49:A0:15:69:EB:B6:66:1E:54:A2:BC
Certificate issuer:       /CN=A9171996/serialNumber=D6A602934ACBE414B349A01569EBB6661E54A2BC
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft
Manifest number:          6F
Signing time:             Thu 21 May 2026 07:56:25 +0000
Manifest this update:     Thu 21 May 2026 07:56:25 +0000
Manifest next update:     Thu 28 May 2026 07:56:25 +0000
Files and hashes:         1: 1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl (hash: 3TVR3IxSm5gqrCjhcCFbT8pBaWbgklm/pt2yq89utO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl
                          rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171996, serialNumber=D6A602934ACBE414B349A01569EBB6661E54A2BC
        Validity
            Not Before: May 21 07:56:25 2026 GMT
            Not After : May 28 07:56:25 2026 GMT
        Subject: CN=6a0ebaa9-f4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:d6:64:06:3b:8e:94:47:f7:3a:20:64:78:
                    8a:36:d4:c7:ac:18:26:85:94:ac:c5:af:0e:87:99:
                    2f:65:68:2b:38:47:01:36:1b:77:46:e0:3c:c2:81:
                    9c:21:fb:eb:a5:c3:99:a9:47:4a:af:78:7e:17:6f:
                    e9:e6:0b:64:6e:2f:b1:a1:f3:e3:29:8e:f0:bc:8d:
                    5f:6d:c2:72:e0:25:69:04:f3:ac:ca:12:d0:80:dc:
                    3f:f1:74:ed:58:55:26:9f:b1:e9:75:e5:99:a4:1c:
                    c9:44:bb:11:a7:3d:e5:d8:cb:6b:5f:0a:d6:9f:e2:
                    8e:46:53:43:6e:44:f5:1d:fc:3f:a1:34:6d:0c:ca:
                    a5:33:ce:2a:d9:57:6a:51:cd:fe:ea:ab:1b:c0:e5:
                    f2:44:f3:c2:a2:82:eb:fc:1a:1a:10:02:0f:4d:8b:
                    d7:3c:a5:fc:06:32:24:a6:b1:4c:79:61:27:20:0c:
                    2f:63:ec:b1:29:c1:65:b1:73:d1:9c:47:8b:f8:7d:
                    ac:ca:cd:a5:e9:d3:33:69:d4:89:45:51:ae:70:c2:
                    d1:8f:3c:ef:c0:c3:28:e4:20:00:64:7e:af:81:d0:
                    e0:9b:ba:d0:6c:fc:de:aa:15:31:71:99:c2:b5:99:
                    6b:fb:d5:d6:84:b9:d4:f2:85:71:d6:00:c9:e7:c5:
                    41:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:04:F0:57:87:35:C9:25:9C:15:34:74:D1:53:6D:45:61:B5:AB:86
            X509v3 Authority Key Identifier:
                keyid:D6:A6:02:93:4A:CB:E4:14:B3:49:A0:15:69:EB:B6:66:1E:54:A2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:47:6b:a3:8d:d6:5f:b7:52:e0:2f:1b:a7:76:2c:c4:f9:76:
         3f:d9:84:3c:8f:02:1f:a7:cc:bd:23:ba:04:f7:22:0f:bc:e8:
         43:d4:43:b9:8f:60:46:46:94:a8:60:79:e2:a3:11:cf:35:72:
         8a:24:10:84:c2:2d:b3:e2:84:28:6b:8e:74:ff:c2:6d:0b:a0:
         48:8d:ca:81:44:f2:76:ca:27:66:a0:19:41:e7:ab:cc:2f:b0:
         d0:52:86:a2:f2:24:36:7f:33:a1:45:fa:ae:99:2e:aa:cb:e2:
         c2:99:f1:1b:fb:68:8c:be:05:0f:1e:97:f2:7f:9d:bc:94:ae:
         95:0f:e6:65:5a:f4:22:5f:f7:06:ba:cf:ae:be:5f:f0:00:ab:
         88:e9:51:41:08:94:61:d1:b4:18:5f:dd:f7:9c:39:d2:8f:06:
         ad:ad:4b:ab:ed:93:7b:bb:d8:97:71:b7:7c:ae:fd:9a:15:44:
         c2:a3:a0:bd:b9:de:3f:62:ac:db:bc:83:ff:92:0b:d6:51:3f:
         90:c0:30:3c:7a:2d:aa:59:f8:5d:ed:57:8d:18:bc:54:8c:5d:
         38:19:ec:99:46:4d:28:57:98:02:29:a5:5e:c7:17:1d:4d:17:
         da:5b:41:9e:c7:2e:b5:32:75:96:29:cf:bf:e5:6c:65:62:7f:
         0f:e2:26:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:18:05 2026 by rpki-client