Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
File:                     _YASv-mRKe-ci7ekYDIUQvbSZWI.mft (raw, json)
Hash identifier:          R/PzO+6hFg1Yuct/DnX1mdJHxXejz2+jy9i5NSbWBXE=
Subject key identifier:   EA:60:B8:AC:E8:88:7F:1F:49:67:58:48:6A:EE:08:E0:87:1D:C1:45
Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62
Certificate issuer:       /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
Manifest number:          013B
Signing time:             Mon 01 Jun 2026 06:09:46 +0000
Manifest this update:     Mon 01 Jun 2026 06:09:45 +0000
Manifest next update:     Mon 08 Jun 2026 06:09:45 +0000
Files and hashes:         1: _YASv-mRKe-ci7ekYDIUQvbSZWI.crl (hash: 2TSRC2/yD1na9kmnXojNAmK4/Am8jQMVcT0gziK3OdE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl
                          rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:09:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
        Validity
            Not Before: Jun  1 06:09:45 2026 GMT
            Not After : Jun  8 06:09:45 2026 GMT
        Subject: CN=6a1d222a-7f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e3:b8:f9:22:5a:e8:88:78:1f:c9:9c:fc:67:
                    fb:10:a2:55:a9:7a:d5:e8:5b:64:c5:62:6b:b8:e4:
                    01:73:c1:b5:b9:ef:35:16:2c:7f:4d:2f:00:93:0d:
                    dc:f4:fb:f0:ea:32:99:d5:fd:f3:03:62:10:64:f7:
                    7a:44:9d:75:82:b2:98:f0:57:98:95:e1:6d:ce:45:
                    80:94:e2:f9:c3:56:fe:3b:a2:9d:c0:5e:0d:1b:24:
                    5a:c4:99:e7:06:7b:8e:4a:9f:4f:33:aa:78:22:7f:
                    1b:db:93:74:ea:24:44:06:40:83:82:6f:05:f8:f9:
                    5a:9f:31:47:14:65:80:fc:d2:a6:67:68:12:2e:73:
                    c9:f4:33:99:85:1b:02:2a:2b:6d:d5:17:a8:a5:dd:
                    5f:8e:77:fb:d6:f7:07:a4:3b:fe:3f:23:08:77:e5:
                    4d:0a:c3:83:7e:52:d9:b2:ea:ef:8c:4b:71:5b:86:
                    39:75:ee:dd:1d:e2:e2:04:d0:27:d0:e9:3a:b3:5d:
                    2d:d4:a5:c6:36:49:72:15:62:51:c9:72:01:91:17:
                    ac:d1:64:e5:d8:b7:f5:02:ca:96:18:4c:b5:c3:c9:
                    96:58:53:b5:ed:3d:2d:7d:ed:5b:20:83:37:46:ee:
                    34:36:63:5a:38:2c:12:f5:ab:16:38:fc:14:94:e0:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:60:B8:AC:E8:88:7F:1F:49:67:58:48:6A:EE:08:E0:87:1D:C1:45
            X509v3 Authority Key Identifier:
                keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b9:b4:30:ce:e6:92:dc:00:21:93:80:23:da:15:a9:78:99:
         70:1b:6b:3c:19:5b:e9:f7:be:f9:db:ba:14:c6:1e:2b:ab:cf:
         62:ab:8d:2e:5c:de:c8:f7:e5:2f:3e:25:a1:a4:ed:30:e3:46:
         ef:13:93:99:92:a6:dd:f7:ce:bd:b9:37:4f:c9:06:06:ee:86:
         88:59:8b:cf:0b:6f:9f:c0:ac:59:b3:9f:61:2b:74:c4:b9:1c:
         fe:d8:40:a2:1f:e6:7e:7f:dc:46:ad:96:c0:49:76:e8:fe:db:
         8e:b3:ec:83:48:90:da:2d:22:d7:e9:f9:72:7e:b8:fb:8e:9b:
         dd:bd:8f:9a:38:e7:49:49:e0:5b:8d:06:50:d8:bf:07:28:31:
         01:0b:4e:2c:df:24:2f:53:e9:59:e9:71:38:fe:58:68:dc:80:
         c4:55:46:d1:75:95:e0:7b:51:1d:fa:aa:c8:59:c6:46:03:e4:
         e7:62:ee:84:52:d1:e2:4f:ac:9e:64:01:8c:31:18:86:62:2d:
         1f:16:1b:2c:17:3b:21:55:30:55:dc:7b:7b:23:ef:9a:2e:eb:
         81:e6:52:8c:f3:1f:e4:00:37:cc:fe:7a:ee:74:d7:e2:c7:3e:
         2e:b0:0c:3b:ba:6c:99:59:e8:d4:4a:70:39:b8:c2:59:6e:8e:
         84:dd:84:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:28 2026 by rpki-client