Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
File:                     _YASv-mRKe-ci7ekYDIUQvbSZWI.mft (raw, json)
Hash identifier:          7zIo3EiI1bnlJDT+kH6tTSampcmOLdjFCKy2zcA78+8=
Subject key identifier:   BA:37:8E:97:4E:45:29:6D:7B:F3:3E:A7:68:54:76:26:F8:4D:9A:13
Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62
Certificate issuer:       /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
Manifest number:          0151
Signing time:             Fri 17 Jul 2026 06:14:36 +0000
Manifest this update:     Fri 17 Jul 2026 06:14:35 +0000
Manifest next update:     Fri 24 Jul 2026 06:14:35 +0000
Files and hashes:         1: _YASv-mRKe-ci7ekYDIUQvbSZWI.crl (hash: 4GMKKxxYVQXIvSHTlqqEn0SsKZPsqsOWfmbYM1V9C04=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl
                          rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
        Validity
            Not Before: Jul 17 06:14:35 2026 GMT
            Not After : Jul 24 06:14:35 2026 GMT
        Subject: CN=6a59c84b-6272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:92:34:86:92:9c:96:b6:28:a5:8d:23:8c:3b:
                    31:a5:2c:18:66:4e:f3:cb:80:fe:be:50:4b:f9:5f:
                    bb:aa:1b:87:89:5d:ad:07:86:ec:75:ed:9a:f1:d3:
                    dd:ab:a6:50:d6:99:21:12:de:6a:09:31:da:c5:5f:
                    b4:d0:95:ee:b9:69:68:30:8a:44:34:d7:9d:c0:cd:
                    a0:c7:c7:91:7f:34:ce:98:a2:7c:24:68:33:79:e6:
                    3c:50:de:d0:08:f8:13:c2:33:0a:6c:3f:04:d4:99:
                    ed:b8:b4:c0:23:a5:d5:fb:93:14:a2:10:f2:5a:e3:
                    b3:af:f7:48:5c:e6:18:54:9a:a2:2e:aa:b2:76:24:
                    05:7b:73:6e:5f:02:96:c6:ff:8b:f8:55:ee:5b:79:
                    9a:20:d8:b9:6b:7a:b8:a5:ea:1c:8e:be:d7:76:8a:
                    91:33:41:c8:33:9c:a0:c9:4e:79:70:53:10:05:e4:
                    58:60:55:4a:3e:d6:e2:8c:fe:12:b5:38:c7:d4:de:
                    c8:80:a3:ba:19:10:4a:c5:e7:86:04:09:2e:7e:f0:
                    c0:28:47:6f:d5:69:ce:69:5a:7e:28:1b:83:6f:79:
                    e2:c5:40:bd:64:ee:ea:87:50:02:3d:fd:49:41:70:
                    71:03:f2:ab:5f:29:e6:46:de:73:b8:56:62:00:54:
                    98:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:37:8E:97:4E:45:29:6D:7B:F3:3E:A7:68:54:76:26:F8:4D:9A:13
            X509v3 Authority Key Identifier:
                keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a7:bb:b4:ef:32:26:67:3b:12:3a:24:90:d4:4f:bd:fc:96:
         92:c6:07:0d:0e:fb:65:a2:27:f9:2b:e4:c2:fa:85:bf:a3:5f:
         f2:71:cc:dc:40:9b:f2:37:0c:0d:7e:b6:a1:d0:07:43:d6:96:
         1c:47:93:2d:54:a8:65:1f:02:58:be:35:40:8d:dd:a6:39:37:
         1a:1d:9c:0e:a7:ff:08:fe:1f:a9:d2:63:13:13:ff:16:b1:be:
         aa:5d:10:e5:26:79:c5:7a:b7:11:8f:ac:6c:73:69:13:29:79:
         c5:f6:3e:80:4e:d0:1a:76:fd:fc:2b:b0:86:5c:b7:34:4a:ce:
         06:7b:9e:0f:27:d6:e9:4d:e2:16:f3:24:90:6c:bd:da:11:96:
         f6:30:87:eb:03:98:ea:9e:95:1d:9d:b4:a0:53:bf:08:01:23:
         e6:79:e0:99:97:3b:b3:99:e4:5c:4f:a0:cb:52:b7:31:49:79:
         48:96:c6:23:88:d4:23:9e:bd:b1:60:ea:0f:7f:63:d9:02:da:
         96:e8:78:48:2b:4b:39:e6:7f:36:b9:fe:c0:a2:63:a7:7e:18:
         02:dd:0d:06:97:4a:fd:65:f4:5c:3e:1d:87:be:39:dd:36:28:
         d8:17:ab:28:22:3b:de:0b:2f:6c:37:9b:35:e2:c6:89:8f:23:
         ac:26:9e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:27:45 2026 by rpki-client