Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
File:                     bycituUTNGUloqmUZBtOJ_BNU1Y.mft (raw, json)
Hash identifier:          7dnBcyInC6FIm3oi5wo5o+hLZPUsugc0VRXViglaVA0=
Subject key identifier:   3C:E7:4E:88:30:EA:9A:50:56:61:33:A9:5A:22:39:01:D4:6B:C6:C0
Authority key identifier: 6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56
Certificate issuer:       /CN=A91870B9/serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356
Certificate serial:       0349
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
Manifest number:          033F
Signing time:             Thu 21 May 2026 01:05:46 +0000
Manifest this update:     Thu 21 May 2026 01:05:45 +0000
Manifest next update:     Thu 28 May 2026 01:05:45 +0000
Files and hashes:         1: bycituUTNGUloqmUZBtOJ_BNU1Y.crl (hash: isslQ3PrwWm5HNR6oILLBeAu7ekNdIC9n9iB2eWndYg=)
                          2: A48AD700072111ED91EABE39C4F9AE02.roa (hash: nNS4I6wnFDV0IY10DkD6nefkEApdL1HBIkLyD0uDd2g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl
                          rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841 (0x349)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91870B9, serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356
        Validity
            Not Before: May 21 01:05:45 2026 GMT
            Not After : May 28 01:05:45 2026 GMT
        Subject: CN=6a0e5a6a-5b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:18:62:d3:26:cf:61:8c:88:91:fc:28:9e:
                    d3:6e:76:01:3f:60:46:62:8a:04:05:bd:22:08:3a:
                    55:ab:58:a8:d2:e3:a9:5c:f6:4e:db:e8:b3:6b:f8:
                    26:d5:20:f9:14:06:80:fd:c1:e4:1d:f9:c1:32:74:
                    ee:61:5e:1f:4b:36:55:e5:6d:31:f3:48:ab:07:66:
                    82:e7:2d:b8:96:2e:dd:e9:84:38:31:85:11:cb:6f:
                    e2:04:4e:5a:67:40:ce:65:8f:71:58:47:fc:86:a2:
                    fc:b5:b8:e9:88:4f:40:63:55:24:ff:00:98:ce:d6:
                    cd:d7:5e:d6:ca:cb:af:d4:75:9c:ba:b1:a3:b1:71:
                    5a:70:89:6f:45:7e:b6:f5:0d:16:01:3a:eb:58:48:
                    e6:8b:7e:35:7d:80:6b:9a:57:41:62:82:62:69:bb:
                    66:fc:7b:62:2c:b1:28:66:be:b0:d4:d6:cb:97:6f:
                    21:17:c9:5f:d5:b2:ad:7c:a0:1f:0a:ce:6c:99:ac:
                    ee:73:dd:79:45:3f:e3:d7:82:85:be:0f:c9:83:11:
                    9e:e8:9b:32:54:3a:96:2b:34:cf:34:1c:56:d5:7f:
                    e6:07:b1:59:ba:55:0c:39:e3:b6:c2:20:43:e3:f7:
                    df:fb:d7:88:b7:b0:46:4d:e9:e6:f6:a3:27:c3:07:
                    d5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E7:4E:88:30:EA:9A:50:56:61:33:A9:5A:22:39:01:D4:6B:C6:C0
            X509v3 Authority Key Identifier:
                keyid:6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:70:ba:8b:eb:fb:ac:af:97:16:73:6c:ac:12:3e:93:fc:43:
         29:78:cf:59:4d:26:5c:a4:a4:78:5d:3a:73:66:b9:7d:5b:43:
         32:68:d0:c7:c8:90:69:c0:18:0e:a3:04:da:b8:38:ed:6a:8c:
         3c:b0:9e:58:1b:1d:10:5a:44:f3:10:25:3b:d7:d9:bd:b2:28:
         da:30:65:3c:3a:81:3e:e7:61:10:93:52:3a:e1:0d:f4:d2:5b:
         9c:e6:80:f9:1c:ab:7c:92:9a:4e:22:26:a7:f0:e8:88:05:79:
         77:a1:3e:f5:f5:7f:51:9e:0a:7c:46:81:38:6a:c6:dd:4f:94:
         9b:65:5b:eb:af:99:99:61:21:83:74:26:5f:ba:99:3b:5c:20:
         78:26:cd:58:9e:d3:d0:3b:54:e1:cd:fc:60:15:5b:e6:b8:c1:
         f6:bf:5f:4a:a4:bd:21:93:2c:d5:16:4f:26:7f:5c:4e:91:0c:
         45:b3:27:0b:2b:2d:b2:ea:10:9e:61:1b:a5:ad:d4:ad:25:40:
         8d:25:27:0c:5f:21:ae:61:d0:b6:77:2f:88:cd:81:d9:06:c1:
         3d:d5:2a:36:e5:87:61:41:0e:9d:87:b3:6d:96:fc:9f:43:8b:
         a0:05:a4:b1:53:af:32:14:5e:3e:cf:bc:fe:d4:66:94:ef:bd:
         6c:6b:ff:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:24:50 2026 by rpki-client