Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
File:                     YN1l7H9y62x9qLk3BuLTug8GW_w.mft (raw, json)
Hash identifier:          9hT03bpEI0GKi9NKHCzvgSqesRPINNestxOHJPI96FQ=
Subject key identifier:   E9:07:C7:1E:CF:9E:51:81:37:15:A3:1B:9D:B4:67:D8:CD:EC:8C:F5
Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
Certificate issuer:       /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Certificate serial:       1B35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
Manifest number:          1B22
Signing time:             Sat 20 Jun 2026 16:13:34 +0000
Manifest this update:     Sat 20 Jun 2026 16:13:33 +0000
Manifest next update:     Sat 27 Jun 2026 16:13:33 +0000
Files and hashes:         1: YN1l7H9y62x9qLk3BuLTug8GW_w.crl (hash: WsJzwsoiRUs53+6syxCIETtDHsYH7fDfRgNdN+qViFE=)
                          2: 91CB97905BD211EBA9178181C4F9AE02.roa (hash: qWp/XIY6bx5m6zPuPTYxt/QlRjZYjzeSmVqLyGiCJPQ=)
                          3: D75BE71A410511E7970A2A5FC4F9AE02.roa (hash: bVX95h5YGIEFl/nNsvVn6rJFnDmppDxCWRFjlU5VtvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl
                          rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Jun 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6965 (0x1b35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4264, serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
        Validity
            Not Before: Jun 20 16:13:33 2026 GMT
            Not After : Jun 27 16:13:33 2026 GMT
        Subject: CN=6a36bc2e-ef40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:b3:20:43:4d:49:8a:b4:bc:05:19:8f:93:
                    0f:78:1a:78:2a:e7:5d:d7:78:dd:c6:11:61:0a:92:
                    19:13:f5:2e:84:07:d0:7a:59:52:55:39:37:15:d5:
                    a2:71:19:1b:e1:10:19:9b:f9:da:ce:02:a3:63:14:
                    83:cc:f6:80:e7:95:20:77:77:b2:68:ae:b5:97:91:
                    48:dd:96:21:b3:f5:91:4d:2c:d3:69:8d:68:14:42:
                    42:13:b4:42:ac:89:6b:32:a2:8b:2f:0d:3f:9f:da:
                    93:3a:40:7a:90:7a:f5:08:3a:c1:ee:82:a1:df:40:
                    f2:ae:2d:c4:95:e3:5d:51:bd:84:2e:ed:c7:ac:96:
                    b2:2c:ea:17:41:2d:7f:3c:23:bf:e4:d2:10:7c:ef:
                    b1:76:84:b9:2e:0c:78:4f:b3:85:f3:da:03:48:80:
                    f2:96:8b:28:9f:4c:2f:bd:5f:90:7d:82:b0:6a:35:
                    bc:ef:37:8e:32:56:cd:47:bd:e0:bf:05:cc:2c:46:
                    4b:03:37:df:57:f7:88:d8:ab:95:f7:2d:11:2b:7d:
                    6d:35:d2:2f:b6:27:24:58:ad:70:a7:11:ba:ae:d7:
                    ac:74:59:00:6c:e6:19:6f:7d:47:44:fb:55:07:8e:
                    36:95:39:8e:8e:49:f2:2e:11:3e:0e:a2:cf:0b:ff:
                    d2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:07:C7:1E:CF:9E:51:81:37:15:A3:1B:9D:B4:67:D8:CD:EC:8C:F5
            X509v3 Authority Key Identifier:
                keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ed:e2:75:6e:af:a6:04:cd:32:08:f7:61:f1:be:20:08:65:
         a5:d6:2c:f7:4a:4f:bf:24:a5:de:1d:e5:25:c8:a2:b5:63:e7:
         60:46:02:92:b2:e5:60:fb:06:ee:78:76:e4:46:fa:e5:4d:98:
         84:f1:89:1c:5c:c0:50:c9:9c:c7:ff:d8:a7:64:e4:57:82:e7:
         ad:8c:d8:05:5f:fb:f1:fd:e1:60:76:01:fb:6d:39:a8:c3:27:
         79:ec:82:52:a7:63:fd:5f:78:77:97:b4:2f:8b:95:80:52:2a:
         e2:67:64:5f:61:78:9e:d8:ec:6b:c8:3f:1e:67:84:67:8e:68:
         4f:df:b0:3d:a8:94:97:5d:ba:5f:a9:6b:a1:ea:f7:b3:81:fe:
         dc:8e:4d:a5:ea:78:a9:92:43:cb:39:64:66:c6:e9:33:57:24:
         d4:e0:f5:c2:29:53:db:2d:9c:16:90:94:7f:3a:93:60:28:25:
         ef:79:ee:ce:bd:28:32:8a:fa:f7:3e:00:6d:7e:4f:bd:a3:2e:
         02:fa:78:4d:85:6a:5a:a4:c1:6c:9a:a0:e5:1f:18:6f:a9:f6:
         22:da:af:06:d5:55:7b:4a:72:17:d2:18:f4:6c:23:3e:75:f7:
         48:3d:80:49:cc:4a:b5:2b:8a:31:a0:7d:7e:77:f3:17:45:5a:
         45:f6:c6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 12:41:37 2026 by rpki-client