Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
File:                     YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft (raw, json)
Hash identifier:          EskVnoT69bWI2v2GJ8nhse1iPwU4k5rNlfUvI3eSCb0=
Subject key identifier:   BC:8D:00:A6:E2:BB:B5:53:5F:DB:03:E8:77:71:1A:3E:9B:5A:DD:3D
Authority key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12
Certificate issuer:       /CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12
Certificate serial:       0845
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
Manifest number:          0845
Signing time:             Sun 31 May 2026 21:28:49 +0000
Manifest this update:     Sun 31 May 2026 21:28:49 +0000
Manifest next update:     Sun 07 Jun 2026 21:28:49 +0000
Files and hashes:         1: YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl (hash: K8gxcVPAEkafS7iSl2zYPpoXEQVTGmRpUIMRBDDoucA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl
                          rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 21:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2117 (0x845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABC49, serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12
        Validity
            Not Before: May 31 21:28:49 2026 GMT
            Not After : Jun  7 21:28:49 2026 GMT
        Subject: CN=6a1ca811-32a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:0a:9a:cb:bb:0e:69:e4:c1:5a:91:42:7d:
                    98:09:25:b6:3c:70:96:5b:b0:59:6a:f5:a7:2c:cf:
                    e3:70:b8:d8:7f:c8:03:97:49:4b:42:b6:24:72:b4:
                    7f:4c:80:73:5b:39:5c:f3:25:37:35:c3:a2:40:f5:
                    f3:09:11:cc:b7:3d:1f:cc:0a:ac:13:60:09:fa:cc:
                    22:05:78:b9:62:ba:0a:dd:17:74:fa:cb:59:27:ae:
                    b3:b6:23:0a:7e:18:44:df:9f:ea:81:ef:74:99:b6:
                    12:c2:4c:7c:35:7f:46:e4:ed:8d:78:00:70:23:c0:
                    b6:aa:d4:11:f9:a8:45:a4:ef:0d:20:33:e1:01:65:
                    0f:f0:ef:1a:0c:98:bb:12:bd:da:88:c5:38:f3:55:
                    28:f8:a7:25:6c:03:ce:2a:8f:88:e9:11:d6:86:a2:
                    62:15:b7:ec:a7:a9:73:b7:2a:96:96:e2:d9:67:93:
                    9c:8c:1c:df:e5:a9:80:46:3c:15:92:3c:61:56:1f:
                    c9:6a:ed:45:c1:06:3e:97:f9:37:62:27:69:01:24:
                    92:6f:31:29:28:f3:06:32:2e:e9:c5:b1:fc:80:fb:
                    b8:50:a1:d7:cd:30:30:22:ce:bb:8a:7b:07:d6:e4:
                    1b:33:e1:4c:b9:1a:58:37:05:34:96:b4:00:07:0c:
                    d0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8D:00:A6:E2:BB:B5:53:5F:DB:03:E8:77:71:1A:3E:9B:5A:DD:3D
            X509v3 Authority Key Identifier:
                keyid:60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:12:8f:3f:8e:9a:6a:b6:b2:54:a0:d1:71:d5:18:ef:6c:91:
         f3:52:ef:4d:4c:4a:0e:56:64:64:16:a3:ba:b9:2e:8f:5e:fc:
         80:36:c9:29:14:bb:a4:ae:bc:4d:5d:00:70:5f:18:e5:7d:08:
         ba:29:07:d4:75:a7:2b:f4:81:42:2b:ce:ba:4c:9b:0b:0f:32:
         25:cc:68:a2:16:d2:87:e6:79:50:cd:ea:40:d0:84:86:23:26:
         b5:0c:30:75:e0:de:74:ec:57:07:46:51:02:9c:1f:fc:68:4a:
         ed:29:68:be:2f:85:03:5e:b3:74:84:15:1d:c9:71:ab:cf:2c:
         12:26:e8:ee:69:d2:19:3c:a3:98:ad:2a:27:a4:d5:b6:44:04:
         a9:ad:d0:2e:e5:08:18:eb:93:76:ff:ad:89:86:6b:8b:af:a9:
         29:2b:da:42:03:a6:83:e6:89:26:91:bb:a6:11:1d:64:cf:07:
         85:5f:7a:80:cf:40:43:bb:55:94:f1:e2:86:22:3d:ef:fc:0c:
         87:8d:8d:e3:64:56:81:7e:e1:a6:08:37:ba:69:a8:f0:c2:af:
         72:99:aa:e5:ed:0e:3e:b0:cc:73:63:80:1f:e3:3f:ee:7f:fc:
         41:17:48:28:74:79:75:f2:39:8a:f4:7b:c2:58:54:8f:a4:b1:
         cb:b9:c2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:46 2026 by rpki-client