Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft
File:                     YYrgnnRxNtZvEWWnuP6i_3OGffY.mft (raw, json)
Hash identifier:          j4ozc5zyH3CNMHKwZbX8RG77RN6Bx3h3xnbMYuK68rg=
Subject key identifier:   C7:90:AE:D2:7A:A6:02:94:91:80:D0:CA:AC:1E:A2:49:8F:1D:50:98
Authority key identifier: 61:8A:E0:9E:74:71:36:D6:6F:11:65:A7:B8:FE:A2:FF:73:86:7D:F6
Certificate issuer:       /CN=A91B4460/serialNumber=618AE09E747136D66F1165A7B8FEA2FF73867DF6
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft
Manifest number:          FF
Signing time:             Wed 19 Aug 2026 06:51:52 +0000
Manifest this update:     Wed 19 Aug 2026 06:51:51 +0000
Manifest next update:     Wed 26 Aug 2026 06:51:51 +0000
Files and hashes:         1: YYrgnnRxNtZvEWWnuP6i_3OGffY.crl (hash: tmAwuo3G+I5heswWTekmvE7OYKI/T+bxyFfMegw1fD0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.crl
                          rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4460, serialNumber=618AE09E747136D66F1165A7B8FEA2FF73867DF6
        Validity
            Not Before: Aug 19 06:51:51 2026 GMT
            Not After : Aug 26 06:51:51 2026 GMT
        Subject: CN=6a855288-f310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2c:f5:96:1e:00:90:2c:81:cd:cc:63:c9:46:
                    07:14:56:a0:b4:81:75:99:65:42:36:0d:dc:23:0a:
                    ef:13:8c:4b:36:3d:bf:7f:ad:c8:de:9a:7e:b2:b2:
                    04:70:15:46:33:fc:c5:43:9d:3c:26:d0:15:01:73:
                    ad:b5:8b:09:32:a4:d9:49:92:3a:7f:30:ca:b3:5e:
                    bf:1a:34:f5:b8:dd:25:24:35:a9:50:46:c3:72:a1:
                    a6:df:ce:46:9c:40:1a:12:da:25:ee:0c:2e:a0:12:
                    6b:f7:61:e9:c0:49:cc:a5:47:71:e9:89:62:d8:ce:
                    8e:7a:8c:a7:a2:08:68:0e:dc:8f:bf:87:39:9c:ed:
                    b2:0f:56:96:bd:6e:7b:3c:cd:76:aa:fe:94:13:9d:
                    27:6e:ee:03:21:92:08:5e:70:8b:58:b6:0b:1f:87:
                    1b:d8:d1:4a:e2:59:7a:46:25:40:19:a0:69:96:69:
                    6a:75:10:1e:00:3e:6f:76:4e:06:c3:33:45:72:bc:
                    04:00:37:06:c6:39:a7:28:18:90:4e:1a:e1:15:b3:
                    38:6c:96:3d:98:c9:dc:30:aa:77:67:91:f4:41:9c:
                    b3:2a:4b:17:e9:83:7a:0d:10:e1:b2:6d:1c:d5:2f:
                    06:d4:a0:5d:f1:f0:26:20:6c:12:1e:91:c5:e1:65:
                    37:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:90:AE:D2:7A:A6:02:94:91:80:D0:CA:AC:1E:A2:49:8F:1D:50:98
            X509v3 Authority Key Identifier:
                keyid:61:8A:E0:9E:74:71:36:D6:6F:11:65:A7:B8:FE:A2:FF:73:86:7D:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:96:84:ac:f5:ae:6f:a6:f0:1d:7d:9c:d4:88:a6:4d:50:f5:
         8a:42:50:33:a7:1f:fb:fe:cc:75:74:11:29:f9:af:c1:2e:ea:
         b3:66:fa:e2:ee:95:4c:54:a3:18:fe:36:62:c0:f4:dc:0f:c9:
         f6:d9:65:f4:ab:1f:df:85:cf:d3:c8:93:01:fa:d1:23:2a:e5:
         20:08:4b:dc:f9:a4:03:af:7f:fa:4a:74:8a:56:3c:38:98:aa:
         b0:fb:48:c4:f1:a8:c4:cb:03:1b:a3:c9:b7:72:3e:e9:fd:6b:
         73:32:66:af:46:20:5c:ed:e3:f9:1b:b0:0d:0c:6c:4d:78:7d:
         d4:21:f0:81:65:da:81:e7:4b:e8:e2:67:16:0e:e7:e7:27:42:
         1a:b8:79:52:36:5c:e4:9d:4e:11:c1:a8:2d:78:60:b1:d6:ed:
         a7:85:fe:80:0c:a9:d3:45:fb:92:d7:cd:47:a2:45:26:72:7e:
         65:a3:e2:7b:11:c8:74:4b:c2:43:52:91:cd:86:fc:42:b6:ff:
         86:0a:f3:72:da:4a:c6:be:36:d2:e1:3c:37:47:b1:69:d1:75:
         47:bf:eb:35:dc:56:2d:5d:6a:7b:52:03:5c:70:af:e6:c7:18:
         93:92:02:05:0f:6c:5b:4e:10:bd:7e:c6:99:ee:87:aa:98:b7:
         ac:f3:72:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:08 2026 by rpki-client