Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
File:                     YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft (raw, json)
Hash identifier:          izSsjW5AV0GCHwKrZ87VnbUN6KVdpIwKyTRspCixl6s=
Subject key identifier:   C7:25:2F:0E:1A:8B:5B:76:33:29:E8:E4:C6:36:4F:89:1F:92:6F:9A
Authority key identifier: 61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00
Certificate issuer:       /CN=A91C2F8C/serialNumber=611E1C149528F17A0EC799C39D562619C9A15100
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
Manifest number:          012F
Signing time:             Thu 21 May 2026 05:38:05 +0000
Manifest this update:     Thu 21 May 2026 05:38:04 +0000
Manifest next update:     Thu 28 May 2026 05:38:04 +0000
Files and hashes:         1: YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl (hash: L0r5hrlRpZz01bYm8647reFE1qL8XnzMp/Cy8IMTkZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl
                          rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 05:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2F8C, serialNumber=611E1C149528F17A0EC799C39D562619C9A15100
        Validity
            Not Before: May 21 05:38:04 2026 GMT
            Not After : May 28 05:38:04 2026 GMT
        Subject: CN=6a0e9a3d-2698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:15:5a:9c:52:d4:b5:cb:e4:b9:39:29:90:
                    07:13:05:8a:b2:e9:b6:e9:16:f9:c7:58:f9:a0:67:
                    bb:35:a1:12:51:54:1b:ba:27:a0:6c:c5:ab:ce:f3:
                    cc:bc:1f:e6:23:23:e0:6d:33:ca:61:01:d9:c0:64:
                    e4:c0:e5:fa:e1:ca:14:7e:4e:6e:56:44:1d:44:cb:
                    97:6c:1e:8b:aa:59:2f:a5:4e:f1:69:01:1f:ab:1e:
                    76:19:d2:7f:87:6a:14:45:61:a8:93:a3:35:0f:28:
                    9c:82:5c:bf:bb:26:e8:96:8a:c8:41:bf:fd:5f:3b:
                    38:ff:bd:2e:c8:29:ac:57:28:fd:be:7a:58:08:34:
                    59:39:11:38:c1:aa:09:8e:7c:79:ac:53:ff:9e:b4:
                    15:65:32:e4:61:ee:17:02:12:3a:a8:9e:e0:d3:a8:
                    bf:b1:7c:8c:bb:90:f1:51:2f:ee:66:df:4f:1c:cf:
                    1c:fb:f9:57:e6:d7:42:36:fd:cf:54:75:4a:70:0d:
                    f2:e2:69:a5:16:c0:8a:c1:4e:4f:91:20:d8:f3:a0:
                    50:d6:e6:16:2e:3d:0a:da:2f:f9:6a:9c:b6:b8:59:
                    84:3a:b4:b1:34:80:6e:10:ba:52:b4:a4:5f:aa:38:
                    d7:e5:e8:62:08:8d:35:2f:93:69:eb:75:92:02:71:
                    7a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:25:2F:0E:1A:8B:5B:76:33:29:E8:E4:C6:36:4F:89:1F:92:6F:9A
            X509v3 Authority Key Identifier:
                keyid:61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:78:06:cb:6e:44:49:e8:ec:e7:48:6a:52:f6:c3:aa:37:78:
         81:e8:78:03:0f:48:ce:7f:e6:41:f4:58:b3:98:93:ef:56:86:
         3a:83:d8:39:0c:67:21:05:40:a6:07:51:b1:9b:9c:04:d5:28:
         5b:15:ab:c3:b8:93:f1:91:91:57:c9:46:d3:06:32:37:25:dd:
         e9:a4:e4:3b:d7:ca:14:cf:85:ca:ca:15:21:d4:43:d6:45:d4:
         c7:33:c1:a6:5d:ae:ac:c5:69:68:10:6c:bc:69:20:02:1e:3f:
         f3:d7:bc:7e:f7:45:f3:3b:f2:fb:dd:dd:62:4d:74:2d:3b:c3:
         60:d6:06:ab:25:a3:09:57:55:9a:66:76:b4:f4:2b:d6:13:ea:
         3e:91:16:9c:41:ca:d5:2f:92:80:55:e0:e1:48:d1:e3:65:d3:
         ac:4f:25:fa:6b:f2:6d:71:e2:ce:37:0d:03:08:a3:ca:8a:7b:
         4f:95:c7:cf:6a:03:66:75:34:02:10:dc:cd:68:a2:01:a3:e1:
         4b:0c:57:e0:ee:19:e6:4b:f6:75:07:09:bb:07:b2:04:e5:fc:
         75:b2:86:89:c8:47:8e:e4:9a:63:63:27:d4:1d:04:8f:e6:a4:
         90:17:3f:22:68:5d:8f:e3:13:7b:0f:3b:dc:d6:a0:9f:ea:6c:
         db:51:de:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:09 2026 by rpki-client