Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft
File:                     InYg_8vfrJXUbmodsxewi6VihIA.mft (raw, json)
Hash identifier:          WmlSOpwtbWU6gZPXuHwyovu++ZaU5wY75S/U/07ExC0=
Subject key identifier:   F5:33:7C:42:1F:98:33:17:14:E6:19:39:9D:78:90:4A:98:8A:55:6D
Authority key identifier: 22:76:20:FF:CB:DF:AC:95:D4:6E:6A:1D:B3:17:B0:8B:A5:62:84:80
Certificate issuer:       /CN=A91D4781/serialNumber=227620FFCBDFAC95D46E6A1DB317B08BA5628480
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft
Manifest number:          7B
Signing time:             Mon 01 Jun 2026 08:28:27 +0000
Manifest this update:     Mon 01 Jun 2026 08:28:26 +0000
Manifest next update:     Mon 08 Jun 2026 08:28:26 +0000
Files and hashes:         1: InYg_8vfrJXUbmodsxewi6VihIA.crl (hash: O+6umbpr1+jcFC0soDQJ3YX/CIZ8P+WpDlAAuduqNI0=)
                          2: 9F7CD49AA55A11F0A8F84D83C4F9AE02.roa (hash: uA1aNoLm5rRL4N33a7say9LydcTss2fD+OkvlysDqGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.crl
                          rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4781, serialNumber=227620FFCBDFAC95D46E6A1DB317B08BA5628480
        Validity
            Not Before: Jun  1 08:28:26 2026 GMT
            Not After : Jun  8 08:28:26 2026 GMT
        Subject: CN=6a1d42aa-8ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e6:07:0c:cb:a7:bf:42:01:ec:2e:c5:61:d4:
                    c4:33:0f:b6:1c:77:db:ab:80:ce:d3:0d:a8:0c:71:
                    d7:38:d7:81:00:ab:a0:c7:b8:a1:6a:1a:2d:d7:6a:
                    b4:bf:60:06:23:6d:12:b9:d1:6b:31:64:02:94:e5:
                    7e:ea:50:a2:7a:54:1f:55:2d:9e:b1:61:2f:d5:88:
                    24:57:5a:40:26:2c:a3:b4:75:a0:4e:dc:ec:96:5a:
                    a0:cf:73:3a:07:72:32:4f:e9:5d:53:25:a5:23:50:
                    23:55:9c:39:7b:ff:96:45:f1:47:d8:c9:63:b9:35:
                    17:e6:95:53:be:14:ee:de:fc:fa:5e:c3:fc:a0:ff:
                    45:bd:33:ed:d1:c4:b0:8d:35:4b:9f:7d:49:ee:4d:
                    86:3a:d7:c6:c2:06:b5:45:75:16:42:fc:6c:54:e8:
                    de:87:27:21:7f:ce:c7:89:56:9d:97:34:8c:8f:30:
                    75:6d:a3:20:87:ef:30:f6:3d:68:f8:11:c6:5a:15:
                    ea:c3:59:97:46:49:81:46:15:a3:09:69:f5:4a:99:
                    62:94:b2:9c:50:42:8d:67:31:a5:a9:49:4b:4b:43:
                    04:a4:ca:c5:25:1b:9a:9a:3b:07:91:e7:cd:96:a8:
                    db:6b:d2:d3:35:31:b1:02:b2:e1:ee:bb:b4:2a:e9:
                    3c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:33:7C:42:1F:98:33:17:14:E6:19:39:9D:78:90:4A:98:8A:55:6D
            X509v3 Authority Key Identifier:
                keyid:22:76:20:FF:CB:DF:AC:95:D4:6E:6A:1D:B3:17:B0:8B:A5:62:84:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:c9:c6:91:19:c1:af:d2:aa:48:66:db:e4:4a:66:a8:59:15:
         74:d9:d5:8d:e4:74:2e:8d:88:03:72:cc:f6:48:7d:cd:5a:e7:
         e9:cd:24:db:c1:74:39:85:20:b8:96:9f:4f:78:cf:6d:12:88:
         24:87:c9:c6:3b:3c:6c:3d:87:34:b8:65:b3:2c:ae:f5:2a:05:
         ce:b3:b1:87:08:be:08:57:c1:a7:e6:bd:ea:b3:f5:db:27:d5:
         e5:25:37:cf:5f:5c:97:d4:5b:d8:75:5f:e8:9e:13:9d:9e:18:
         b0:72:98:2d:c2:21:37:cd:48:d2:f5:e1:7c:bd:9e:3a:f9:96:
         05:cc:c9:3d:9c:33:79:22:6e:84:e1:00:3e:d5:bd:22:8e:af:
         20:76:9f:16:d7:7d:8e:9f:76:28:03:d7:4b:1d:14:06:1a:7a:
         74:f4:80:8a:b7:1a:f5:f4:64:5e:4a:69:d3:9a:3c:c1:18:e3:
         ad:8f:d2:fa:c5:4b:69:f0:85:04:5f:92:6f:1e:f5:4e:cc:2c:
         1f:cc:3a:ed:07:3e:38:cd:58:03:60:23:48:e9:11:4a:fe:14:
         31:ff:17:2e:0d:9c:5d:f7:70:ad:58:b2:f4:77:54:0e:ba:c6:
         5e:a8:99:62:7b:4e:7e:2d:e0:54:dd:f8:82:55:02:ca:73:9b:
         ac:77:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:30 2026 by rpki-client