Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
File:                     hYu8kCwHf24DE67cSds25v7yNLI.mft (raw, json)
Hash identifier:          ZLTB+Gr4G78Eu4eQiVyu8G/EzuIEOGZmPI4xjfIOTUQ=
Subject key identifier:   20:18:1E:9F:2E:D2:72:56:E9:13:D0:8F:3C:E6:F7:EC:85:0D:7D:AC
Authority key identifier: 85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
Certificate issuer:       /CN=A91DE334/serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
Manifest number:          5D
Signing time:             Tue 23 Jun 2026 08:22:55 +0000
Manifest this update:     Tue 23 Jun 2026 08:22:55 +0000
Manifest next update:     Tue 30 Jun 2026 08:22:55 +0000
Files and hashes:         1: hYu8kCwHf24DE67cSds25v7yNLI.crl (hash: vEFUVXO270PBru5yXnzxhhf9W5PDRoTWF7dSg1Vu7Rs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 08:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE334, serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
        Validity
            Not Before: Jun 23 08:22:55 2026 GMT
            Not After : Jun 30 08:22:55 2026 GMT
        Subject: CN=6a3a425f-1f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:b7:a6:71:85:ee:51:65:9d:35:2a:42:dd:
                    59:14:23:fb:37:86:43:f2:67:5d:24:fe:30:71:e6:
                    00:2d:99:ab:72:bf:3d:b1:01:38:5b:65:d6:01:01:
                    23:7c:85:73:86:1d:d4:a5:db:6a:a4:42:10:0c:51:
                    a0:ff:9b:df:b3:24:f9:7c:29:18:f7:81:5b:95:98:
                    ea:6a:98:7a:c8:e2:68:30:4e:15:15:27:9b:8c:33:
                    9e:af:e8:9b:e0:28:90:0b:91:b0:8e:66:15:f3:16:
                    a6:e9:8a:aa:30:52:62:a9:38:e7:da:0e:5a:0d:38:
                    4e:f4:fb:8b:1e:b0:97:de:84:28:71:fd:37:bb:f0:
                    48:af:ea:44:87:10:27:61:94:e4:7e:a6:74:3f:0f:
                    71:79:d1:85:04:a3:c3:71:47:ef:60:32:29:d0:33:
                    62:b4:6c:ba:5c:2f:82:96:99:d9:63:0a:f8:40:43:
                    11:7b:89:4c:a2:72:91:6a:0e:d4:d5:c1:78:2b:e2:
                    a5:69:06:55:4c:7c:7f:08:54:40:f6:2b:ad:60:68:
                    f3:c9:77:cb:9c:ef:7d:1d:dc:6e:91:a9:34:02:a0:
                    aa:be:67:31:bb:28:c7:fd:46:48:3c:5e:3b:49:a5:
                    11:d3:28:bc:9d:f0:b1:15:2b:af:ba:3e:c1:62:eb:
                    df:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:18:1E:9F:2E:D2:72:56:E9:13:D0:8F:3C:E6:F7:EC:85:0D:7D:AC
            X509v3 Authority Key Identifier:
                keyid:85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:7b:42:4a:1d:69:34:78:69:6b:b2:44:f7:d5:fb:61:f8:a7:
         e9:4d:6d:f1:17:46:6a:52:82:16:fa:d8:81:53:86:29:d9:cc:
         02:29:65:16:ae:da:f7:5f:0c:40:98:f8:87:54:a8:6c:ef:0d:
         36:d1:6d:ea:51:63:89:2d:89:13:3c:05:53:cd:cd:0d:ed:fc:
         3a:49:79:37:b9:42:6c:a9:af:eb:54:71:bc:85:55:45:f2:7e:
         86:d7:f0:92:00:39:3f:7b:dc:ac:ca:51:e7:5e:c5:8f:6f:45:
         08:e5:5f:73:a3:3b:da:a7:44:48:1c:2b:52:51:84:db:62:b3:
         e3:d6:b2:9d:89:86:31:4c:e6:af:54:d0:d5:dd:34:85:aa:12:
         8c:2d:c8:ec:25:fe:2d:27:73:18:da:fd:10:89:ab:cf:ea:d7:
         da:e2:99:94:10:84:13:e1:a8:61:64:e3:fc:73:b0:b7:0b:e3:
         fa:d7:fc:b9:47:db:02:86:6a:13:7b:42:92:59:17:a4:5a:20:
         fa:be:27:cf:b5:19:75:91:16:44:25:ef:8a:1f:72:77:75:d8:
         a1:09:74:ab:d7:73:4e:a8:0b:98:40:9c:54:fd:73:d5:ba:30:
         68:7b:33:ed:f0:e3:49:36:41:4b:89:42:45:3a:06:d1:fe:40:
         00:e1:98:40
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RTMzNDExMC8GA1UEBRMoODU4QkJDOTAyQzA3N0Y2RTAzMTNBRURDNDlEQjM2RTZG
RUYyMzRCMjAeFw0yNjA2MjMwODIyNTVaFw0yNjA2MzAwODIyNTVaMBgxFjAUBgNV
BAMTDTZhM2E0MjVmLTFmNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1LremcYXuUWWdNSpC3VkUI/s3hkPyZ10k/jBx5gAtmatyvz2xAThbZdYBASN8
hXOGHdSl22qkQhAMUaD/m9+zJPl8KRj3gVuVmOpqmHrI4mgwThUVJ5uMM56v6Jvg
KJALkbCOZhXzFqbpiqowUmKpOOfaDloNOE70+4sesJfehChx/Te78Eiv6kSHECdh
lOR+pnQ/D3F50YUEo8NxR+9gMinQM2K0bLpcL4KWmdljCvhAQxF7iUyicpFqDtTV
wXgr4qVpBlVMfH8IVED2K61gaPPJd8uc730d3G6RqTQCoKq+ZzG7KMf9Rkg8XjtJ
pRHTKLyd8LEVK6+6PsFi699fAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIBgeny7S
clbpE9CPPOb37IUNfawwHwYDVR0jBBgwFoAUhYu8kCwHf24DE67cSds25v7yNLIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMzM0L0M1MTI2Q0NFRTU3
OTExRjA4MzZFRUFBMTQxNkY1NkJDL2hZdThrQ3dIZjI0REU2N2NTZHMyNXY3eU5M
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaFl1OGtDd0hmMjRERTY3Y1NkczI1djd5TkxJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF
MzM0L0M1MTI2Q0NFRTU3OTExRjA4MzZFRUFBMTQxNkY1NkJDL2hZdThrQ3dIZjI0
REU2N2NTZHMyNXY3eU5MSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAse0JKHWk0eGlrskT31fth+KfpTW3xF0ZqUoIW+tiBU4Yp2cwCKWUWrtr3XwxA
mPiHVKhs7w020W3qUWOJLYkTPAVTzc0N7fw6SXk3uUJsqa/rVHG8hVVF8n6G1/CS
ADk/e9ysylHnXsWPb0UI5V9zozvap0RIHCtSUYTbYrPj1rKdiYYxTOavVNDV3TSF
qhKMLcjsJf4tJ3MY2v0QiavP6tfa4pmUEIQT4ahhZOP8c7C3C+P61/y5R9sChmoT
e0KSWRekWiD6vifPtRl1kRZEJe+KH3J3ddihCXSr13NOqAuYQJxU/XPVujBoezPt
8ONJNkFLiUJFOgbR/kAA4ZhA
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:26 2026 by rpki-client