Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
File:                     rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft (raw, json)
Hash identifier:          whRsSmE3h92RmGoVBy8JxEpxLz8i8B314RZ60jHBncs=
Subject key identifier:   D5:49:4C:2B:DC:C8:CC:1F:AB:97:00:D1:87:6D:D3:B9:D0:F0:1A:DF
Authority key identifier: AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2
Certificate issuer:       /CN=A91EF8B6/serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2
Certificate serial:       0C0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
Manifest number:          0C01
Signing time:             Mon 22 Jun 2026 18:51:24 +0000
Manifest this update:     Mon 22 Jun 2026 18:51:24 +0000
Manifest next update:     Mon 29 Jun 2026 18:51:24 +0000
Files and hashes:         1: rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl (hash: 76i0DhELVTEIbX8jiJEV55g0rNoeIgwc3Uay83Gn8Lg=)
                          2: FB6D5292263C11EEB9F5DB43C4F9AE02.roa (hash: 9vfMSvXUgFAWrMwGngY+4Eec7WyIf24UFnNt67nkKsk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl
                          rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 18:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3087 (0xc0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF8B6, serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2
        Validity
            Not Before: Jun 22 18:51:24 2026 GMT
            Not After : Jun 29 18:51:24 2026 GMT
        Subject: CN=6a39842c-5edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c9:2b:9d:6f:43:7f:68:68:2c:76:84:e2:7f:
                    90:92:d1:43:a5:3b:93:bd:7a:8c:62:76:08:3d:8e:
                    da:6d:ef:cf:f5:2a:3f:e0:ee:b6:9e:07:19:c6:2a:
                    f4:e8:7b:23:31:2a:d4:a7:09:4b:51:86:59:37:7b:
                    09:3a:4e:3f:92:ba:b7:91:92:26:9b:cc:f6:9c:93:
                    ca:48:fe:4a:20:9a:4e:f8:e1:0b:58:9a:b9:43:22:
                    e1:96:49:a8:6d:77:96:0e:27:cf:61:d1:3d:1e:14:
                    41:a2:d7:0e:b9:9e:f1:27:08:cd:83:10:1a:dd:d0:
                    c9:86:06:d2:c1:66:01:c0:35:03:db:a8:5f:56:d4:
                    fa:21:6b:15:ac:f1:fb:0d:c6:15:95:86:29:5c:79:
                    dc:46:46:d7:b8:92:4b:87:35:71:5f:79:de:cc:d8:
                    e7:43:25:ae:bb:df:55:f0:a1:c4:00:4d:4d:cc:89:
                    10:f4:a4:c0:65:c9:25:d1:d6:b4:80:98:17:f4:2d:
                    b4:13:c8:46:79:e9:bd:4b:b1:ac:3d:f7:6e:ee:9b:
                    59:20:e9:bd:69:1c:00:8f:c3:9d:5b:8c:1c:88:05:
                    17:61:9a:36:f6:d7:92:78:5d:81:1e:0b:69:e7:9b:
                    ac:2a:99:2a:9d:b7:23:ca:97:07:53:74:3d:0a:da:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:49:4C:2B:DC:C8:CC:1F:AB:97:00:D1:87:6D:D3:B9:D0:F0:1A:DF
            X509v3 Authority Key Identifier:
                keyid:AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:81:d7:e9:0a:7e:83:7d:45:75:27:bf:12:5f:2a:b1:c5:8f:
         4f:32:3e:bf:d3:ee:4a:57:a2:af:25:48:7e:77:37:81:a4:6c:
         61:e5:2a:62:9a:6f:37:96:72:92:9b:a8:9a:d0:30:c4:85:02:
         a2:2b:28:0b:b3:6e:b0:6b:5c:0c:2f:7f:3e:13:62:49:d0:5a:
         d1:8f:e2:1f:6b:13:bb:49:42:15:da:d4:97:ec:8d:63:17:e7:
         59:bb:d5:3f:6a:22:dc:c3:26:a2:92:0f:91:a7:50:15:40:2d:
         92:d0:28:42:01:b1:c4:fa:e7:2c:34:87:88:2c:6c:32:62:37:
         f0:30:53:3a:97:30:a3:52:dd:e0:05:d9:1c:78:24:c3:ae:21:
         fa:87:9c:2b:fc:d3:1f:cd:04:db:c2:3d:e0:25:72:b8:cc:5d:
         5a:c6:15:18:d7:b6:c7:19:e3:4a:62:1a:c3:e1:8d:57:fb:d7:
         b3:02:95:c1:01:ae:cc:c8:9f:a0:95:ae:bd:92:28:18:78:5e:
         c0:d1:b5:98:49:17:2a:b0:06:91:0a:81:8c:01:ec:ab:0c:30:
         97:7d:2d:80:a5:c8:0d:57:db:99:17:b7:71:b4:f1:c7:d0:c1:
         80:7e:e3:11:97:e8:a0:30:ff:8d:91:de:3b:fa:41:65:16:38:
         a4:70:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:27:41 2026 by rpki-client