Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
File:                     gYu-BREIqaYrBvxp5L-jaX5l4w8.mft (raw, json)
Hash identifier:          6h/5P9hF1TdiMFc9gADMbpYnSWRcf98l+47yUPad+FM=
Subject key identifier:   AE:D9:53:18:BC:8E:50:CA:11:C6:F4:A7:E0:A6:83:3F:32:10:50:A0
Authority key identifier: 81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F
Certificate issuer:       /CN=A91FCF44/serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F
Certificate serial:       AA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
Manifest number:          AA
Signing time:             Mon 01 Jun 2026 05:55:16 +0000
Manifest this update:     Mon 01 Jun 2026 05:55:16 +0000
Manifest next update:     Mon 08 Jun 2026 05:55:16 +0000
Files and hashes:         1: gYu-BREIqaYrBvxp5L-jaX5l4w8.crl (hash: 0DLVLETffATXAcv8LSXUGj92nUHslxjHo5t3gxHiMgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl
                          rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCF44, serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F
        Validity
            Not Before: Jun  1 05:55:16 2026 GMT
            Not After : Jun  8 05:55:16 2026 GMT
        Subject: CN=6a1d1ec4-24e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:67:1a:91:24:40:d6:6a:9f:8d:48:10:e9:
                    63:65:8d:77:ff:e6:f0:99:20:0a:81:f7:68:02:9d:
                    dd:6b:e5:db:13:95:3b:58:f1:e3:0e:63:33:f0:97:
                    56:cf:3d:7d:8e:51:8c:0d:90:7e:12:45:e6:e9:58:
                    d2:b0:37:e4:16:78:2c:14:9e:aa:68:7d:04:f9:85:
                    4f:a2:70:32:bb:b4:f1:aa:d1:66:97:30:34:8b:85:
                    c9:da:3c:82:11:5c:69:3a:f7:c1:13:d1:3d:b6:d8:
                    1a:b0:1c:c6:3c:a1:88:59:a9:13:d5:44:b4:fa:74:
                    51:3d:16:01:e8:a5:7f:38:95:21:19:d1:76:ae:77:
                    5f:16:d3:1a:a1:16:df:30:d2:05:09:4e:51:78:8d:
                    86:41:5a:7f:cd:37:5e:c0:fe:e8:17:c5:71:e9:d2:
                    22:ea:3c:86:aa:31:14:f8:8f:42:99:b2:4d:a0:46:
                    34:ab:87:9e:32:c9:db:8b:18:7e:a7:a4:e2:b8:ce:
                    86:df:d5:fd:c0:2b:07:83:ef:c9:18:af:e4:88:37:
                    a0:00:57:0a:b0:79:4c:3f:77:94:18:00:d7:43:04:
                    7b:cd:26:92:df:e6:9b:41:a7:5a:3b:85:dc:fa:27:
                    0f:77:b1:99:b0:7c:23:ca:ac:6f:dc:4a:6d:f7:89:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D9:53:18:BC:8E:50:CA:11:C6:F4:A7:E0:A6:83:3F:32:10:50:A0
            X509v3 Authority Key Identifier:
                keyid:81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:16:3c:da:64:c4:fc:39:5e:cf:ee:0f:d5:c2:25:28:43:76:
         62:79:59:97:aa:ea:0d:01:77:f2:f5:89:61:95:ba:6e:26:a2:
         21:d8:12:66:1b:b7:8c:7e:84:84:1f:dd:3e:dd:75:99:65:93:
         a0:96:c3:f3:d7:df:91:1e:4a:43:af:e5:00:82:fb:6a:94:2f:
         5d:5d:24:ba:13:19:8a:25:5a:a4:82:bc:2d:f2:7a:65:fb:96:
         3d:07:1e:43:97:3a:70:ca:a7:c8:7f:67:22:fe:58:5d:e4:84:
         83:06:67:92:49:48:c7:ca:41:17:5b:74:b8:a6:aa:9b:27:f7:
         03:19:2d:f7:ac:92:89:12:1a:8e:cb:e9:6b:02:ed:fb:cc:73:
         34:4c:f6:22:00:c1:9b:37:27:af:b9:82:71:7c:9a:04:d6:b4:
         da:40:9d:4f:4c:52:33:eb:8c:7b:d2:67:02:f7:61:24:4c:3f:
         5d:77:a1:e8:67:d2:20:34:59:35:51:c1:38:9a:24:fe:71:02:
         ba:70:cc:d5:0e:8d:06:ca:1e:81:13:92:a9:5b:78:29:0a:f8:
         cf:45:80:7f:d8:27:2b:b3:9f:73:e4:e0:4a:0a:4c:73:cd:29:
         d8:83:7d:af:fa:fb:d1:1e:58:05:68:29:c6:fe:13:90:4e:fe:
         a5:de:41:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNGNDQxMTAvBgNVBAUTKDgxOEJCRTA1MTEwOEE5QTYyQjA2RkM2OUU0QkZBMzY5
N0U2NUUzMEYwHhcNMjYwNjAxMDU1NTE2WhcNMjYwNjA4MDU1NTE2WjAYMRYwFAYD
VQQDEw02YTFkMWVjNC0yNGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuUJnGpEkQNZqn41IEOljZY13/+bwmSAKgfdoAp3da+XbE5U7WPHjDmMz8JdW
zz19jlGMDZB+EkXm6VjSsDfkFngsFJ6qaH0E+YVPonAyu7TxqtFmlzA0i4XJ2jyC
EVxpOvfBE9E9ttgasBzGPKGIWakT1US0+nRRPRYB6KV/OJUhGdF2rndfFtMaoRbf
MNIFCU5ReI2GQVp/zTdewP7oF8Vx6dIi6jyGqjEU+I9CmbJNoEY0q4eeMsnbixh+
p6TiuM6G39X9wCsHg+/JGK/kiDegAFcKsHlMP3eUGADXQwR7zSaS3+abQadaO4Xc
+icPd7GZsHwjyqxv3Ept94kaqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK7ZUxi8
jlDKEcb0p+Cmgz8yEFCgMB8GA1UdIwQYMBaAFIGLvgURCKmmKwb8aeS/o2l+ZeMP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC9DRDZENkM3RTVF
MjAxMUYwQURBQTRCNkZDNEY5QUUwMi9nWXUtQlJFSXFhWXJCdnhwNUwtamFYNWw0
dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2dZdS1CUkVJcWFZckJ2eHA1TC1qYVg1bDR3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0Y0NC9DRDZENkM3RTVFMjAxMUYwQURBQTRCNkZDNEY5QUUwMi9nWXUtQlJFSXFh
WXJCdnhwNUwtamFYNWw0dzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJhY82mTE/Dlez+4P1cIlKEN2YnlZl6rqDQF38vWJYZW6biaiIdgSZhu3jH6E
hB/dPt11mWWToJbD89ffkR5KQ6/lAIL7apQvXV0kuhMZiiVapIK8LfJ6ZfuWPQce
Q5c6cMqnyH9nIv5YXeSEgwZnkklIx8pBF1t0uKaqmyf3Axkt96ySiRIajsvpawLt
+8xzNEz2IgDBmzcnr7mCcXyaBNa02kCdT0xSM+uMe9JnAvdhJEw/XXeh6GfSIDRZ
NVHBOJok/nECunDM1Q6NBsoegROSqVt4KQr4z0WAf9gnK7Ofc+TgSgpMc80p2IN9
r/r70R5YBWgpxv4TkE7+pd5BvQ==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:58 2026 by rpki-client