Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
File:                     DHYrLJAks0yYhILx1x10mufcSus.mft (raw, json)
Hash identifier:          N4yaLv1x7kYQVIHKZYRJCGJe6YiR2mgMXE6dwTt10Wo=
Subject key identifier:   7A:1A:FD:E4:EE:AA:E6:4E:D3:F2:06:24:B9:4F:90:F1:8E:02:AD:B4
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Certificate issuer:       /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
Manifest number:          01BD
Signing time:             Sat 13 Jun 2026 04:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:49 +0000
Manifest next update:     Sat 20 Jun 2026 04:00:49 +0000
Files and hashes:         1: DHYrLJAks0yYhILx1x10mufcSus.crl (hash: yrpp1tFbAONq7/dB8WWHvpQ9ZV8jll3PCwXILBTrVCM=)
                          2: F8B24A3C127911F09BCB8B7AC4F9AE02.roa (hash: 1cBkJAATgAnAWpkL5ephYU2tTfXe7A7jghvap9dsu7Q=)
                          3: 9B6126AEE1D811EF881A2765C4F9AE02.roa (hash: phsa0aOE8eqCOpQqL6MkEfoEn022+mvXBZ0Y/k/Gb6A=)
                          4: 79F7221E892911EF896D1145C4F9AE02.roa (hash: 4HsEjdA6ll0rAi2M5nFxa1SGJVN7pNCKPiFzJN7imik=)
                          5: 5D31D17ACE9811EE9392467BC4F9AE02.roa (hash: z+lohyQaMeb0DYcM3/qn4iEQ+VpTj1TLsiVBPUy6pZk=)
                          6: F278C026892911EFB08D7746C4F9AE02.roa (hash: wlRisXvx0zTP/TvUTz15M4hS2Jw5htErhvvetPP2grU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
                          rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
        Validity
            Not Before: Jun 13 04:00:49 2026 GMT
            Not After : Jun 20 04:00:49 2026 GMT
        Subject: CN=6a2cd5f2-2851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:31:b7:27:70:3e:2c:8d:4f:82:04:65:c2:
                    2d:7c:f4:d9:3e:0f:0e:c3:7b:8c:91:48:0c:09:3c:
                    f8:c0:b1:08:0d:29:b8:02:6d:8b:b9:e9:b2:ac:43:
                    bc:27:bf:fd:ae:99:a0:f6:b4:b7:44:ea:ee:58:68:
                    37:d4:7f:4d:6b:ba:08:6e:7c:59:51:1c:24:25:02:
                    c7:78:72:63:19:66:93:cc:5f:82:a5:ca:e5:06:24:
                    9f:9f:63:99:c7:a4:bb:e4:36:b0:dd:90:08:16:50:
                    7a:7b:89:95:a5:ff:4a:80:f7:ac:1a:16:c4:52:b5:
                    9b:c9:c5:15:97:82:d7:94:23:0a:61:9a:3f:a2:f8:
                    77:20:9b:b3:fe:fd:17:43:9a:b8:66:ed:48:e5:98:
                    9c:36:8e:73:17:14:f3:3b:2a:27:f8:8c:08:9e:64:
                    7f:c0:1b:db:59:e4:8d:6b:ba:c1:10:fe:86:51:9b:
                    cd:9a:82:5d:b7:57:fd:b3:36:cb:d6:ca:19:cd:84:
                    cf:95:71:4f:1d:0f:99:7a:0f:44:d3:fb:5d:53:9e:
                    40:50:53:25:04:30:a6:94:c8:10:59:55:5a:78:52:
                    0f:08:9b:25:bd:f6:e3:a8:39:14:90:2b:03:3d:85:
                    f5:d4:1d:7f:87:0b:f2:f8:77:a3:45:76:83:40:0e:
                    14:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1A:FD:E4:EE:AA:E6:4E:D3:F2:06:24:B9:4F:90:F1:8E:02:AD:B4
            X509v3 Authority Key Identifier:
                keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:cb:35:09:30:25:c0:8e:82:5b:04:e2:ed:c2:36:c3:22:64:
         f2:eb:d3:ea:6f:61:47:5a:22:6c:1c:44:25:3a:47:42:ef:35:
         b6:40:d4:f0:29:e1:49:e7:e1:4e:fe:d9:21:e4:2b:37:18:cf:
         fe:b8:73:5c:01:01:8d:3f:c4:a7:fa:fa:9a:ef:fb:98:f9:a7:
         47:ca:94:9b:d7:c6:21:e3:dd:be:a1:a6:b0:4d:17:92:26:89:
         1c:d9:0f:8a:25:5e:04:14:2a:50:87:8b:bd:7d:12:c2:b7:c0:
         b0:2a:7b:4d:04:84:9d:e8:da:c3:33:8b:8a:44:03:55:fc:75:
         db:8d:24:c8:03:f5:51:ed:09:90:a0:1a:86:df:19:1b:13:9b:
         3f:59:31:11:60:3c:dc:23:d5:c7:48:84:63:50:f2:8a:5e:56:
         a8:bf:50:c2:3f:95:15:4d:5a:9d:bb:8f:32:01:9f:d2:91:ad:
         15:13:57:80:74:21:3e:b6:93:a6:ed:65:81:b0:b6:5c:ea:9b:
         56:d1:f9:c9:51:79:35:41:3f:55:c8:4d:22:91:ce:fc:0f:07:
         3c:b3:14:a6:40:bd:aa:a9:50:19:df:52:33:bb:60:f0:7f:38:
         d8:a1:a0:0a:d5:9d:5b:fb:be:e7:7d:65:f6:15:90:78:97:a0:
         63:5c:c3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:04:17 2026 by rpki-client