Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
File:                     ry1FO-u_318ptjrBZ1THjRsPy4g.mft (raw, json)
Hash identifier:          6tmV+2amFaOXuZoVpyODZIzoaCVtB9gTr7rYRsiu2+o=
Subject key identifier:   E8:39:9B:41:53:AF:4A:36:63:34:3E:0F:4D:91:74:56:EE:74:44:18
Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
Certificate issuer:       /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
Certificate serial:       0D4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
Manifest number:          0D41
Signing time:             Sun 20 Sep 2026 18:05:22 +0000
Manifest this update:     Sun 20 Sep 2026 18:05:22 +0000
Manifest next update:     Sun 27 Sep 2026 18:05:22 +0000
Files and hashes:         1: ry1FO-u_318ptjrBZ1THjRsPy4g.crl (hash: iP/LcFFabKbm0U1lhg1cqMKGMiktoUipht9iTARfHZw=)
                          2: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (hash: QMrRwT38xYy+ZuGesyjfpnO2OKgW20cjOQ+RUcdn94k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl
                          rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3406 (0xd4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91557BA, serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
        Validity
            Not Before: Sep 20 18:05:22 2026 GMT
            Not After : Sep 27 18:05:22 2026 GMT
        Subject: CN=6ab02062-8ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:43:e9:3d:c4:73:90:d2:ea:85:43:fa:c7:34:
                    07:65:e5:a6:98:1c:62:74:ac:4d:04:cc:e6:de:f7:
                    15:ec:22:d9:8d:e0:d6:ee:2f:96:bb:a3:3d:c3:db:
                    44:68:6b:0e:ac:0d:81:aa:bb:d0:7f:d0:93:68:1e:
                    32:19:00:4c:50:3f:c0:df:48:4e:64:27:fa:8a:5e:
                    56:6b:84:69:5b:56:3a:a6:c9:47:74:7c:9d:f3:1d:
                    c4:5b:51:a5:dd:fd:c0:d6:3c:46:63:84:e8:fd:7b:
                    8b:6b:ab:01:37:e5:d9:ac:28:dd:f2:2b:e8:17:de:
                    e5:d5:e6:72:77:16:8e:f7:2f:e6:f3:07:1e:b9:be:
                    ea:83:cb:69:ef:24:52:0c:77:13:69:a7:0c:1c:a0:
                    99:23:6e:63:07:4f:da:23:39:73:1c:81:64:4f:45:
                    d6:f5:ea:d2:f7:b1:40:14:2a:92:52:39:0f:d7:72:
                    7f:ed:bb:96:74:d1:34:9b:97:cc:78:7e:f9:19:c0:
                    d1:34:9f:05:c1:67:63:ac:bb:bc:cf:a4:d9:9b:79:
                    05:e4:2e:71:8c:d3:2a:6f:bf:e5:27:75:9c:88:4f:
                    a8:7f:71:70:88:90:2e:01:87:24:05:74:75:2b:35:
                    da:73:d3:09:13:ce:c4:e4:61:3f:2d:c6:0a:f5:cc:
                    62:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:39:9B:41:53:AF:4A:36:63:34:3E:0F:4D:91:74:56:EE:74:44:18
            X509v3 Authority Key Identifier:
                keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:93:e8:7c:38:76:e4:26:3e:b5:48:37:cc:b2:12:35:67:f6:
         75:eb:ec:90:71:db:f3:5f:4a:1f:68:6a:8e:ad:6e:98:7e:d5:
         a6:1f:d4:75:43:f4:30:4a:91:17:fb:62:c8:ab:09:6f:88:06:
         11:38:3c:98:52:26:84:c4:56:f8:12:a7:52:29:31:9f:4c:e6:
         71:55:1e:0c:24:ab:f0:f3:9a:9c:15:74:a6:30:9b:2c:a4:b3:
         ae:77:ae:3e:0e:ec:48:05:51:93:3b:1f:d5:ac:eb:2c:c5:83:
         28:2b:a0:93:b6:ee:72:6c:c1:c7:1e:21:82:47:e2:db:89:29:
         b9:f7:ea:c8:72:c2:a8:2b:6a:30:8d:a0:dc:23:a2:6c:65:52:
         39:92:bf:27:0e:37:f0:68:20:43:c9:d5:3b:43:f0:47:79:c6:
         73:94:ae:cf:15:be:e0:32:56:cb:e7:58:f4:9e:4d:6b:7c:9d:
         7f:b4:ed:36:60:a4:ef:1b:f9:49:11:e1:b2:82:56:75:be:26:
         5e:e5:b5:ca:3c:40:69:61:c3:a5:72:5d:5a:de:21:7a:50:c6:
         d5:c6:90:30:7e:96:a3:20:06:20:23:be:7b:60:79:dd:dd:0e:
         ec:c0:3e:99:4d:61:3d:10:0e:47:07:c4:cc:ff:18:eb:a5:ec:
         f4:32:bb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:28:03 2026 by rpki-client